Privacy Policy

1. Scope

This policy applies to personal data processed by SIFPE through the SIFPE website, mobile application and support channels. It is written to comply with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them, and with the data requirements of SEBI, AMFI, IRDAI and the Prevention of Money Laundering Act.

2. Data we collect

Depending on what you use, we collect:

• Account data: name, email, mobile number, password (stored hashed), login provider (Google or Facebook) if you use social sign-in.
• KYC data: PAN, Aadhaar or other officially valid documents, date of birth, address, photograph, bank account details, FATCA and nominee details. Collected only when you transact.
• Financial data: investments placed through SIFPE, goals you set, insurance policies you add, loan applications and income details you provide.
• Support data: messages sent to our team, the chat assistant and support tickets.
• Technical data: device type, browser, IP address, approximate location, pages viewed and crash logs.

3. Why we use it

We process personal data to:

• create and secure your account
• complete KYC and execute mutual fund, insurance and loan requests you initiate
• show your portfolio, goals and dashboard
• respond to support requests and grievances
• meet legal and regulatory obligations, including record keeping, reporting and anti money laundering checks
• improve the Platform and, with your consent, send you product updates

4. Who we share it with

We share data only as needed to deliver the service you asked for:

• Asset Management Companies, registrars (CAMS, KFintech), exchanges and payment processors, to execute investments
• Insurers and their underwriting partners, for quotes and policies
• Partner banks and NBFCs, for loan applications
• KYC Registration Agencies and CKYC, for identity verification
• Infrastructure providers that host and secure the Platform (database, authentication, email, analytics), bound by contract to protect your data
• Regulators, courts and law enforcement where required by law

5. What we do not do

We do not sell your personal data. We do not share it with advertisers. The chat assistant does not send your account data to the AI model beyond the text you type into it.

6. Security

Data is encrypted in transit and at rest. Access is restricted by role, so only staff who need to handle your record can see it. PAN numbers are masked for employee views. Documents you upload are stored in private storage that is not publicly reachable.

No system is perfectly secure. If we become aware of a breach affecting your data we will notify you and the Data Protection Board as required by law.

7. Retention

Account and transaction records are retained for the period required by SEBI, AMFI, IRDAI and the PMLA (currently up to eight years after the relationship ends, and longer if a dispute or investigation is open). Support tickets are kept for three years. Technical logs are kept for up to one year. Data that is no longer needed is deleted or anonymised.

8. Your rights

You can:

• see and download the personal data we hold about you
• correct inaccurate details
• ask us to delete your account and data, subject to records we must keep by law
• withdraw consent for marketing at any time
• nominate a person to exercise these rights on your behalf

9. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in and remember preferences. We do not use third party advertising cookies. You can clear these from your browser settings; some features will then require you to sign in again.

10. Children

The Platform is for adults. We do not knowingly collect data from anyone under 18. Minor folios can be opened by a guardian through the AMC's process.

11. Changes

We may update this policy. The date at the top shows the current version. Significant changes will be announced on the Platform.

12. Grievance and data protection contact

Grievance Officer: [NAME], hello@sifpe.com, +91 94141 57130. We acknowledge data requests within 48 hours and resolve them within 30 days.