Privacy Policy

Last updated: 16 July 2026 · Draft — pending legal review

This is a first draft, not a final legal document. Have a lawyer review this before launch, particularly the DPDP Act compliance language and the Grievance Officer contact details.

This Privacy Policy explains how Digital Nomads Technologies Pvt. Ltd. ("we", "us") collects, uses, and protects personal data when you use investbiz ("the Platform"), in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Data we collect

Account data: name, email address, and authentication details (via Supabase Auth) when you sign up.
Usage data: pages visited, features used, and general interaction data, collected to improve the Platform.
Device/technical data: IP address, browser type, and similar diagnostic information.

We do not collect financial account credentials (e.g. broker/demat login details) unless you explicitly connect a broker integration in the future, which would be governed by additional consent and terms at that time.

2. How we use your data

To create and manage your account.
To provide and personalize the Platform's analytics and dashboard features.
To communicate service updates, security notices, or (with consent) product news.
To comply with legal obligations.

3. Legal basis for processing

We process personal data on the basis of your consent (given at sign-up), and where necessary to perform our contract with you (providing the Platform) or to comply with law, consistent with the DPDP Act.

4. Where your data is stored

Account and application data is stored on Supabase infrastructure hosted in the Mumbai (India) region, chosen specifically to keep personal data of Indian users within India in line with data-localization considerations under the DPDP Act.

5. Data sharing

We do not sell personal data. We may share limited data with:

Infrastructure/service providers (e.g. Supabase, hosting providers) strictly to operate the Platform.
Authorities, where required by law.

6. Cookies

We use essential cookies/local storage for authentication sessions. We do not currently use third-party advertising trackers.

7. Your rights

Under the DPDP Act, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request erasure of your data, subject to legal retention requirements.
Withdraw consent at any time (this may limit your ability to use the Platform).

To exercise these rights, contact our Grievance Officer below.

8. Data retention

We retain account data for as long as your account is active, and for a reasonable period afterward to comply with legal obligations or resolve disputes.

9. Security

We use industry-standard measures (encrypted connections, access controls, and authenticated API access) to protect your data, but no system is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

The Platform is not directed at individuals under 18. We do not knowingly collect personal data from minors.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or email.

12. Grievance Officer

In accordance with the DPDP Act, our Grievance Officer can be reached at:
Email: privacy@investbiz.app (placeholder — update with a real, monitored address)
Address: Digital Nomads Technologies Pvt. Ltd., Kanpur, Uttar Pradesh, India (placeholder — update with registered address)