Effective date: [PLACEHOLDER — review with counsel] · Operated by Avablue Investments Private Limited
1. Data we collect
Account data (name, email, phone), verification data required by law (KYC status, PAN where applicable), broker connection metadata (never your broker password), trading activity generated on the platform, device and log data, and messages you send us. [PLACEHOLDER — review with counsel]
2. How we use it
To operate the platform, execute the services you request, meet legal and regulatory obligations (including SEBI audit-trail requirements), secure accounts, and communicate service information. We do not sell personal data. [PLACEHOLDER — review with counsel]
3. Legal bases & consent
We process data with your consent and for legitimate uses permitted under the DPDP Act, 2023. You may withdraw consent where processing is consent-based; some data must be retained to meet regulatory obligations. [PLACEHOLDER — review with counsel]
4. Sharing
Data is shared only with your broker (to provide the service you request), infrastructure providers under contract, and regulators or law enforcement where legally required. [PLACEHOLDER — review with counsel]
5. Security & retention
Data is encrypted in transit, broker tokens are encrypted at rest, access is role-restricted, and every order carries an immutable audit record. We retain data as long as regulations require and delete or anonymise it after. [PLACEHOLDER — review with counsel]
6. Your rights & grievance officer
You may access, correct, or request erasure of your personal data, subject to regulatory retention duties. Grievance Officer: [PLACEHOLDER — review with counsel] — name, email, and address to be published before public launch.