Privacy Policy

1. Data Fiduciary

FinanceGenius.ai ("we", "us", "Platform") operates as the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDPA). We determine the purposes and means of processing your personal data when you use our platform.

Grievance Officer: For any data protection queries or complaints, contact our Grievance Officer at privacy@financegenius.ai. We will acknowledge your request within 48 hours and resolve it within 30 days.

2. Personal Data We Collect

3. Legal Basis for Processing

We process your data based on:

• Consent — Your explicit, granular consent collected during registration and manageable at any time via Settings > Manage Consents.
• Legitimate use — Processing necessary to provide the financial advisory service you requested.
• Legal obligation — Retention of certain records as required by RBI regulations and applicable Indian law.

4. Third-Party Data Sharing

We share your data only with entities necessary to provide our services. Each third party acts as a Data Processor under our instructions. See our Data Practices page for a detailed breakdown of each third party, what data is shared, and their retention policies.

• Anthropic (Claude AI) — Chat messages for AI financial advice
• OpenAI — Query embeddings for knowledge base search (no PII)
• Perfios / Account Aggregator — Financial documents (consent-based)
• SMS/OTP provider — Phone number for verification only

We never sell your personal data. We do not share data with advertisers or marketing networks.

5. Data Storage and Security

• All data is stored on servers located within India (data localisation).
• Sensitive PII (PAN, financial data) is encrypted at rest using AES-256 / Fernet encryption.
• All data in transit is protected via TLS 1.3.
• Passwords are hashed using bcrypt (never stored in plaintext).
• Access to customer data is logged and auditable.

6. Data Retention

• Account data: Retained while your account is active. Deleted 30 days after a deletion request.
• Chat history: Retained for 12 months, then auto-deleted unless you delete earlier.
• Financial documents: Retained for the duration of the analysis session only; not stored permanently.
• Regulatory records: KYC/transaction data retained for up to 7 years as required by RBI regulations.
• Audit logs: Anonymised logs retained for 7 years for compliance purposes.

7. Your Rights under DPDPA

As a Data Principal, you have the right to:

• Access — View all personal data we hold about you (Settings > Download My Data).
• Correction — Update or correct inaccurate data via your Profile.
• Erasure — Request permanent deletion of your account and data (Settings > Delete Account). A 30-day grace period applies.
• Portability — Export your data in machine-readable JSON format.
• Withdraw Consent — Revoke any optional consent at any time via Settings > Manage Consents. Withdrawal of service-essential consents may limit functionality.
• Grievance Redressal — File a complaint with our Grievance Officer or escalate to the Data Protection Board of India.

8. AI-Powered Advisory Disclaimer

FinanceGenius.AI uses artificial intelligence to provide financial product comparisons and general guidance. This does not constitute financial advice under SEBI or RBI regulations. We are a technology platform, not a financial advisor, broker, or lender. Always consult a qualified financial professional before making financial decisions.

9. Changes to This Policy

We may update this policy to reflect changes in law or our practices. Material changes will be communicated via email or in-app notification. Continued use of the platform after changes constitutes acceptance, though we will re-obtain consent where required by DPDPA.

10. Contact Us

For privacy-related inquiries:
Email: privacy@financegenius.ai
Grievance Officer: Available via the above email
Response time: 48 hours acknowledgment, 30 days resolution