FinGrow Privacy Policy
by Archbridge CapitalThis Privacy Policy explains what personal data the FinGrow app collects, why we collect it, how we use and share it, and the choices and rights you have. Please read it carefully before using the app.
1. Who we are
The FinGrow app is owned and operated by Archbridge Capital Private Limited ("Archbridge Capital", "we", "us", "our"), a Non-Banking Financial Company (NBFC) registered with the Reserve Bank of India (RBI), incorporated in India with its registered office at Archbridge Capital Pvt. Ltd. 1011-1018, Tower - 4, DLF Corporate Greens, Sector - 74A, Southern Peripheral Road, Gurugram - 122004, Haryana, India. For the purposes of applicable data protection law, including India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we are the Data Fiduciary (controller) responsible for your personal data processed through the app.
2. Information we collect
We collect the following categories of personal data:
| Category | Examples | Why we collect it |
|---|---|---|
| Identity & KYC data | Full name, date of birth, gender, photograph/selfie, government-issued identifiers (e.g. PAN, Aadhaar-linked details), signature, and identity documents you upload or capture. | To verify your identity, complete KYC, and enable regulated financial services and electronic signing (e-sign / e-mandate). |
| Contact data | Email address, mobile number, postal/residential address. | Account creation, authentication (OTP), servicing and communications. |
| Financial data | Bank account details, payment/mandate information, transaction history, financial preferences, and credit information such as your CIBIL credit bureau score and credit report. | To process transactions, payments, mandates, assess creditworthiness, and provide the services. |
| Documents & media | Photos, PDFs and files you capture with the camera or select from your device (e.g. KYC documents, proofs). | To collect and verify documents required for onboarding and servicing. |
| Camera & microphone | Images and, where a video-KYC or recording flow is used, audio/video. | Document capture, selfie/liveness verification and video-based KYC. |
| Location | Approximate and/or precise device location (when you grant permission). | Fraud prevention, regulatory compliance and location-based eligibility. |
| Device & technical data | Device model, operating system version, unique device/installation identifiers, app version, IP address, and device integrity/security signals (e.g. rooted/tampered-device detection). | Security, fraud and abuse prevention, app integrity, and troubleshooting. |
| Usage & analytics data | In-app events, feature usage, screens viewed and interaction data. | To understand and improve app performance and user experience. |
| Diagnostics & crash data | Crash logs, error reports and performance diagnostics. | To detect, diagnose and fix stability and reliability issues. |
| Authentication data | Login credentials, session tokens, and biometric-unlock preference (biometric verification is performed on your device). | To secure your account and enable convenient, secure sign-in. |
3. Device permissions
The app requests the following Android permissions. Where a permission is "runtime", the app will ask for it at the point of use and you may decline; declining may limit related features.
| Permission | Purpose |
|---|---|
| Camera | Capture selfies and documents for KYC and uploads. |
| Microphone (Record audio) | Audio capture during video-KYC / recorded verification flows. |
| Location (precise & approximate) | Fraud prevention, compliance and eligibility checks. |
| Photos / media / storage | Select and upload documents and images; save generated documents (e.g. PDFs). |
| Internet / network state | Connect to our servers and process transactions. |
4. How we use your information
- Create, authenticate and secure your account.
- Perform KYC, identity verification and electronic signing/mandates.
- Provide, operate and process financial transactions and services.
- Detect, prevent and investigate fraud, abuse and security incidents.
- Comply with legal, regulatory, tax and reporting obligations (e.g. RBI/SEBI and anti-money-laundering requirements, as applicable).
- Communicate with you about your account, transactions and support requests.
- Analyse usage and diagnostics to maintain and improve the app.
5. Legal bases & consent
Depending on the activity, we process your personal data on the basis of: your consent; the performance of a contract with you; compliance with a legal obligation; and our legitimate uses/interests such as security and fraud prevention, to the extent permitted by law. Where we rely on consent (for example, to access your camera or location), you may withdraw it at any time through your device settings or by contacting us; withdrawal does not affect processing carried out before withdrawal.
6. How we share information
We do not sell your personal data. We share it only as described below:
- Service providers / processors who help us operate the app (identity/KYC and e-sign, payments, cloud, analytics and crash reporting) — see section 7.
- Financial institutions, partners and regulators where necessary to provide the services or to meet legal and regulatory obligations.
- Legal & safety: to comply with law, court orders or lawful requests, and to protect the rights, property and safety of users and the public.
- Corporate transactions: in connection with a merger, acquisition or reorganisation, subject to this policy.
7. Service functions & data processed
The app integrates third-party services to perform the functions below. Each provider processes data under its own privacy policy.
| Function | Data involved |
|---|---|
| Usage analytics | App events, device & usage identifiers |
| Crash & diagnostics reporting | Crash logs, device and app state |
| App & device integrity, anti-abuse | Device integrity signals, attestation tokens |
| KYC, e-sign and e-mandate | Identity data and documents, signature |
| Payment & mandate processing | Payment and transaction details |
8. Data security
We apply technical and organisational measures designed to protect your data, including:
- Encryption of data in transit (HTTPS/TLS) and enforced secure connections (cleartext traffic is disabled, with certificate/network security controls).
- Secure on-device storage of credentials and keys using the platform keystore/keychain.
- Device integrity and tamper/root detection to reduce fraud and abuse.
- Access controls, and least-privilege handling of personal data by our staff and providers.
We follow the best industry practices possible to secure the app and protect your data.
9. Data retention
We retain personal data for as long as your account is active and thereafter for the periods required to meet our legal, regulatory, accounting and dispute-resolution obligations. KYC and transaction records may need to be retained for the minimum periods mandated by applicable financial regulations ([e.g. as prescribed under PMLA / RBI / SEBI norms]). When data is no longer required, we delete or anonymise it.
10. Your rights
Subject to applicable law (including the DPDP Act), you have the right to:
- Access and obtain a summary of the personal data we process about you.
- Request correction, completion or updating of inaccurate data.
- Request erasure of your personal data, subject to legal retention requirements.
- Grievance redressal (see section 14) and to escalate to the Data Protection Board of India.
To exercise any right, contact us using the details in section 14. We may need to verify your identity before acting on a request.
11. Children's privacy
FinGrow is intended for users aged 18 and above and is not directed at children. We do not knowingly collect personal data from children without appropriate parental/guardian consent as required by law. If you believe a child has provided us data, please contact us and we will take appropriate action.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date. Where required by law, we will notify you of material changes. Your continued use of the app after an update constitutes acceptance of the revised policy.
13. Contact & grievance officer
For questions, requests or complaints about your privacy, or to exercise your rights, contact our Grievance Officer:
| Grievance Officer | Geetaram Purohit |
|---|---|
| Company | Archbridge Capital Private Limited |
| gro@archbridgecapital.in | |
| Address | Archbridge Capital Pvt. Ltd. 1011-1018, Tower - 4, DLF Corporate Greens, Sector - 74A, Southern Peripheral Road, Gurugram - 122004, Haryana, India |
| Response time | We aim to acknowledge and resolve within the timelines prescribed by law. |