Privacy Policy

Learn how we collect, use, and protect your data

Last Updated: November 18, 2025

Our Commitment to Your Privacy

FINNOTIA protects your personal information and privacy. This policy explains how we collect, use, and safeguard your data.

1

Information We Collect

Personal Information:

  • Account: Name, email, phone (optional)
  • Profile: Investment preferences, interests
  • Communication: Support messages
  • Content: Comments, feedback

Auto-Collected:

  • Device: Type, OS, browser, IP
  • Usage: Pages viewed, time spent, clicks
  • Location: Approximate (IP-based)
  • Cookies: Session, analytics, preferences
  • App Analytics: Crash reports, metrics

⚠️ What We DON'T Collect:

  • No Financial Data: Bank accounts, cards, UPI
  • No Trading Credentials: Demat, passwords
  • No Government IDs: Aadhaar, PAN, passport
  • No Investment Portfolio: Your holdings
2

How We Use Your Info

We use collected information for:

🎯 Core Services:

  • Create and manage your account
  • Provide IPO analysis & market updates
  • Send notifications about IPO updates
  • Process requests and respond to inquiries

📊 AI & ML:

  • Improve AI analysis models
  • Personalize content & recommendations
  • Analyze usage patterns
  • Train ML systems (anonymized data)

🔔 Communications:

  • Transactional emails (verification, reset)
  • Push notifications for IPO updates
  • Marketing emails (with consent)
  • Support responses

🛡️ Security:

  • Detect fraud & abuse
  • Protect against security threats
  • Comply with legal obligations
  • Enforce Terms & Conditions
3

Data Storage & Security

🔒 Where We Store:

  • Cloud: Firebase (India), MongoDB (India/Singapore)
  • Residency: Indian data stored in India
  • Backups: Regular encrypted backups

🛡️ Security Measures:

  • Encryption: SSL/TLS, AES-256
  • Access Controls: RBAC, limited employee access
  • Authentication: Secure hashing, optional 2FA
  • Monitoring: 24/7 security, intrusion detection
  • Compliance: IT Act 2000, Security Practices Rules 2011

⚠️ Note: No internet transmission is 100% secure. We continuously work to protect your information.

4

Third-Party Services

We share data with:

🤖 AI & Analytics:

  • Google Gemini: IPO analysis
  • Perplexity AI: News summarization
  • Google Analytics: User behavior
  • Firebase: App performance

Note: Only anonymized data shared

☁️ Infrastructure:

  • Firebase: Auth, database, storage, notifications
  • MongoDB Atlas: Database hosting
  • Azure/AWS/Vercel: Web hosting, CDN

📧 Communications:

  • Email service providers
  • SMS gateway for OTP

❌ We DON'T:

  • Sell your personal information
  • Share with advertisers or data brokers
  • Use data for unrelated purposes
5

Your Privacy Rights

You have the following rights:

📖 Right to Access

Request copy of your data

✏️ Right to Correction

Update inaccurate info

🗑️ Right to Deletion

Request account deletion

📤 Data Portability

Export your data

🚫 Right to Opt-Out

Unsubscribe from emails

⚖️ Right to Object

Object to data processing

How to Exercise Rights:

Contact us at:

We'll respond within 30 days

6

Data Retention

We retain your information as needed:

  • Active Account: Until deletion request
  • Activity Logs: 90 days
  • Backups: Up to 180 days
  • Inactive Accounts: Auto-delete after 2 years
  • Legal Requirements: Retained as per law

Upon Account Deletion:

  • Personal info deleted within 30 days
  • Anonymized data may be retained
  • Some data retained for legal compliance
7

Cookies & Tracking

We use cookies to improve your experience:

🔑 Essential (Required)

Authentication, security, core functionality

📊 Analytics (Optional)

Understand user interactions

⚙️ Preference (Optional)

Remember settings, personalize experience

Control cookies via browser settings. Disabling may affect functionality.

8

Children's Privacy

🔞 Age Restriction:

FINNOTIA is for users 18+ years. We don't knowingly collect data from minors. Parents, contact us if your child provided info.

9

International Transfers

We prioritize storing data in India. Some third-party services may process data outside India. We ensure:

  • Compliance with Indian data protection laws
  • Adequate safeguards in place
  • Anonymized data transferred when possible
  • Encryption for all data in transit
10

Policy Changes

We may update this policy. Changes notified via:

  • Email notification
  • In-app notification/banner
  • Updated "Last Modified" date

Continued use = acceptance of updated policy

11

Compliance

This policy complies with:

  • IT Act, 2000 and amendments
  • IT (Security Practices) Rules, 2011
  • SEBI Guidelines (where applicable)
  • DPDP Act, 2023 (when enforced)

Privacy Questions?

Questions about this Privacy Policy or data handling? Contact us:

Address: FINNOTIA, Mumbai, Maharashtra, India

Effective: November 18, 2025