Privacy Policy

Welcome to NiveshStar, operated by NiveshStar Pvt. Ltd. and its affiliates ("NiveshStar," "we," "our," or "us"). This Privacy Policy ("Policy") explains how we collect, use, share, and protect your personal information when you use our services or visit our website, www.niveshstar.com. By accessing or using NiveshStar, you agree to the terms outlined in this Policy. If you disagree with any part of this Policy, please do not use our services or access our website.

IMPORTANT: This Privacy Policy complies with the data protection laws of India (DPDP Act 2023), the European Union (GDPR), and other applicable regulations.

We may collect various personal information when you voluntarily provide it, including your name, contact details, financial information, identification documents, and other relevant data necessary to provide our financial services. This information is used to facilitate transactions, prevent fraud, and comply with regulatory requirements.

When you interact with our website, we may automatically collect certain information, including your IP address, browser type, operating system, and other browsing details. This information is used to analyze trends, administer the site, track user movements, and gather demographic information for aggregate use.

Nivesh Star uses cookies and similar technologies to enhance your user experience. These technologies allow us to remember your preferences, customize content, and provide you with a more personalized experience. By using our website, you consent to the use of cookies and similar technologies.

We take the security of your personal information seriously and implement industry-standard security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. While we strive to protect your data, we cannot guarantee its absolute security.

We recognise and acknowledge the value and importance of the protection of your Personal Information and ensure that the same will be used for the intended purpose(s).

By virtue of this Privacy Policy, we will collect/receive/share/process/use/store your Personal Information in accordance with applicable laws to provide you with the services, enhance the user experience, manage our relationship with You, build user insights, analyse data for the introduction of new services and features, and as may be required to comply with any regulatory requirements and contractual obligations, which may inter alia include:

• To provide effective services.
• To resolve any customer support related issues.
• To operate and improve the platform.
• To perform research and analysis for our understanding, information, analysis, services and technologies in order to provide all users improved quality of care; and ensuring that the content and advertising displayed are customized to your interests and preferences.
• To contact you via Phone, WhatsApp, SMS or email for appointments, technical issues, payment reminders, obtaining feedback and other security announcements.
• To send promotional and marketing emails from us or any of our channel partners via WhatsApp, SMS, email or third-party communication services such as Instagram, Facebook etc.
• To advertise products and services of Nivesh Star and third parties.
• To transfer information about you, if we are merged with another company.
• To share with our business partners for provision of specific services you have ordered so as to enable them to provide effective services to you.
• To administer or otherwise carry out our obligations in relation to any agreement you have with Us.
• For purposes of KYC verification.
• To build your profile/user account on the platform.
• To investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of our Terms of Use, breach of our agreement with You or as otherwise required by law.

We may share your information with our affiliates, service providers, and business partners for various purposes, including customer support, marketing, and analytics. We may also disclose your information to comply with legal requirements, enforce our policies, or protect our rights and property.

Our website may contain links to third-party sites or services that are not operated by us. We are not responsible for the content or privacy practices of these third-party sites. We encourage you to review the privacy policies of these third-party sites before providing any personal information.

We may collect the following information: Name and Contact Details. We may collect personal information directly from you, such as your name, email address, contact details, or other identifiers, when you register an account, make a purchase, or interact with certain features of the application. Your personal information is used to provide you with access to the application's features and functionalities, personalize your experience, and communicate with you about your account or transactions.

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

You have the right to control and manage your personal information within the application. You can update your account details, manage your communication preferences, or exercise your rights under applicable data protection laws. You can also choose to delete your account or request the deletion of certain personal information by contacting us through the provided channels or there is an option in app settings page.

When you grant permission, our application may access your device's camera or photo gallery to enable features that involve capturing, uploading.

The images you upload or capture within our application may be used for document verification in Video KYC by the application. We do not share your image data with third parties unless required by law or necessary to provide the services you have requested.

We access your location to verifying your identity and granting access to the application's features and functionalities.

