Privacy Policy

Privacy Policy

Privacy Policy

Effective Date: [●] 

This Privacy Policy explains how iArista Artha Pvt. Ltd. (“iArista”, “Company”, “we”, “us”, or “our”) collects, uses, stores, processes, and protects your personal information when you access or use our mobile application(s), website www.iarista.com, and related platforms (collectively, the “Platform”) to avail financial and investment-related services (“Services”). 

By accessing or using our Platform, you consent to the practices described in this Privacy Policy.

 
1. Introduction 

Privacy encompasses an individual’s autonomy, dignity, and control over personal data and its collection, usage, and disclosure. At iArista, we recognize the importance of protecting your personal and financial information and maintaining your trust.

 We adopt appropriate technical, operational, and administrative safeguards to protect Personal Information, Sensitive Personal Data or Information (“SPDI”), and financial data from unauthorized access, misuse, or loss. 


2. Applicability & Governing Law 

This Privacy Policy applies to all Users (“you”, “your”) who visit, register, or transact on the Platform. 

This Policy is governed by Indian law, including the following laws, as updated / amended from time to time: 
          The Information Technology Act, 2000 
          IT (Reasonable Security Practices and SPDI) Rules, 2011 
          Digital Personal Data Protection Act, 2023 
          SEBI and other sectoral regulations 
If you do not agree with this Policy, please do not access or use the Platform. 


3. Eligibility 

You must be at least 18 years old and provide accurate identity details. 
Use of the Platform is personal and non-transferable. 


4. Information We Collect 

We may collect information: 

a) Personal & KYC Information 

          Name, DOB, gender, contact details 
          PAN, Aadhaar (where permitted) - collected and transmitted directly to our KYC service providers without storage on our systems
          Bank account details 
          Nominee information 
          Identity/address proofs 

b) Financial Information 
          Mutual fund holdings 
          Transaction history 
          SIP details 
          Portfolio and goal-planning data 

c) Device & Usage Data 
          IP address 
          Device identifiers 
          OS and browser details 
          App usage patterns 

d) Communications & Feedback 
          Queries, emails, recordings 
          Survey responses 
          Support interactions 


5. How We Collect Information 

Information is collected when: 
          You register or complete KYC 
          You transact 
          You contact us 
          Authorized parties provide information 
          Service providers verify identity/fraud 
          You voluntarily submit feedback 


6. How We Use Your Information 

We use data for: 
          Processing transactions 
          Account servicing 
          Regulatory compliance 
          Fraud prevention 
          Customer support 
          Product improvement 
          Analytics and research 
          Marketing communications (opt-out available) 
          Legal obligations 
          Referral or distributor arrangements 

Automated tools may be used to analyze data.

 
7. Sharing of Information 

We do not sell or rent personal data. 

We may share with: 
          Mutual Fund AMCs 
          RTAs 
          Banks & payment gateways 
          KYC agencies 
          Regulators or courts 
          IT service providers 
          Group companies (lawfully) 

All recipients are contractually bound to confidentiality. 


8. Gmail Data (Optional Feature) 

If you connect Gmail: 
          Data is used only for investment analytics 
          Not used for advertising 
          No human access except security/legal needs 
          Sharing limited to service delivery 
          Consent-based and optional 


9. Data Security 

We implement: 
          Encryption 
          Restricted access 
          Secure servers 
          Monitoring systems 
          Incident response plans 

Despite safeguards, no system is fully secure. 


10. Data Storage & Retention 

Data is: 
          Stored securely in India (unless required otherwise)
          PAN and Aadhaar information is transmitted directly to authorized third-party service providers and is not stored on our servers
          Other personal information is retained per PMLA, SEBI, or other regulatory requirements and for legal mandates
          Deleted/anonymized once no longer required


11. Your Rights 

You may: 
          Access or update information 
          Withdraw consent 
          Request deletion (subject to law) 
          Deactivate accounts 

Requests: [contact@iarista.com


12. Cookies & Analytics 

We use cookies and analytics tools for: 
          Performance improvement 
          Security 
          User experience 

You may disable cookies via browser/device settings. 


13. Third-Party Links 

We are not responsible for third-party privacy practices linked from our Platform. 


14. Advertising & Marketing 

We may show targeted ads using anonymized data and partner services. 
You may opt-out of marketing communications anytime. 


15. Mobile Permissions 

We do not access contacts, call logs, or files. 
Camera/location/microphone access is taken only with explicit consent for onboarding/KYC. 
We do not collect biometric data. 


16. Account Deletion 

Users may request account deletion or deactivation by emailing: 

[contact@iarista.com] 

Requests are processed subject to regulatory retention requirements. 


17. Policy Updates 

We may revise this Policy periodically. 
Changes take effect once published on the Platform. 


18. Our Commitment 

We understand that you entrust us with your financial and personal information. We are 
committed to handling it responsibly, lawfully, and transparently.