1. Information We Collect

a. Personal Data

• Individual Investors: We collect personal details such as your name, address, date of birth, parents/spouse details, and contact details.
• For KYC purposes, we collect your PAN and Aadhaar through our authorized third-party provider, AuthBridge. Please note that Aadhaar details are not stored on our system. PAN details are saved in encrypted format as this information required to meet SEBI requirements
• Corporate Investors: We collect additional information including DIN, shareholding percentages of key promoters, company PAN, and GSTIN. PAN and GSTIN are stored in masked form.

b. Financial Data

• Bank account numbers, demat account numbers, and details of your trading activities in domestic equity, mutual funds, and fixed deposits.
• Account numbers stored in our platform are masked.
• For retail investors, financial details are accessible only by the investor.
• For advisor-linked investors, only the last four digits of bank/demat accounts are visible to the authorized advisor.

2. Purpose of Data Collection

We use your data for:

• Portfolio Management – To manage your investment portfolio.
• Financial Analysis – To generate insights and reports.
• Regulatory Compliance – To comply with SEBI and other applicable regulations.

3. Data Sharing

We may share data strictly on a need-to-know basis with:

• AuthBridge – For KYC verification.
• MF Utilities (MFU) – To fetch mutual fund transactional data.
• Future integrations may include banks and brokerage firms to directly source trading activity data.

We do not sell or rent your personal data to third parties.

4. International Data Transfers

At present, we do not transfer your data outside India. Should this change, we will comply with applicable Indian laws on cross-border data transfer.

5. Data Security

We implement appropriate technical and organizational measures including:

• Data Masking – Account details stored in masked format.
• SSL Encryption – For secure transfer between front end and database.
• Access Controls – Restricted access to sensitive information.
• Regular Security Audits – To ensure ongoing compliance and safety.

6. Data Retention

• Financial Data: Retained for 7 days after account closure.
• Personal Data: Retained for 3 months after account closure.
• Basic Data (e.g., name, email ID, phone number, user ID): Retained until a written deletion request is received, for fraud prevention and security purposes.

7. Indemnity

As per Indian law, you have the right to:

• Access your personal data.
• Correct/Update inaccurate or incomplete data.
• Download your portfolio in Excel or PDF format.
• Request Deletion of your data, subject to regulatory and contractual obligations.

Requests may be sent to contactus@investlytics.in.

8. Cookies & Tracking Technologies

Currently, InvestLytics does not use cookies on its website or platform.

9. Policy Updates

We may update this Privacy Policy from time to time. Users will be notified of material changes via our website and secure portal notifications.

10. Contact Us

For queries or concerns, please write to us at:

• Email: contactus@investlytics.in
• Address: DLF Phase 4 - Gurugram