We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over such third-party websites. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites. You should exercise caution and look at the privacy statement applicable to the website in question.

If you believe that any of your information with us is incorrect or incomplete, please email us as soon as possible at [email protected]. We will promptly correct any information found to be incorrect.

We fully recognize and understand the security implications of being a service provider with whom people trust their money. There are many safeguards we adopt in this regard some of these are technical, and some are structural. When it comes to data security, our goal is to ensure that: Your data is stored safely and securely passwords are one-way encrypted before being stored in the database for high security. All communication with you, or with mutual fund companies and other service providers are encrypted using the highest standards. Your data is not shared with anyone, unless you have explicitly requested us to do so to fulfil a transaction request.

All our communications are encrypted by 256-bit encryption, and our data is hosted with top-tier hosting service providers. Also, our data is continuously backed up to ensure continuity of operations.

Nivesh Star may keep records of communications, including phone calls received and made for making enquiries, orders, feedback or other purposes for rendering services effectively and efficiently. Nivesh Star will be the exclusive owner of such data and records. However, all records are regarded as confidential. Therefore, will not be divulged to any third party, unless required by law. We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Policy. Once the purpose is fulfilled or as required by applicable laws, we will securely delete or anonymize your personal data.

You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information provided as part of account registration. If your personal information changes, you may correct, delete inaccuracies, or amend information by making the change on our member information page or by contacting us through [email protected].

We reserve the right to update (change, modify, add and/or delete) the terms of this Privacy Policy from time to time, at our sole discretion, to reflect company initiatives, changes in the law or technology or changes in our practices regarding the collection and use of Personal Information.

When we update our Privacy Policy, we will intimate you of the amendments on your email address registered with us or on the platform. If you do not agree to the amendments, please do not use the platform or services any further. By continuing to use the platform, you will be deemed to have consented to the latest version of the Privacy Policy.

Nivesh Star and its affiliates shall not be liable for any indirect, incidental, or consequential damages arising from the use of our website or services. By using our services, you agree to indemnify and hold us harmless from any claims or demands arising from your use of our services.

This Policy is governed by the laws of India. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts in Patna, Bihar, India.

If you have any questions, concerns, or suggestions regarding this Policy or our privacy practices, please contact us at [email protected]. At NiveshStar, we are committed to protecting your privacy and providing you with a secure and seamless user experience.

We process your personal information based on the following lawful grounds:

• Explicit Consent: When you voluntarily provide information through our forms (demo requests, newsletter signup)
• Contract Performance: To fulfill services you have requested from us
• Legal Obligation: To comply with RBI, SEBI, GST, and other regulatory requirements
• Legitimate Interests: To improve our services, prevent fraud, and ensure platform security

Automatic Deletion: Contact information is automatically deleted 2 years after your last interaction with us. You can request immediate deletion at any time by emailing [email protected].

We only share your personal information with carefully selected third parties, ONLY when necessary to provide our services or comply with legal obligations. Below is a complete list:

We do NOT share your data with marketing partners or advertisers. Your data is used only for service delivery & legal compliance.

Your Preferences: You can manage your cookie preferences anytime by clicking the consent banner or updating your settings. Rejecting analytics cookies will NOT affect core platform functionality.

You have the following rights regarding your personal information:

• Right to Access: Request a copy of all personal data we hold about you. Email [email protected] with subject "DATA ACCESS REQUEST". We'll respond within 5 business days.
• Right to Rectification: Correct or update inaccurate personal data. You can update your profile in app settings or contact us.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data (except where legally required for tax/audit compliance). Use the "Delete Account" button in app settings for immediate deletion.
• Right to Data Portability: Receive your data in machine-readable format (JSON/CSV). Email us and we'll provide within 5 business days.
• Right to Object: Object to certain types of processing (e.g., marketing communications). Click "Unsubscribe" in emails or contact us.
• Right to Withdraw Consent: Withdraw consent for analytics tracking or email communications anytime.
• Right to Restriction: Request that we limit processing of your data in certain circumstances.

