Privacy Policy | Aarvasa

1. Introduction

Aarvasa Innovations Private Limited ("Aarvasa", "we", "us", or "our") is committed to protecting your privacy when using our website, apps, APIs, or services ("Services"). By using our Services, you consent to this Privacy Policy. If you disagree, do not use our Services. This policy works alongside our Terms of Service.

2. Data Collection: Categories and Methods

A. User-Provided Data:

Account Info: Name, DOB, Aadhaar/PAN, address, phone, email, job info.
Transactions: UPI, card, bank details, investment behavior.
Support: Emails, chats, feedback, survey responses.

B. Automatically Collected Data: IP, browser, device, clickstream (via Google Analytics 4).

C. Third-Party Sources: LinkedIn/X profiles via SSO, credit info (e.g., CIBIL) with consent.

3. Purpose of Data Processing

Contractual: Account, transactions, support.
Legal: Fraud, tax (Form 26AS), court orders.
Legitimate Interest: Optimization, marketing (opt-out available).
Consent: Newsletters, third-party sharing.

4. Disclosures and Data Sharing

Service Providers: AWS (Mumbai), Razorpay, BillDesk.
Regulators: SEBI, RBI, law enforcement.
Business Transfers: In mergers/acquisitions with notice.

We never sell your data for advertising purposes.

5. User Rights and Controls

Access: Export data from Dashboard in CSV/PDF.
Rectify/Delete: Fix errors unless retention is required.
Marketing: Unsubscribe from emails or use Google Ads Settings.

6. Security Measures

AES-256 for storage, TLS 1.3 in-transit encryption.
Role-based access and employee biometrics.
Blockchain logs for sensitive transactions.

User Tips: Enable 2FA. Never share passwords insecurely.

7. Data Retention Schedule

KYC: 10 years post-closure
Transaction History: 7 years (as per IT Act)
Marketing Preferences: Until user opts out

8. International Transfers

EU/UK data is processed in India with Standard Contractual Clauses (SCCs).

9. Policy Changes

We notify users of major changes 30 days in advance via email and app banners.

10. Grievance Redressal

Data Protection Officer (DPO):

Mailing Address: Aarvasa Innovations Pvt. Ltd., 3 Flr, off Windsar Sq Opp,Vishal Megamart Kolar Rd, Kolar Road,Huzur, Bhopal- 462042, Madhya Pradesh.

Noida, UP – 201301

11. Jurisdiction-Specific Disclosures

California (CCPA):

Opt out of data "sales" (we don't sell).
Submit requests via privacy.aarvasa.com/ccpa

EU (GDPR): Refer to Section 3 for Legal Basis. Right to file complaints with authorities.

This version replaces all previous editions.

1. Introduction

2. Data Collection: Categories and Methods

A. User-Provided Data:

Account Info: Name, DOB, Aadhaar/PAN, address, phone, email, job info.
Transactions: UPI, card, bank details, investment behavior.
Support: Emails, chats, feedback, survey responses.

B. Automatically Collected Data: IP, browser, device, clickstream (via Google Analytics 4).

C. Third-Party Sources: LinkedIn/X profiles via SSO, credit info (e.g., CIBIL) with consent.