Privacy notice

• When you request a demo: your name, work email, fund or company, role, and anything you write in the message box.
• When you use the platform: your account details (name, work email, role) and a record of the actions you take, kept for audit purposes.
• Fund data our customers load: fund documents and investor records, which may include investors' names, contact details, PAN, bank details and holdings.
• Technical data: IP address, browser type and request logs, used to keep the service secure and to prevent abuse.

• To respond to your demo request and arrange a walkthrough.
• To provide, secure and support the platform for our customers.
• To keep audit records that our customers and their auditors rely on.
• To understand, in aggregate, how the website is used, so we can improve it.

We do not sell personal data, and we do not use it for advertising.

For fund data, the fund (or its manager) decides why and how the data is processed and is the Data Fiduciary under the DPDP Act. Nidhilytics processes that data only on the fund's instructions, as its Data Processor. Investors who want to exercise their rights over such data should contact the fund first; we will help the fund respond.

We process demo-request details on the basis of the consent you give when you submit the form. You can withdraw that consent at any time by writing to us through the contact form. Platform data is processed to deliver the service our customers have contracted for, and where the law requires or permits it.

This website does not use advertising or tracking cookies. If website analytics are enabled, we use a privacy-friendly tool that sets no cookies and records only aggregate figures, such as page views and whether a demo request was sent. The platform uses your browser's storage only to keep you signed in.

We share personal data only with service providers that help us run Nidhilytics, such as cloud hosting, data storage and email delivery. They act on our instructions and under confidentiality obligations. We may also disclose data where the law or a regulator requires it.

We keep demo-request details for as long as needed to follow up, and for no more than 24 months after our last contact. We keep platform and fund data for the term of the customer's agreement and any period required by law, regulation or audit, and then delete or return it.

Each fund's data is kept separate inside the database itself. Sensitive actions require a second person's approval. Key records cannot be altered after they are written, and access is limited to people who need it for their role. Data is encrypted in transit.

Under the DPDP Act you may ask us to:

• tell you what personal data we hold about you and how we use it;
• correct, complete or update it;
• erase it, where we no longer need to keep it;
• nominate someone to exercise these rights for you if you are unable to.

To make a request or raise a grievance, write to us through the contact form. We will reply within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

We may update this notice from time to time. The date at the top shows when it last changed.