Privacy Policy | Aarvasa

1. Introduction

Aarvasa Innovations Private Limited ("Aarvasa", "we", "us", or "our") is committed to protecting your privacy when using our website, apps, APIs, or services ("Services"). By using our Services, you consent to this Privacy Policy. If you disagree, do not use our Services. This policy works alongside our Terms of Service.

2. Data Collection: Categories and Methods

A. User-Provided Data:

Account Info: Name, DOB, Aadhaar/PAN, address, phone, email, job info.
Transactions: None through the website. Online payments are not currently available, so we do not collect UPI, card or bank details here.
Support: Emails, chats, feedback, survey responses.

B. Automatically Collected Data: IP, browser, device, clickstream (via Google Analytics 4).

C. Third-Party Sources: LinkedIn/X profiles via SSO, credit info (e.g., CIBIL) with consent.

3. Purpose of Data Processing

Contractual: Account, transactions, support.
Legal: Fraud, tax (Form 26AS), court orders.
Legitimate Interest: Optimization, marketing (opt-out available).
Consent: Newsletters, third-party sharing.

4. Disclosures and Data Sharing

Service Providers: AWS (Mumbai). No payment provider is used, as online payments are not currently available.
Regulators: SEBI, RBI, law enforcement.
Business Transfers: In mergers/acquisitions with notice.

We never sell your data for advertising purposes.

5. User Rights and Controls

Access: Export data from Dashboard in CSV/PDF.
Rectify/Delete: Fix errors unless retention is required.
Marketing: Unsubscribe from emails or use Google Ads Settings.

6. Security Measures

AES-256 encryption for stored data and backups; TLS (1.3 supported) for data in transit.
Role-based access: administrative functions are limited to administrator accounts.
See our Security Policy for what is in place and what is still in progress.

User Tips: Use a strong, unique password or sign in with Google, and sign out on shared devices. Never share passwords insecurely.

7. Data Retention Schedule

KYC: 10 years post-closure
Transaction History: 7 years (as per IT Act)
Marketing Preferences: Until user opts out

8. International Transfers

EU/UK data is processed in India with Standard Contractual Clauses (SCCs).

9. Policy Changes

We notify users of major changes 30 days in advance via email and app banners.

10. Grievance Redressal

Data Protection Officer (DPO):

Mailing Address: Aarvasa Innovations Pvt. Ltd., 3 Flr, off Windsar Sq Opp,Vishal Megamart Kolar Rd, Kolar Road,Huzur, Bhopal- 462042, Madhya Pradesh.

Noida, UP – 201301

11. Jurisdiction-Specific Disclosures

California (CCPA):

Opt out of data "sales" (we don't sell).
Submit requests via privacy.aarvasa.com/ccpa

EU (GDPR): Refer to Section 3 for Legal Basis. Right to file complaints with authorities.

This version replaces all previous editions.