Privacy Policy
Effective date: 9 October 2026 · Version: 2.0 (replaces the version dated 27 November 2025)
Privacy at a glance
This summary covers the key points. The full Policy below governs.
- Who we are. The Financial Vines is a brand of Jobsarus Online Private Limited, an AMFI-registered Mutual Fund Distributor.
- What we collect. Account details, what you type into our tools, apps and games, your study activity, and, only if you invest through us, the KYC and transaction details the law requires.
- No selling. We never sell your personal data. We do not use your identifiable financial data to train AI models without your separate, explicit consent.
- Who sees it. Our service providers and, for investments, the mutual funds, their registrars, KYC agencies and transaction platforms that must process it.
- Your rights. Access, correct or erase your data, withdraw consent, nominate someone and complain. Write to info@thefinancialvines.com.
- Quick answers. We acknowledge complaints within 24 hours and resolve them within 7 days.
1. About this Policy
1.1 This Privacy Policy ("Policy") applies to www.thefinancialvines.com, its tools, calculators, apps, games, study hubs, resources and AI features, our newsletters and WhatsApp, email and social-media channels, and any mutual fund distribution services we provide (together, the "Services").
1.2 We publish this Policy under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 ("IT Rules"). It is also our notice under section 5 of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025, as their provisions come into force.
1.3 This Policy is a standalone notice that you can read and understand on its own. It sits alongside our Terms and Conditions and Disclaimer, which govern your use of the Services. Where we rely on your consent, we ask for it separately and clearly, never by default.
2. Who we are
2.1 The Services are provided by Jobsarus Online Private Limited (CIN U74999HR2022PTC100396), registered office Plot No 114, Block 5, Phase-5, Sector 53, HSIIDC, Kundli, Sonipat, Haryana 131028, India, a company incorporated in India, recognised as a startup by DPIIT, and registered with AMFI as a Mutual Fund Distributor (ARN-283063). "The Financial Vines" is its brand. In this Policy, "we", "us" and "our" mean Jobsarus Online Private Limited.
2.2 We are the Data Fiduciary for the personal data described in this Policy, which means we decide why and how it is processed. Our founder, Himani Chaudhary, and our directors and team act on behalf of the company, not in a personal capacity.
2.3 When you invest in a mutual fund through us, the Asset Management Company ("AMC") of that fund and its registrar also process your data as separate Data Fiduciaries, under their own privacy policies and SEBI regulations.
3. Personal data we collect
3.1 We collect only what each Service needs. "Required" items are needed for that Service; without them we cannot provide it.
| Category | What it includes | When we collect it | Required? |
|---|---|---|---|
| Account | Name, email, phone number, password (stored only in hashed form by our sign-in provider), sign-in records | When you register | Required for an account |
| Profile and planning answers | Age, city, occupation, income range, goals, investment horizon, risk-profile answers | When you use the Invest flow, Finance Flap or our apps | Required for that feature |
| Financial data you enter | Income, expenses, loans, EMIs, savings, investments, holdings, insurance, tax regime, goals | When you use calculators, apps, AI tools or games | Your choice; needed for the result you ask for |
| Study and purchase data | Courses and resources accessed, mock-test scores, progress, purchases, invoices | When you study or buy | Required for that product |
| Watermark data | Your name, email or order ID printed on paid study materials | When you download paid material | Required for paid downloads |
| Payment data | Order amount, transaction reference, status. Card, UPI and bank details are collected by our payment gateway, not by us | When you pay | Required to pay |
| Investment and KYC data (only if you invest through us) | PAN, KYC status, date of birth, address, bank account and IFSC, nominee details, FATCA/CRS declarations, income slab, folio numbers, transactions, signature, last four digits of Aadhaar where a form requires it | When you choose to invest through Jobsarus as distributor | Required by law and by the AMC to invest |
| AI inputs and outputs | Questions, prompts and uploads you give our AI features, and their replies | When you use AI features | Optional |
| Communications | Emails, WhatsApp and phone messages, contact-form entries, comments and community posts | When you contact us or post | Optional |
| Device and usage data | IP address, browser, device, pages visited, referring page, clicks, error logs, cookies | Automatically | Required for security |
| Consent and preference records | Marketing choices, consents given or withdrawn | When you choose | Required to honour your choices |
3.2 Sensitive data. Under the SPDI Rules, passwords and financial information such as bank account details are "sensitive personal data or information". We collect them only for the purposes in this Policy, with your consent, and protect them as section 8 describes.
