Privacy Policy

1. Legal Entity & Platform Operating Scope

This Privacy Policy governs data processing activities on FinSetu India (finsetuindia.com), owned and operated by legal entity XPERT ADVICE HUB (GSTIN: 09APUPU6687G1ZP). FinSetu India is an Expert Advice & Lead Distribution Platform designed to connect users with qualified independent service providers. We do not issue insurance policies, sell financial products directly, or act as an insurance company.

2. Personal Data & Firebase OTP Authentication

We collect personal information (Full Name, Mobile Number, Email, City, State, and Financial Advisory Requirement) strictly upon voluntary user submission. Customer authentication is secured via Firebase OTP and encrypted session tokens. Mobile numbers are verified via OTP to prevent impersonation and unauthorized requests.

3. Document Vault & Storage Encryption

Documents uploaded by customers or assigned experts (such as RC copies, Aadhaar, PAN, Income Proof, Property Documents) are stored with 256-bit AES server-side encryption. Access is restricted under strict Role-Based Access Control (RBAC). Only the authenticated customer and assigned expert advisor can access uploaded document files.

4. Cookies, Analytics & Privacy Controls

We utilize essential session cookies and anonymous performance analytics to optimize website navigation, calculator execution, and security. We do NOT use third-party cross-site trackers or sell customer data to external telemarketing call centers.

5. Data Retention & Deletion Schedule

Lead enquiry data and audit timeline logs are retained for active service processing and regulatory compliance requirements for a maximum of 36 months. Customers have the explicit right to request account deletion or data purge at any time.

6. Customer Rights & Data Deletion Procedure

In compliance with the Digital Personal Data Protection (DPDP) Act 2023 of India, customers possess the following rights:

• Right to access and download personal data archives via the Customer Rights Portal.
• Right to withdraw multi-channel communication consent (Phone, WhatsApp, SMS, Email).
• Right to request immediate data purge / account deletion by submitting a request to info@finsetuindia.com or via the Grievance Portal.