Privacy Policy

Information You Give Directly

Personal data is only collected when you choose to submit it through a form on this website. Nothing on this list is gathered in the background.

• Contact enquiry form: your full name, email address, phone number, the service you are interested in, and the message you write.
• Equity research course enquiries: your name, mobile number and email address, submitted when you request course material.
• Course waitlist: your name, mobile number, email address and the user type you select, submitted when you join the waitlist.
• Portfolio Health Check: your name, email address and mobile number, together with the financial detail described in the next section.
• Loan Planning Report enquiry: your name, email address and mobile number, together with the financial detail described in the next section.

Financial Information You Provide for a Study

Two services ask for more detailed financial information than an ordinary enquiry does, because neither can be carried out without it. It is collected only if you choose to submit one of those forms, and only in the free-text form in which you write it.

• Portfolio Health Check: the mutual fund schemes you hold, with approximate amounts or units and start dates where you know them, plus the goal and investment horizon you state.
• Loan Planning Report enquiry: the loan type and approximate loan amount you are considering, your approximate annual income, whether you already service a loan, and the question you want the report to answer.

This information is used solely to prepare the study you asked for. It is not used to build a profile of you, not used to market an unrelated product to you, and not shared with any lender, asset management company or insurer. Approximate figures are sufficient throughout: no bank statement, payslip, PAN, Aadhaar, account number or password is ever asked for, and none should be sent.

Technical Information

This website sets no cookies. It runs no analytics, no advertising pixels and no tag managers. Your browsing is not tracked across pages, sessions or other websites, and no profile is built about you.

Some technical information is nevertheless unavoidable, because it is inherent in how any website is delivered over the internet:

• Server request logs. The site is hosted on Google Firebase Hosting, which records standard request data such as your IP address, the time of the request and your browser's user-agent string. This is handled by Google as part of delivering the site.
• Google Fonts. The site loads the Poppins typeface from Google's font servers. Doing so discloses your IP address and user-agent to Google. No font request carries your name, email or any form data.
• Local browser storage. The Firebase software library creates two small technical databases in your browser. One records that the library is running; the other exists to hold an administrator sign-in token. Neither contains personal data for ordinary visitors, and no sign-in token is stored unless a site administrator logs in on that device.

Payment Information

No payment is processed through this website. There is no payment page, no card form and no payment gateway on this site, so no card number, UPI ID, bank account detail or other payment credential is ever collected here or held by me. Where a fee is payable for a Loan Planning Report, it is agreed with you in writing first and settled separately. If that changes, this policy will be updated to name the payment processor before any payment is taken.

Where It Is Held

Form submissions are stored in Google Cloud Firestore, part of Google Firebase. Google acts as a Data Processor, holding and processing the data on my instructions and on my behalf. I remain the Data Fiduciary and remain accountable to you for it.

Retention

Your data is kept only for as long as it is needed for the purpose you gave it for, or for as long as a legal or regulatory obligation requires it to be kept — whichever is longer. Once neither applies, it is deleted. You may ask for erasure at any time, and doing so does not require you to give a reason.

The financial detail you submit for a Portfolio Health Check or a Loan Planning Report is kept only for as long as that study needs it and any record-keeping obligation requires. Once your study has been delivered you may ask for that detail to be erased, and it will be — the delivered report is yours to keep either way.

Security Measures

Stated plainly, and limited to what is actually in place:

• All traffic between your browser and this website is encrypted in transit using HTTPS.
• Firestore security rules govern access to the stored data. Enquiry records can be submitted by the public but cannot be read back by site visitors; read and administrative access is restricted to the authenticated site owner.
• Administrative access requires an authenticated sign-in and is limited to a single account.

No claim is made to any security certification, formal audit or encryption standard beyond what is described above. No method of transmission or storage over the internet is completely secure, and absolute security cannot be guaranteed.

Personal Data Breach

In the event of a personal data breach, I undertake to notify each affected Data Principal and the Data Protection Board of India, in the manner and within the timelines required by the DPDP Act and the rules made under it. Notification to you will describe what happened, what data was involved, and what you can do about it.

Children's Data

This website and its services are intended for adults. Personal data is not knowingly collected from anyone under the age of 18 without verifiable consent from a parent or lawful guardian, as required by the DPDP Act. No tracking, behavioural monitoring or targeted advertising is directed at children — none is carried out at all. If you believe a child has submitted personal data here, email amol@investfirst.co.in and it will be deleted.

Third Parties

Personal data is shared only where it is necessary to deliver the service you asked for, and only with:

• Asset Management Companies (AMCs) and BSE StAR MF, where you choose to proceed with a mutual fund transaction. These platforms are required to process your details to execute and record the transaction and to meet their own regulatory obligations.
• Insurance companies, where you choose to proceed with an insurance proposal, for underwriting and policy issuance.
• Google Firebase, as the hosting and database processor described above.
• WhatsApp, where you choose to start a conversation using a WhatsApp link on this site. That conversation happens on WhatsApp's platform and is subject to WhatsApp's own privacy terms. You are never messaged first — no WhatsApp message is ever sent to you by this website, and the first message is always yours.
• WhatsApp (Meta), for internal alerts. When you submit a form, a short alert is sent to me over WhatsApp so an enquiry is not left sitting unread. That alert contains your name, your mobile number, which service you asked about — including the loan type and amount where you are enquiring about a loan — a reference number and the time it arrived. It does not contain your holdings, your income figure, your stated goal or your message, all of which stay in the email and the database. Because the alert travels over WhatsApp, Meta processes those few details in transit. Nothing is sent to you, and your details are not disclosed to any other person.

Personal data may also be disclosed where disclosure is required by law, by a regulator, or by an order of a court or other competent authority.

Changes to This Policy

This policy may be updated as services change or as the law and the rules under the DPDP Act develop. The "Last updated" date at the top of this page always reflects the current version. Where a change materially affects how your personal data is used, your consent will be sought again rather than assumed. Please review this page from time to time.