3.3 What we never ask for. We never ask for your card number, CVV, UPI PIN, net-banking password, OTP or full Aadhaar number by phone, WhatsApp, email or social media. Do not share them with anyone claiming to be us.
3.4 Data about others. If you enter data about family members (for example, in a family-finance tool or as a nominee), you confirm that you are entitled to share it and have told them about this Policy.
4. Why we use your data, and on what basis
4.1 The DPDP Act allows processing with your consent or for the "legitimate uses" in its section 7. Until the Act fully commences, the SPDI Rules also require consent for sensitive data.
| Purpose | Data used | Basis |
|---|---|---|
| Create and secure your account | Account, device and security data | Consent; data you provide voluntarily for this purpose (DPDP Act, s. 7(a)) |
| Run calculators, apps, games and study tools, and save your progress | Planning answers, financial data you enter, study data | Consent; s. 7(a) |
| Deliver paid products, issue invoices and protect content from piracy (watermarking) | Purchase, payment and watermark data | s. 7(a); legal obligation under GST law |
| Run AI features you use | AI inputs and outputs | Your consent, asked when you first use them |
| Process mutual fund investments you ask us to place as distributor: KYC, onboarding, transactions, servicing, nominee and FATCA records | Investment and KYC data | s. 7(a); legal obligations under SEBI, AMFI, AMC, KYC and anti-money-laundering requirements (s. 7(d)) |
| Answer your queries and grievances | Communications, account data | s. 7(a); legal obligation |
| Send service messages, security alerts, changes to our terms and the periodic reminders the IT Rules require | Contact details | s. 7(a); legal obligation |
| Send newsletters, offers and content updates | Name, email, phone, preferences | Your consent (opt-in; withdraw anytime) |
| Improve the Services using aggregated, de-identified statistics | Usage and device data | Consent for optional analytics; s. 7(a) |
| Keep the Services secure, prevent fraud and misuse, and keep logs | Device, usage and security data | Legal obligation (CERT-In directions); s. 7(a) |
| Comply with law, orders and lawful requests; establish or defend legal claims | Only the data needed | Legal obligation (s. 7(d), 7(e)) |
4.2 We will not use your data for a new purpose without telling you and, where the law requires, asking for fresh consent.
4.3 We do not sell personal data, and we do not share it with advertisers. We do not use your identifiable financial data to train AI models unless you give separate, explicit consent. We may create aggregated statistics that cannot identify you and use them to run and improve the Services.
4.4 Our tools and AI features produce automated estimates, not decisions about you. Nothing we do with your data has a legal or similarly significant effect on you without a human decision.
5. Consent, and how to withdraw it
5.1 Where we rely on consent, we ask through a clear action, such as ticking an unticked box or starting a feature. Each consent covers only the purpose shown.
5.2 You can withdraw consent at any time, as easily as you gave it: through the unsubscribe link in any email, by replying "STOP" on WhatsApp, in your account settings, or by writing to info@thefinancialvines.com.
5.3 Withdrawal does not affect processing already done. After you withdraw, we stop that processing within a reasonable time and erase the related data unless the law requires us to keep it. Investment and KYC records that SEBI, AMFI, AMCs or anti-money-laundering law require us to keep cannot be erased on request until that period ends.
5.4 Once Consent Managers registered under the DPDP Act begin operating, you may also give, review or withdraw your consent to us through one of them.
6. Who we share data with
6.1 We do not sell, rent or trade personal data. We share it only as below, and only as much as each purpose needs.
| Recipient | Why | Data involved |
|---|---|---|
| Google (Firebase and Google Cloud) | Hosting, sign-in, database, file storage, verification emails and SMS codes | All data held in the Services |
| Vercel | Website hosting and delivery | Device and usage data, data passing through the website |
| Google Gemini API | Runs AI features | AI inputs and outputs |
| Razorpay | Collects payments | Order and payment data |
| WhatsApp (Meta) and our email providers | Sends messages you asked for or agreed to | Name, contact details, message content |
| AMCs, their registrars (such as CAMS and KFin Technologies), KYC Registration Agencies, the CKYC registry and mutual fund transaction platforms (such as BSE StAR MF, MF Utilities or NSE NMF II) | To place and service mutual fund investments you ask us to make | Investment and KYC data |
| Regulators, courts, law enforcement, CERT-In, tax and AML authorities | When the law or a valid order requires it, or to prevent fraud or protect anyone's safety | Only the data required |
| Professional advisers (lawyers, auditors, insurers) | Under duties of confidentiality, when needed | Only the data needed |
| A successor business | If we merge, are acquired or sell assets; it must protect your data as this Policy describes | Data relating to the transferred business |
6.2 Our service providers act on our instructions under written contracts requiring confidentiality and security. AMCs, registrars, KYC agencies and transaction platforms process investment data as independent Data Fiduciaries under their own policies and SEBI regulations.
6.3 When you share a plan with us on WhatsApp, comment on our posts, or post in a community feature, the information you share is also processed by that platform under its own terms, and public posts can be seen by others.
7. Transfers outside India
7.1 Some of our providers process data outside India. For example, Google's Firebase Authentication runs only in the United States, and AI and email providers may process data in other countries.
7.2 The DPDP Act permits such transfers except to countries the Central Government restricts by notification. We will not transfer personal data to a restricted country and will follow any conditions the Government sets. Investment and KYC data is processed by Indian AMCs, registrars and KYC agencies under SEBI's requirements.
8. How we protect your data
8.1 We follow reasonable security practices consistent with rule 8 of the SPDI Rules and the DPDP Rules, including encryption in transit and at rest, access limited to authorised staff with multi-factor authentication, logging and monitoring, regular backups, and written security obligations on our service providers.
8.2 We keep security logs for at least one year, and ICT system logs within India for at least 180 days, as the DPDP Rules and CERT-In directions require.
8.3 No system is completely secure. Keep your password private, and tell us immediately at info@thefinancialvines.com if you suspect misuse of your account. We are not responsible for losses caused by your disclosure of your own credentials or OTPs.
9. If there is a data breach
9.1 We act at once to contain any personal data breach. We will inform affected people without delay, explaining what happened, the likely consequences, what we are doing and what you can do.
9.2 We will report the breach to the Data Protection Board of India without delay, with a detailed report within 72 hours of becoming aware of it, and report cyber security incidents to CERT-In within six hours, as the law requires.
10. How long we keep data
| Data | How long we keep it |
|---|---|
| Account, planning and app data | While your account is open; deleted within 90 days after you close it |
| Study and purchase records | While your account is open, and invoices for 8 years as tax and company law require |
| Investment and KYC records | For the periods SEBI, AMFI, AMCs and anti-money-laundering law require, which may run up to 8 years after our relationship ends |
| AI conversation history (if saved) | While your account is open, unless you delete it sooner |
| Communications and grievances | 3 years after the matter is closed |
| Security and processing logs | At least 1 year; ICT logs at least 180 days within India |
| Consent and opt-out records | As long as needed to prove consent and honour opt-outs |
| Inactive accounts | After 3 years without sign-in, we may delete the account after 30 days' email notice, except records the law requires us to keep |
We may keep data longer where needed to comply with a law or order, resolve a dispute or enforce our agreements, and only for that purpose.
11. Your rights
11.1 Under the DPDP Act (as it comes into force) and the SPDI Rules, you have the right to:
- Access a summary of the personal data we process about you, our processing activities, and the identities of those we have shared it with;
- Correct, complete or update inaccurate or incomplete data;
- Erase data no longer needed, unless the law requires us to keep it;
- Withdraw consent at any time (section 5);
- Grievance redressal through our Grievance Officer (section 17);
- Nominate another person to exercise your rights if you die or become incapable; and
- Review or decline to give sensitive data, accepting that some Services may then be unavailable.
11.2 How to ask. Write to info@thefinancialvines.com from your registered email or phone. We may verify your identity before acting, and never ask for more than we need. We respond within 30 days, and always within the period the law allows (under the DPDP Rules, not more than 90 days).
