Privacy Policy
PaisaGraph is a SEBI-registered Investment Adviser. This policy explains what information we collect, why we collect it, how we protect it, and the choices you have over your data.
1. Introduction
PaisaGraph ("we", "us", "our") uses and protects any information that you share with us when you use this website, our mobile applications, or our advisory services. We understand that trust is fundamental to our relationship with you, and we are committed to safeguarding your privacy while you use our platform.
In the course of providing our services — including mutual fund advisory, IPO advisory, private equity access, and tax planning tools — we may collect and process confidential customer information. We have taken reasonable technical and organisational measures to protect the confidentiality of this information. We may, however, be required to disclose information where mandated by law, court order, or a competent regulatory or government authority, including the Securities and Exchange Board of India (SEBI).
By using our website or services, you consent to the collection and use of your information as described in this policy. If you do not agree with the terms of this policy, please do not use our website or services.
2. Information We Collect
Name & Contact Details
When you register for an account, book a discovery call, or interact with our tools, we collect identifiers such as your name, email address, phone number, and city. This information is used to personalise your experience and to enable account-related communication. You may update these details at any time from your account settings or by writing to support@paisagraph.com.
Financial & KYC Information
As a SEBI-registered Investment Adviser, we are required to collect PAN, bank account details, income range, risk profile, and other Know Your Customer (KYC) information before onboarding you as a client or executing transactions on your behalf. This data is shared only with KYC Registration Agencies (KRAs), depositories, Registrar & Transfer Agents (RTAs), and Asset Management Companies (AMCs) as required to service your account.
Identity Verification (Video KYC & Documents)
Our application may request access to your device camera or photo gallery, with your explicit permission, primarily to complete Video KYC and document verification (such as PAN, Aadhaar, or address proof). This data is used solely for identity verification and is not shared with third parties except where required by law or regulation.
Location Data
With your permission, we may access your device location to support identity verification during onboarding and to enable location-relevant features. You can disable location access at any time through your device settings, though this may limit certain features.
Usage & Device Data
We automatically collect certain information when you visit our website, including your IP address, browser type, device identifiers, pages visited, and time spent on the platform. This helps us understand how our services are used and improve platform performance and security.
3. How We Use Your Information
We use the information we collect to:
- Provide advisory services — matching you with the right advisor, preparing portfolio recommendations, and executing instructions you give us.
- Complete regulatory KYC/AML checks as mandated by SEBI, PMLA, and other applicable regulations.
- Communicate with you — sending confirmations, statements, service updates, and responses to your enquiries.
- Improve our products — analysing usage patterns to refine our tools, calculators, and advisory workflows.
- Prevent fraud and abuse — detecting suspicious activity and protecting the integrity of our platform.
- Meet legal obligations — responding to lawful requests from regulators, courts, or government authorities.
5. Data Security
We implement industry-standard physical, electronic, and procedural safeguards to protect your information from unauthorised access, alteration, disclosure, or destruction. Key measures include:
- 256-bit encryption for all data in transit and at rest.
- ISO 27001 certified information security practices.
- Annual penetration testing conducted by an independent security firm.
- Tier-1 hosting infrastructure with continuous, redundant data backups.
- Role-based access controls limiting internal access to client data on a need-to-know basis.
While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. We encourage you to use strong, unique passwords and to notify us immediately at support@paisagraph.com if you suspect unauthorised access to your account.
7. Third-Party Links
Our website may contain links to third-party websites, such as fund house pages, research reports, or the SEBI SCORES portal. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policy of any third-party site before sharing personal information with it.
8. Data Retention
We retain your personal and transaction data for as long as your account remains active, and thereafter for the period mandated by SEBI record-keeping requirements and applicable Indian law (typically a minimum of five to eight years from the date of the last transaction). Data no longer required is securely archived or deleted.
9. Your Rights & Controlling Your Information
You have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your data, subject to our regulatory record-keeping obligations.
- Withdraw consent for non-essential data processing, such as marketing communications.
To exercise any of these rights, please write to support@paisagraph.com. If any information we hold about you is incorrect, please let us know promptly and we will correct it as soon as possible.
10. Children's Privacy
Our services are intended for individuals who are at least 18 years of age and legally capable of entering into investment agreements. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it promptly.
11. Regulatory Compliance & Grievance Redressal
PaisaGraph is registered with SEBI as an Investment Adviser (Registration No. INA000012345). If you are dissatisfied with how your data or query has been handled, you may escalate to our Compliance Officer, who will respond within 24 hours.
If your complaint remains unresolved after 30 days, you may raise it with SEBI through the SEBI Complaints Redress System (SCORES) at scores.gov.in, or via the Online Dispute Resolution (ODR) portal for securities market disputes.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable regulation. Material changes will be notified via email or a prominent notice on our website. The "Last updated" date at the top of this page indicates when this policy was last revised. We encourage you to review this page periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please reach out to us: