Privacy Policy

Last updated: May 25, 2026

Allumer Fintech Private Limited

Allumer Fintech Private Limited (“we”, “our”, “us”) is committed to protecting the privacy of individuals who use the Finamize platform. This Privacy Policy explains how we collect, use, store, and disclose your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable SEBI regulations.

1. Information We Collect

We collect personal information that you provide directly, including your name, email address, phone number, PAN (Permanent Account Number), address, and financial details necessary for the services you seek. For professionals, we additionally collect SEBI registration numbers, ICAI membership details, and practice-related information.

2. How We Use Your Information

Your personal data is used to facilitate connections between clients and professionals, verify professional credentials against SEBI and ICAI registries, process payments and generate invoices, comply with tax obligations under the Income Tax Act and GST Act, and improve the functionality and security of our Platform.

3. Data Processing Agreement

Where Allumer Fintech Private Limited acts as a Data Processor on behalf of professionals (Data Fiduciaries), the processing of client data is governed by our Data Processing Agreement. Professionals are responsible for obtaining valid consent from their clients for the processing of personal data through the Platform.

4. Your Rights Under DPDP Act 2023

Under the DPDP Act, you have the right to access your personal data held by us, request correction of inaccurate personal data, request erasure of your personal data (subject to legal retention requirements), withdraw consent for data processing, and nominate another individual to exercise your rights in case of death or incapacity.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Financial records are retained for a minimum of eight years as mandated by SEBI regulations and the Companies Act, 2013. Upon account deletion, personal data is anonymised or deleted within 90 days, except where retention is required by law.

6. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on the Platform. Essential cookies are required for the Platform to function properly. Analytics cookies help us understand usage patterns. You may manage your cookie preferences through your browser settings. For more details, please refer to our Cookie Policy.

7. Third-Party Services

We may share your data with trusted third-party service providers, including payment processors (Razorpay), cloud infrastructure providers (Supabase, Vercel), and email service providers. All third-party processors are bound by data processing agreements that require them to protect your personal data in accordance with the DPDP Act.

8. Data Security

We implement industry-standard security measures, including encryption of data in transit and at rest, row-level security policies, regular security audits, and access controls. Despite these measures, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security of your data.

9. Children’s Privacy

The Finamize platform is not intended for use by individuals under the age of 18 years. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a child, we will take steps to delete such information promptly in accordance with the DPDP Act provisions regarding children’s data.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting a prominent notice on the Platform or sending a notification to your registered email address at least 30 days before the changes take effect.

11. Data Protection Officer

In accordance with the DPDP Act, we have appointed a Data Protection Officer to oversee our data protection practices. For any queries or concerns regarding the processing of your personal data, you may contact our Data Protection Officer at dpo@allumerfintech.com.

12. Contact & Grievance

If you have any concerns regarding the processing of your personal data, you may contact our Grievance Officer:

Grievance Officer: Parth Chandan
Email: parth.chandan@gmail.com
Allumer Fintech Private Limited (CIN: U66190PN2025PTC240927)
Gera Chambers, F.P. No. 204, Boat Club Road, Pune 411001
Acknowledgement within 48 hours; resolution within 30 days.