Privacy Policy
Draft for legal review. This policy reflects how the service works today and is written to follow the Digital Personal Data Protection Act, 2023. It will be finalised with legal counsel before launch.
1. Who we are
WealthBotics is a service of Wealth Botics Fintech, India ("we"). We are the data fiduciary for the personal data you give us on this website.
2. What we collect and why
- Account details — name, email, optional mobile number and a password (stored only as a salted scrypt hash). Purpose: to create and secure your account.
- PAN — only when you choose to verify it, and only with your consent. Stored encrypted (AES-256-GCM) and shown only in masked form. Purpose: to identify you to data providers you authorise.
- Financial information — deposits, investments and loans, fetched only after you give explicit consent through the Account Aggregator framework or a credit bureau. Purpose: to show your net worth and planning tools. Until our licences and provider contracts are in place, this feature uses sandbox test data and fetches nothing real.
- Interest registrations — the opportunity and indicative amount you register interest in. This is not a booking or an investment.
- Security logs — sign-in events and actions on your account, with a one-way hash of your IP address, to detect misuse.
We do not sell your data and do not use it for advertising.
3. AI features
If you use the AI assistant, we send it your question and aggregated figures only (totals by asset type). We never send your name, PAN, credit score or account numbers. AI answers are educational and can be wrong.
4. Consent and withdrawal
Each data fetch is tied to a consent that states its purpose, the data covered and an expiry date (180 days). You can see and revoke your consents at any time under My account. Revoking deletes the data fetched under that consent.
5. Your rights
- Access — download all data we hold about you from My account → Download my data.
- Correction — update your PAN or re-link accounts at any time, or write to us.
- Erasure — delete your account from My account. This permanently deletes your profile, PAN, consents and fetched data. Minimal security logs may be kept as required by law.
- Grievance redressal — contact our Grievance Officer (below). If unresolved, you may approach the Data Protection Board of India.
6. Security
Data is sent over HTTPS only. Passwords are hashed; PAN is encrypted with keys held outside the database; sessions use secure, http-only cookies; requests are rate-limited; and access to accounts is logged. No system is perfectly secure; we will notify you and the Data Protection Board of a personal data breach as the law requires.
7. Where data is stored
Our application and database are hosted with cloud providers. We aim to keep personal data in India (Mumbai region) where available.
8. Retention
We keep your data while your account is active. Fetched financial data is deleted when its consent expires or is revoked, and all data is deleted when you delete your account.
9. Children
The service is for adults (18+). We do not knowingly collect data from children.
10. Contact
Grievance Officer, Wealth Botics Fintech — contact details will be published here before launch. Meanwhile, message us on Instagram @WealthboticsClub.