Privacy Policy

Niveshraai is operated by Lakshuka Technologies Private Limited (CIN: U62090RJ2026PTC116361), registered office at E-85, Ram Nagar Ext, Sodala, Jaipur - 302019, Rajasthan, India. For the purposes of the DPDP Act, Lakshuka Technologies Private Limited is the data fiduciary described in this policy.

For an Advisor’s own account data, we are the data fiduciary. For an Advisor’s investor-clients, the Advisor is the data fiduciary and we act as a data processor on the Advisor’s behalf - we process client data only to provide the service to that Advisor, never for our own purposes.

• Advisors: name, email, phone, PAN, SEBI registration details, branding, and product-usage data.
• Investor-clients (on the Advisor’s behalf): identity / KYC data (e.g. PAN, name, DOB via our KYC partner), contact details, and interactions with the advice they receive.
• Onboarding in progress: if you start signing up, we save the details you enter as you go, including if you don’t finish, so you can pick up where you left off and so we can help if you get stuck. We use one first-party cookie to recognise your session for this. We do not store your PAN or date of birth at this stage; those are kept only once you complete registration. Unfinished signups are deleted after 30 days.
• Technical: log data and a privacy-first, cookieless measure of marketing-site visits. We do not run third-party advertising trackers.

To verify registrations, run onboarding/KYC, deliver advice and notifications, process subscriptions, operate and secure the platform, and meet legal/regulatory obligations.

We do not sell personal data. We share it with service providers strictly to run the platform - e.g. KYC & e-sign (Digio), payments (Razorpay), email (Resend), messaging (WhatsApp/Meta), the client’s chosen broker for order placement, and our hosting provider - and with authorities where required by law.

Data is encrypted in transit (TLS); sensitive secrets and KYC fields are encrypted at rest; tenant data is isolated per Advisor via database row-level security. No system is perfectly secure, but we apply industry-standard safeguards - see the Trust Center for the specifics, including data residency, subprocessors, and AI data handling.

We retain data for as long as SEBI record-keeping (around 5 years, longer if a dispute is open) and tax/GST rules (around 6–8 years) require, then delete or anonymise it. Erasure requested before that window closes is retention-gated, not immediate: we revoke live access and lock the record straightaway, and the underlying data is cryptographically shredded once the retention period expires. Subject to law, you may request access, correction, or erasure of your personal data. Investor-clients should contact their Advisor (the data fiduciary); we will assist the Advisor with such requests. For how we store and protect data more generally, see the Trust Center.

Under the Digital Personal Data Protection Act, you may raise a grievance or exercise your rights - access, correction, erasure, or withdrawal of consent - with our Grievance Officer:

Pranay Sharma, Assistant Director
Lakshuka Technologies Private Limited
E-85, Ram Nagar Ext, Sodala, Jaipur - 302019, Rajasthan, India
[email protected]

We acknowledge every request within 72 hours and resolve it within 7 working days. If a request needs longer - because a record is subject to a statutory retention period, for example - we will tell you why and when to expect a resolution.

Investor-clients: if you are a client of an Advisor using Niveshraai, your Advisor is the data fiduciary for your personal data and is your first point of contact. Write to them directly; we assist them with such requests. The contact above is for Advisors and for visitors to this website.

For anything that is not a privacy matter, contact [email protected].

We may update this policy; material changes will be posted here with a new effective date.