Privacy Policy

We collect only the information necessary to provide our educational financial analysis service: FORM-SUBMITTED DATA (you provide this voluntarily): • Monthly net income • Monthly living expenses • Emergency fund amount • Total outstanding debt/loans • Existing savings and investment values • Primary financial goal • Investment risk preference PAYMENT DATA: • Payment confirmation status via Razorpay (we do NOT store card numbers, UPI IDs, or net banking credentials — all payment data is handled exclusively by Razorpay's PCI-DSS compliant infrastructure) • Email address (for payment confirmation and report delivery) TECHNICAL DATA (collected automatically): • Browser type, device type, operating system • IP address (anonymised after 30 days) • Pages visited, session duration • Cookies and local storage tokens for session management

We use collected data strictly for: (a) CORE SERVICE: Generating your financial health score and personalised investment roadmap based on the data you provide. (b) PAYMENT PROCESSING: Verifying ₹1 payment completion via Razorpay webhooks. (c) REPORT DELIVERY: Associating your report with your session or account so you can access it again. (d) PRODUCT IMPROVEMENT: Anonymised, aggregated analysis of how users interact with the platform (no individual data is used). (e) LEGAL COMPLIANCE: Maintaining records as required by applicable Indian law. WE DO NOT: • Sell your data to third parties. • Share your financial data with any advertiser or marketing partner. • Use your financial data for credit scoring or credit reporting. • Share your data with any financial product company for solicitation.

FORM DATA: Financial data submitted through the advisor form is processed in-session and is not stored permanently on our servers unless you explicitly create an account. If you do not create an account, your data is discarded at session end. ACCOUNT DATA: If you create an account, your form-submitted data and generated reports are stored encrypted on our servers and retained for 24 months from the date of last use, after which they are permanently deleted. PAYMENT RECORDS: Transaction records (amount, status, date, anonymised payer reference) are retained for 7 years as required by the Information Technology Act, 2000 and applicable GST regulations. TECHNICAL LOGS: Server logs are retained for 90 days for security and debugging, then automatically purged.

We implement industry-standard security measures including: • AES-256 encryption for all stored financial data • TLS 1.3 encryption for all data in transit • Payment processing via Razorpay, which is PCI-DSS Level 1 certified • Access controls limiting employee access to personal data to only those who require it No method of transmission or storage is 100% secure. By using the Platform, you acknowledge and accept this inherent risk. We will notify affected users in the event of a material data breach as required by applicable law.

We use the following types of cookies: ESSENTIAL COOKIES: Required for the Platform to function (session management, payment flow). Cannot be disabled. ANALYTICS COOKIES: Used to understand usage patterns in aggregate. These are anonymised and not linked to individual identity. You can opt out via your browser settings. We do NOT use advertising cookies, tracking pixels from social media platforms, or retargeting technologies.

We use the following third-party services that may process your data: • RAZORPAY: Payment gateway. Processes your payment transaction. See Razorpay's Privacy Policy at razorpay.com/privacy. • VERCEL / CLOUD HOSTING: Infrastructure provider. Processes server requests. Data remains in India or within EU-equivalent jurisdictions. We have data processing agreements with all our service providers and select only those who maintain adequate data protection standards.

You have the following rights regarding your personal data: (a) RIGHT TO ACCESS: Request a copy of the personal data we hold about you. (b) RIGHT TO CORRECTION: Request correction of inaccurate or incomplete data. (c) RIGHT TO DELETION: Request deletion of your data, subject to our legal retention obligations. (d) RIGHT TO PORTABILITY: Receive your data in a structured, machine-readable format. (e) RIGHT TO WITHDRAW CONSENT: Withdraw any consent you have given for processing your data. To exercise any of these rights, email: info@microstocks.in. We will respond within 30 days.

This Platform is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at info@microstocks.in and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. We encourage you to review this page periodically.