Data Deletion Policy

Under the DPDP Act 2023, you have the right to request erasure of your personal data in the following circumstances:

• You withdraw your consent for data processing
• Your personal data is no longer necessary for the original purpose
• Your personal data has been unlawfully processed
• Erasure is required for compliance with legal obligations
• You object to processing and there are no overriding legitimate grounds

3.1 Personal Information:

• Name, email address, and phone number
• Authentication credentials and session data
• Profile information and preferences
• Communication history and preferences

3.2 Financial Data:

• Portfolio information (mutual funds, stocks, investments)
• Financial statements and transaction data
• Investment goals and risk assessment responses
• Analysis results and recommendations

3.3 Technical Data:

• Device information and browser data
• Usage analytics and interaction logs
• Cookies and tracking information
• System-generated metadata

4.1 Account-Based Deletion:

• Log into your account and navigate to Account Settings
• Select "Delete Account" or "Data Deletion Request"
• Follow the guided process to confirm your request
• Verify your identity through OTP or email confirmation

4.2 Email Request:

4.3 Written Request:

5.1 Identity Verification: To protect your privacy, we must verify your identity before processing deletion requests through:

• OTP sent to your registered phone number
• Email confirmation from your registered email address
• Security questions or authentication challenges
• Government-issued ID verification (for written requests)

5.2 Request Validation: We validate requests to ensure they are legitimate and not fraudulent.

6.1 Acknowledgment: We acknowledge receipt of your deletion request within 72 hours.

6.2 Processing Time: Most deletion requests are processed within 30 days of verification.

6.3 Complex Requests: Complex requests may take up to 90 days, and we will keep you informed of progress.

6.4 Confirmation: You will receive confirmation once deletion is complete.

7.1 Complete Deletion: We delete data from all our systems including:

• Production databases and storage systems
• Backup and archive systems
• Analytics and logging systems
• Third-party service providers

7.2 Anonymization: In some cases, we may anonymize data instead of deletion if required for legitimate purposes.

7.3 Technical Limitations: Some data may persist in system logs or backups for up to 90 days for technical reasons.

8.1 Legal Requirements: We may retain certain data when required by law, including:

• Financial transaction records (as per RBI guidelines)
• Tax and audit-related information
• Legal dispute or investigation materials
• Regulatory compliance records

8.2 Legitimate Interests: Data may be retained for:

• Fraud prevention and security purposes
• Ongoing legal proceedings
• Debt collection and financial obligations

10.1 Selective Deletion: You may request deletion of specific data categories:

• Portfolio data only
• Communication history
• Analysis results
• Usage analytics

10.2 Account Deactivation: Alternative to deletion - temporarily deactivate your account while preserving data.

11.1 Service Providers: We will instruct third-party service providers to delete your data from their systems.

11.2 External Platforms: Data shared with external platforms (app stores, social media) may require separate deletion requests.

11.3 Verification: We obtain confirmation from third parties regarding data deletion.

12.1 Grievance Process: If unsatisfied with our response, contact our Grievance Officer:

12.2 Regulatory Complaints: You may also file complaints with the Data Protection Board of India.

For data deletion requests or questions about this policy: