Privacy Policy
How information about advisors and their clients is collected, used and protected on the platform.
Who controls client data
Advisors and firms who use the platform decide what client information is stored and why. For that client data, the advisor or firm is the data fiduciary and we act as their processor, handling it only on their instructions.
For information about advisors themselves, such as account and billing details, we decide how it is used and this policy explains how.
Information we collect
- Account details: name, work email, firm name, city, advisor type and, if provided, licence, ARN or POSP code.
- Client records added by advisors: names, contact details, family relationships, policy and folio details, nominees, KYC documents, statements and notes.
- Usage information: log-ins, pages used, device and browser type, and error reports, used to keep the service secure and working.
- Communication records: messages drafted or sent through the platform, consent records and opt-outs, kept in the Compliance Log.
Client consent
Advisors must obtain each client's consent before storing their personal and financial data on the platform. The Compliance Log records the date, method and wording of that consent.
Clients may withdraw consent at any time through their advisor. When consent is withdrawn, the advisor can delete or export that client's records.
How information is used
- To provide the modules: Client Book, Renewal Radar, Policy Vault, Portfolio View, AI Client Assistant, Lead Garden and Compliance Log.
- To send service emails such as login details, renewal digests and billing notices.
- To secure accounts, detect misuse and fix problems.
- We never sell, rent or share client data for marketing, and we never use it to sell financial products.
AI features
The AI Client Assistant processes only the records of the firm using it, to prepare briefs and draft messages for the advisor's review. It does not recommend products and does not send messages on its own.
Client records are not used to train general-purpose AI models.
Security
Data is encrypted in transit and at rest. Access inside a firm is controlled by roles set by the firm's administrator, and staff access on our side is limited, logged and reviewed.
Documents shared with clients are sent through expiring links rather than open attachments.
Retention and deletion
Records are kept while the account is active. If a subscription ends, data remains available for export for 60 days and is then deleted from active systems. Backups are cycled out within a further 30 days.
Compliance Log entries may be retained for longer where an advisor needs them to meet record-keeping obligations under IRDAI, SEBI or AMFI rules.
Your rights
You may ask to access, correct, export or delete your personal information. Clients of advisors should contact their advisor first, who can act on the request directly in the platform.
Requests can be sent through the Advisor Desk page and are answered within 30 days.
Cookies
This website uses only essential cookies, such as a session cookie for form security checks. We do not use advertising cookies.