How to Exercise Your Rights: Email [email protected] with your request. Please include "DATA RIGHTS REQUEST" in the subject line. Include your name, email, and specific request.

For all privacy-related inquiries, grievances, or to exercise your data protection rights:

Email: [email protected]
Response Time: 5-7 business days
Escalation: If not satisfied, you can lodge a complaint with regulatory authorities (see below)

If you believe we have violated your data protection rights or this Privacy Policy, you can lodge a complaint:

• India (DPDP Act 2023): Data Protection Board of India (to be established) or file complaint with your state's consumer protection authority
• Europe (GDPR): Your national data protection authority (e.g., CNIL in France, ICO in UK)
• RBI Grievances: If issue relates to financial services, submit via RBI Integrated Ombudsman Scheme (IOS): cms.rbi.org.in

Please contact us first: Email [email protected] with details. We'll attempt to resolve within 30 days.

Your personal information is primarily processed in India. However, data may be transferred to the USA (Amazon AWS servers) for backup and disaster recovery purposes.

Data Protection Measures:

• All international transfers are encrypted using AES-256 encryption
• Data processing agreements are in place with all third-party processors
• EU-India data transfer complies with GDPR adequacy & Standard Contractual Clauses

When you submit a demo request or contact form on NiveshStar:

• You explicitly consent to us contacting you via phone/email about our services
• Your data will be retained for 2 years from the date of last contact
• Your data will NOT be shared with third parties (except as legally required)
• You can opt-out anytime by replying "STOP" to any communication

Consent Record: We maintain records of your consent (timestamp, method, checkbox status) for audit trail purposes as required by GDPR Article 7.

NiveshStar's services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from children under 18. If you are under 18, please do not use our services or provide any information to us.

If we become aware that a child has provided us with personal information, we will delete such information immediately. Please contact [email protected] if you believe we have collected information from a child.

We may update this Privacy Policy from time to time to reflect:

• Changes in applicable laws (e.g., new RBI/SEBI requirements)
• Our data processing practices
• New features or services we introduce

Your Notification: When we make material changes, we will:

• Email you at the address registered with us (minimum 7 days notice)
• Post the updated policy on our website with "Last Updated" date
• Require re-consent for new processing activities if required by law

Continuing Use: By continuing to use NiveshStar after policy amendments, you accept the updated Privacy Policy. If you do not agree, please stop using our services.

We implement comprehensive security measures to protect your personal information:

• Encryption in Transit: TLS 1.2+ for all data transmission (HTTPS only)
• Encryption at Rest: AES-256 for sensitive data in databases
• Password Security: Passwords hashed with bcrypt + salt (never stored in plaintext)
• Access Controls: Role-based access, multi-factor authentication for admin accounts
• Regular Audits: Security audits & penetration testing conducted annually
• No Hardcoded Credentials: API tokens managed via secure environment variables
• Intrusion Detection: Real-time monitoring for suspicious access patterns

Limitation: While we maintain robust security, no system is 100% secure. We encourage you to use strong passwords and protect your login credentials.

This Privacy Policy is governed by the laws of India, specifically:

• Digital Personal Data Protection Act (DPDP Act), 2023
• Information Technology Act, 2000
• Reserve Bank of India (RBI) Guidelines
• Securities and Exchange Board of India (SEBI) Regulations

Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of courts in Jaipur, Rajasthan, India.

If you have questions, concerns, or suggestions regarding this Privacy Policy or our privacy practices:

Email: [email protected]
Phone: +91-9730-984-358
Address: 267/543, Sector 26, Pratapnagar, Sanganer, Jaipur, RJ 302033, India
Business Hours: Monday-Friday, 9:00 AM - 6:00 PM IST

At NiveshStar, we are committed to protecting your privacy and providing you with a secure, transparent, and compliant user experience.