How we handle your data.
1. Who we are
Nidaaan GC LLP, trading as Nidaaan InvestWise ("we", "us"), decides why and how your personal data is used for the booking and mentoring service at nidaaaninvestwise.com. We are the data fiduciary under the Digital Personal Data Protection Act, 2023. Contact: mail@nidaaaninvestwise.com.
The service is offered in India only and is meant for adults (18 and over).
2. What we collect
When you request a booking
- Identity and contact: your full name, email address and Indian mobile number; the business name and GSTIN if you book as a business and choose to give them.
- Place of the sessions: the address and PIN code where the mentor will come, and the city you chose.
- Your choices: the format, the dates, and your confirmation of each declaration (education only, trading capital, terms), with the version of the text and the time you confirmed.
- A security record of the request: the IP address and browser details sent with it, kept so that we can show who agreed to what and to deal with misuse.
When you pay
- The bank or UPI transaction reference(s) you send us, the amount received and any tax deducted at source. We never see your card, bank login or UPI PIN: you pay by bank transfer, and there is no payment gateway.
When you visit the website
- Our server logs record your IP address, your browser type and the page you asked for. We use no cookies, analytics or tracking pixels. If you switch between the day and night look, your choice is remembered in your own browser (local storage) and never sent to us.
When you talk to us
- The emails you send us, and anything you choose to tell us on the 15-minute intake call.
We do not ask for your PAN, Aadhaar, bank statements, trading account details or any trading history on this website.
3. Why we use it, and on what basis
| Purpose | Basis |
|---|---|
| Holding your dates, checking the fit, confirming the booking, sending the pro-forma invoice and your reminders | Your consent when you submit the form, and the service you asked for |
| Issuing GST invoices and keeping accounts | A legal obligation (GST and income-tax law) |
| Recording your declarations and securing the system against abuse | Needed to run the service securely and to prove what was agreed, as the law permits |
We do not use your data for marketing. We will only email you about your own booking unless you ask us to do more.
4. Where it is stored and how it is protected
- Booking records are stored with Google Cloud in Mumbai, India.
- Your name, contact details, address, declarations, payment references and the security record are encrypted with a key held in Google Cloud Key Management, tied to your booking. Your email address and phone number are also kept as irreversible fingerprints so that we can recognise a repeat request without reading them.
- Invoices (PDF) are emailed to you and a copy is kept in a private storage area that only the back office can open.
- The back office is open only to the owners' own Google accounts, with two-step verification.
- Server logs record the technical details of each visit: the IP address, the browser type and the web address requested. They are kept for up to 400 days for security and legal reasons, and are designed to contain no names, emails or phone numbers.
5. Who else handles it
Only the services that run our systems, acting on our instructions:
- Google Cloud and Firebase Hosting (hosting, database, encryption keys, storage).
- Google Workspace and Gmail (the emails we send you and the emails you send us).
We do not sell or rent your data, we do not share it with advertisers, and we do not use cookies, analytics or tracking pixels on this site. We disclose data to authorities only when the law requires it.
6. How long we keep it
- Requests that never go ahead (lapsed, declined, or cancelled before payment): every personal detail is erased 90 days after the request ended.
- Paid bookings: your name, contact details, address, GSTIN and the security record are erased 13 months after your last session, unless we must keep them for a legal reason.
- What stays after that: an anonymous record of the booking (reference, format, city, dates, amounts and GST, with no name or contact details), and our accounting records: your invoices (including pro-forma invoices), the emails that carry them, and the payment references. Indian tax law requires us to keep accounting records, currently for six years.
- Logs: up to 400 days.
The erasure runs automatically, once a day.
7. Your rights
Under the DPDP Act you may ask us to: show you the personal data we hold about you and how it is used; correct or complete it; erase it (where we are not required to keep it); and give your grievance a response. You may also withdraw your consent, and nominate another person to exercise these rights if you die or cannot act. Write to mail@nidaaaninvestwise.com from the email address you booked with. We aim to answer within 7 working days and always within the time the law allows.
If we do not resolve your concern you may complain to the Data Protection Board of India.
8. If something goes wrong
If a security incident affects your data we will tell you and the authorities as the law requires, including reporting to CERT-In within the time it sets.
9. Changes
We will change this policy only by publishing a new version here with a new "last updated" date. The version in force when you book is the one that applies to that booking.