11.3 Investment records. You can update your KYC, bank or nominee details through us, but changes take effect only when the AMC, registrar or KYC agency processes them. We cannot erase records they or the law require to be kept.
11.4 Complaint to the Board. After using our grievance process, you may complain to the Data Protection Board of India in the manner it prescribes.
12. Your duties
Under section 15 of the DPDP Act you must comply with applicable law, not impersonate anyone, not suppress material information when providing data for any document or proof issued by the State, not file false or frivolous complaints, and give only verifiably authentic information when asking for correction or erasure. The Board may impose a penalty of up to ₹10,000 for breach of these duties.
13. Children
13.1 You must be at least 18 to create an account, buy a product, use our apps that save personal data, or invest through us. Our free public content can be read by anyone, but we do not knowingly collect personal data of anyone under 18.
13.2 If we learn we hold a child's personal data without verifiable parental consent, we will delete it. A parent or guardian may write to info@thefinancialvines.com. Investments for a minor can be made only by the guardian, in the manner SEBI and the AMC allow.
14. Cookies and similar technologies
14.1 We use cookies, local storage and similar technologies to keep you signed in, save your progress in apps and games, remember settings, and understand how the Services are used.
| Type | Why we use it | Can you switch it off? |
|---|---|---|
| Strictly necessary | Sign-in, security, saving your plans and progress | No; the Services cannot work without them |
| Preferences | Remember your settings | Yes, though settings may reset |
14.2 We do not use advertising cookies, and we do not let advertisers track you through our Services. You can clear or block cookies in your browser; blocking necessary cookies will stop sign-in and saved progress from working.
15. Emails, WhatsApp and other messages
15.1 We send service messages (verification, purchases, security alerts, changes to our terms, and the reminders the IT Rules require at least once every three months). You cannot opt out of these while your account is open.
15.2 We send newsletters, offers and content updates only with your consent. Opt out any time through the unsubscribe link, by replying "STOP", or in your account settings.
15.3 If you contact us on WhatsApp, Instagram, YouTube or another platform, that platform also processes your messages under its own terms.
15.4 Beware of impersonators. We never ask for payment to a personal account, promise guaranteed returns, run paid stock-tip groups, or ask for OTPs or passwords. Our only official channels are listed on our Contact page. Report suspicious accounts to info@thefinancialvines.com and to the cybercrime helpline 1930.
16. Third-party websites and services
Our Services link to third-party websites, apps, AMC and registrar portals, payment pages and social media. Their own privacy policies apply to what you share with them, and we are not responsible for their practices.
17. Grievance Officer and contact
17.1 For questions, requests about your data, or complaints, contact our Grievance Officer, who also answers questions about our processing on our behalf under the DPDP Act:
- Name and designation: Abhishek Jain, Director & CTO
- Email: info@thefinancialvines.com
- Phone / WhatsApp: +91 98100 43744 (Monday to Friday, 10:00 to 18:00 IST)
- Address: Jobsarus Online Private Limited, Plot No 114, Block 5, Phase-5, Sector 53, HSIIDC, Kundli, Sonipat, Haryana 131028, India
17.2 We acknowledge complaints within 24 hours and resolve them within 7 days, as the IT Rules require. Requests to remove unlawful content are resolved within 36 hours, and complaints about content exposing a person's private areas, nudity, sexual acts or impersonation (including morphed images) are acted on within 2 hours.
17.3 If you are not satisfied, you may appeal to the Grievance Appellate Committee at www.gac.gov.in within 30 days of our decision, or, for personal data matters, complain to the Data Protection Board of India. Complaints about mutual fund transactions can also be raised as set out in the mutual fund complaints clause of our Terms and Conditions.
18. Changes to this Policy
We may update this Policy to reflect changes in the Services or the law. We will post the new version here with a new effective date and, for material changes, notify you by email or on the website at least 15 days before they take effect, unless the law requires a change sooner. Where a change needs fresh consent, we will ask for it.
19. Languages
This Policy is available in English. You can ask for it in any language listed in the Eighth Schedule to the Constitution of India by writing to info@thefinancialvines.com. If a translation differs, the English version prevails unless the law requires otherwise.