1. Introduction
Finchase Capital Private Limited ("Finchase Capital," "we," "us," "our"), a company incorporated under the Companies Act, 2013 (CIN: U64990MP2025PTC076109), registered with the Registrar of Companies, Gwalior, and based in Indore, Madhya Pradesh, is committed to protecting the privacy of every visitor, prospective client, and user of our website (finchasecapital.in) and its associated tools, forms, and services (collectively, the "Site").
This Privacy Policy explains what personal data we collect, why we collect it, how we use, store, and protect it, and what rights you have over it. This Policy is drafted with reference to the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules issued thereunder, and reflects our obligations as a "Data Fiduciary" under that law.
By using the Site, submitting any form, or otherwise providing us personal data, you acknowledge that you have read and understood this Policy.
2. Data We Collect
We collect personal data only where it is necessary for a clearly identified purpose. Depending on how you interact with the Site, this may include:
2.1 Information you provide directly
- Name, phone number, email address, and LinkedIn profile URL (via consultation, contact, newsletter, or "Start the Conversation" forms)
- Business-related information you choose to share — business stage, a description of your business or idea, the problem it addresses, and the nature of assistance sought
- Any file you voluntarily upload (e.g., a pitch deck or presentation) or link you provide (e.g., a video walkthrough)
- Any figures or inputs you enter into our free self-serve calculators/Tools (e.g., indicative revenue, EBITDA, loan amount) — these are processed to generate an on-screen result and are addressed separately in Section 6
- Correspondence you send us by email, WhatsApp, or through any form on the Site
2.2 Information collected automatically
- Technical data such as IP address, browser type and version, device type, operating system, referring URL, and pages visited
- Cookies and similar tracking technologies (see Section 7)
- Approximate location inferred from IP address (city/region level only, not precise geolocation)
2.3 Information from third parties
- We do not purchase personal data about you from third-party data brokers. Where we use third-party tools (e.g., web fonts, icon libraries, analytics) as described in Section 8, those providers may independently collect limited technical data governed by their own privacy policies.
3. How and Why We Use Your Data
We use personal data only for the following purposes, and only to the extent reasonably necessary for each:
| Purpose | Data Used | Basis |
|---|---|---|
| Responding to a general enquiry or consultation request | Name, phone, email, message content | Your consent, given by submitting the form |
| Reviewing a confidential business/startup submission | Name, phone, email, LinkedIn, business details, uploaded file/video | Your consent, given by submitting the form |
| Sending a requested newsletter | Email address | Your explicit opt-in consent |
| Operating and improving the Tools/calculators | Inputs you provide (processed transiently, see Section 6) | Your voluntary use of the tool |
| Maintaining the security and proper functioning of the Site | Technical/log data | Our legitimate interest in Site integrity |
| Complying with legal, tax, and regulatory record-keeping obligations | Client and engagement records, where an engagement has commenced | Legal obligation |
We do not use your personal data for any purpose beyond what it was collected for, without seeking fresh consent.
4. Consent
Where the DPDP Act requires consent as the basis for processing, we obtain that consent through your affirmative act of submitting a form, checking a consent box, or subscribing to a communication. Consent requests are kept specific, informed, and are not bundled with unrelated permissions. You may withdraw consent at any time (see Section 9), though withdrawal will not affect the lawfulness of processing carried out before withdrawal, and may mean we are unable to respond to an enquiry already in progress.
5. How We Store and Protect Your Data
- Data submitted through the Site is transmitted over encrypted connections (HTTPS) and stored on infrastructure that encrypts data at rest.
- Access to submitted data — particularly confidential business/startup submissions — is restricted to specifically authorized members of our internal team on a need-to-know basis. It is not made publicly accessible, searchable, or indexable by search engines.
- Uploaded files are stored in access-controlled storage; they are not placed at a publicly guessable or shareable link.
- We apply reasonable technical measures (including rate-limiting and bot/spam protection on public-facing forms) to guard against unauthorized access, alteration, disclosure, or destruction of your data, in line with the "reasonable security safeguards" standard expected under the DPDP Act.
- No system can be guaranteed completely secure; while we take these precautions seriously, we cannot warrant absolute security of data transmitted to us.
6. Data Entered Into Our Free Tools/Calculators
Figures you enter into any calculator on our Tools page (e.g., a revenue figure for the tax estimator, a loan amount for the EMI calculator) are processed in your browser or transiently on our servers solely to generate the displayed result. Unless you separately submit that information through a consultation or "Start the Conversation" form, we do not permanently store the specific figures you enter into a calculator, and they are not linked to your identity.
7. Cookies and Tracking
The Site may use cookies and similar technologies to:
- Remember basic preferences and session state
- Understand aggregate usage patterns (e.g., which pages are visited) to improve the Site
- Support security features such as bot protection on our forms
You can control or disable cookies through your browser settings. Disabling cookies may affect certain functionality of the Site. Where required, we will present a cookie consent mechanism allowing you to accept or decline non-essential cookies before they are set.
8. Third-Party Services
We use a limited number of third-party service providers strictly to operate the Site, including but not limited to: web font and icon delivery services, form-handling/relay services, hosting and content-delivery infrastructure, and email delivery services for notifications. These providers act as data processors on our behalf and are contractually or by policy bound to use data only for the purpose of providing their service to us. We do not sell, rent, or trade your personal data to any third party for their independent marketing purposes.
We may disclose personal data where required by law, regulation, court order, or governmental request, or where necessary to protect our legal rights.
9. Your Rights
Subject to applicable law, including the DPDP Act, you have the right to:
- Access the personal data we hold about you
- Correct or update inaccurate or incomplete data
- Withdraw consent for further processing at any time
- Request erasure of your personal data, where it is no longer necessary for the purpose it was collected, subject to any legal retention obligations we may have
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, as provided under the DPDP Act
- Lodge a grievance with our Grievance Officer (see Section 12), and thereafter, if unresolved, with the Data Protection Board of India
To exercise any of these rights, please contact us using the details in Section 12.
10. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose it was collected, or as required by applicable law (including tax and company-law record-keeping requirements):
- General enquiry/contact form data: retained for a reasonable period to allow us to respond and follow up, and reviewed periodically thereafter
- Confidential business/startup submissions: retained and reviewed on an annual basis; submissions with no further engagement or activity are flagged for internal review and considered for deletion
- Newsletter subscriber data: retained until you unsubscribe
- Client and engagement records (where a formal engagement exists): retained in line with applicable professional and statutory record-keeping requirements
11. Children's Data
The Site is intended for use by business owners, founders, and professionals, and is not directed at, nor knowingly collects personal data from, individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it.
12. Grievance Officer / Contact
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Grievance Officer:
Mr. Jagdish
Grievance Officer, Finchase Capital Private Limited
Phone: +91 95680 00088
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last Updated" date at the top of this Policy will indicate when it was last revised. Material changes will be indicated on this page; continued use of the Site after such changes constitutes your acceptance of the revised Policy.
