Privacy Policy

1. Who we are (Data Fiduciary)

• Registered name: Investology Quant Data Services Private Limited
• Trade name: Investology
• Legal form: Private Limited Company
• SEBI Research Analyst registration: INH000029528
• Address: A-001, Ground Floor, Satsang-III Poonam Sagar Complex, Mira Road (East), Thane, Maharashtra 401107
• Phone: +91 90290 26474
• Email: support@investology.in
• Contact person (as registered with SEBI): Anish Achuthan Pillai

Investology Quant Data Services Private Limited (Investology) is the Data Fiduciary for the personal data described here, including data collected on its behalf on ra.investology.in.

We remain responsible for processing carried out by the service providers named in section 4.

2. What investology.in does not collect

investology.in never asks for your PAN, Aadhaar number or VID, date of birth, card details or UPI details. These are entered only on our onboarding portal ra.investology.in (Graphy) or on our partners' secure pages (Digio, the KRA and the payment gateway).

3. Personal data we process

Retention codes R1 to R5 are explained in section 7.

4. Processors and recipients

We also share data with regulators and authorities when the law requires it: SEBI, BSE (as the Research Analyst Administration and Supervisory Body), FIU-IND and law enforcement agencies.

We do not sell your personal data.

4A. TradeBook, the members’ trading journal

TradeBook at /app is a personal trading journal. How it handles your data:

• Stored on your device: today, the trades, journal entries and settings you enter are kept in your browser's storage on your own device. They are not sent to Investology. Clearing your browser data deletes them.
• Cloud sync (planned): we intend to offer optional sync to our database. This notice will be updated before it is introduced, and it will only apply if you turn it on.
• Google Drive backup (optional): if you connect Google Drive, backups of your TradeBook data are written to a private application folder in your own Google Drive account. You can disconnect at any time.
• Your AI provider (optional): you may add your own API key for an AI provider (Gemini, OpenAI or Groq). The key is kept in your browser. When you use an AI feature, the relevant trade and journal context is sent directly to the provider you chose, under that provider's terms and privacy policy.
• Telegram (optional): if you connect a Telegram bot, its bot token and chat details are stored so TradeBook can send messages to you.

4B. "Notify me" and browser notifications

• “Notify me” on the plans page (optional): if you leave your email to hear when a plan opens, we keep that email and the plan you chose, with your consent, only to send you one email when it opens. It is deleted 30 days after that email. Only our principal officer can read the list.
• Browser notifications for members (optional): if you switch them on, your browser gives us a notification address (an endpoint and keys from your browser's push service) linked to your account, so we can send call alerts to that browser. Switch them off at any time; the address is deleted then, or when the push service reports it is no longer valid.

5. Aadhaar

• Using Aadhaar is optional and voluntary. It is used only for Aadhaar OTP eSign of the client agreement through Digio.
• Investology does not store your Aadhaar number.
• If any document showing your Aadhaar number is needed, mask the first 8 digits.
• Never send your Aadhaar number, Aadhaar card image, PAN image or OTPs on WhatsApp, Telegram or email.
• Investology will never ask for your login credentials or OTPs.
• Alternative to Aadhaar eSign: To be confirmed by Compliance Officer

6. Communications

• Service communications we must send: OTPs, KYC and eSign status, invoices, renewal and expiry notices, research delivery, regulatory notices and changes to terms.
• Marketing: sent only with your separate opt-in, and you can opt out at any time. Current status: To be confirmed by Compliance Officer

Accepting the client agreement does not opt you in to marketing.

7. How long we keep data

Erasure requests cannot override these legal retention periods; we will tell you what we must keep and why.

8. Cookies and browser storage

investology.in uses a small amount of browser storage that the site needs to work. Google Analytics cookies are used only if you choose Accept in the cookie banner; until then no analytics script is loaded.

Cookie settings

Rejecting analytics deletes Google Analytics cookies from this site.

9. Your rights

• Access a summary of your personal data and of who it has been shared with (section 11).
• Correction, completion, updating and erasure of your data (section 12), subject to the retention periods in section 7.
• Grievance redressal (section 13).
• Nominate a person to act for you after death or incapacity (section 14).
• Withdraw consent at any time, as easily as you gave it (section 6(4)):
  • Analytics: instantly, through Cookie settings.
  • Consent given for the service: by email. Withdrawal does not affect processing done before it, and may end the service, with refunds under the Refund Policy.

To make a request, write to support@investology.in from your registered email or mobile with the subject "Data request". We verify you against your registered contact details and will never ask for Aadhaar or OTPs.

Response time: To be confirmed by Compliance Officer

10. Privacy grievances and the Data Protection Board

• Grievance Officer: To be confirmed by Compliance Officer
• Email: pillai@investology.in
• Phone: +91 90290 26474
• Address: A-001, Ground Floor, Satsang-III Poonam Sagar Complex, Mira Road (East), Thane, Maharashtra 401107

Please raise privacy grievances with us first (section 13(3)). If you are not satisfied, you may complain to the Data Protection Board of India.

Complaints about our research service follow the SEBI escalation matrix: see Complaints & Escalation.

11. Security and breaches

• HTTPS everywhere.
• Card and UPI details never touch investology.in.
• Admin tools need a protected token and keep an access-grant log.
• Access to client data is limited to support staff.

If a personal data breach affects you, we will inform you and the Data Protection Board without delay and as the DPDP Rules 2025 require. We will also inform CERT-In where applicable.

12. Age

Our research services are only for individuals aged 18 or over. We do not knowingly process children's data or track children. If you believe a minor has given us data, contact us and we will delete it, subject to the law.

13. Use of AI tools

Whether AI tools are used in our research, and whether any client personal data is processed by an AI provider: To be confirmed by Compliance Officer

14. Changes to this notice

Version 2.1, effective 22 October 2026. Material changes are notified on this page and by email before they take effect, and we ask for your consent again where it is required.