Privacy Policy

We collect personal information necessary to deliver services, authenticate identity, process transactions, and fulfil regulatory compliance:

• Identity & contact information: Full name, email address, telephone/mobile number, and date of birth.
• Government identifiers: Permanent Account Number (PAN) and government identity verification credentials (such as Aadhaar details, which are processed strictly through authorised UIDAI-compliant verification channels or masked, tokenised records; numeric identifiers are never published or made accessible across the Platform).
• Broker & financial account data: Broker client IDs, access tokens, connected brokerage names (Zerodha, Dhan, Angel One), and order transaction logs initiated through the Platform.
• Technical & device information: Internet Protocol (IP) address, operating system, browser type, device identifiers, system activity, and cookies.

Our mobile and web applications may request specific system-level permissions for functional and fraud-prevention purposes:

• Camera: Requested on a one-time basis to enable camera access for live user verification, profile updates, or scanning QR codes.
• Location: Requested to verify your geographic presence within India as required for domestic financial compliance, fraud prevention, and session validation.
• SMS: Requested solely to facilitate auto-detection of one-time passwords (OTPs) during login and transaction authentication. We do not read, process, or store personal SMS messages.

Aarthik AI offers authentication via Google Sign-In:

• We collect your primary email address, full name, and profile avatar associated with your Google account strictly for identity verification and profile creation.
• We do not request or utilise read-only access to your Gmail messages, inbox contents, Google Drive files, or contacts.
• Our use of data received from Google APIs adheres strictly to the Google API Services User Data Policy.

We process your personal information for the following legitimate business and operational purposes:

1. Creating and maintaining your user account on Aarthik AI.
2. Enabling subscription processing, invoicing, and authentication with payment aggregators (Razorpay).
3. Routing portfolio order baskets seamlessly to your selected broker (Zerodha, Dhan, Angel One).
4. Providing real-time rebalance notifications, order tracking, and account management alerts.
5. Detecting and mitigating fraud, illegal trading behaviour, system exploitation, and unauthorised account access.
6. Complying with statutory audits, court orders, and requests from regulatory bodies (SEBI, RBI, law enforcement agencies).

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share data only with trusted partners essential for service delivery:

• SEBI-registered Research Analysts: Basic subscriber confirmation (name and subscription validity) is shared with the specific Research Analyst whose basket you subscribe to, enabling them to fulfil regulatory record-keeping.
• Partner stockbrokers: Order details, tokenised IDs, and transaction instructions are passed to your chosen broker (Zerodha, Dhan, Angel One) to execute trades.
• Payment aggregators: Transaction amounts, name, and contact details are transmitted to Razorpay for payment authorisation and processing.
• Cloud & infrastructure providers: All application servers and database records are hosted on secure, access-controlled cloud infrastructure provided by Amazon Web Services (AWS) located within Indian data centre regions.
• Legal & regulatory authorities: Personal information may be disclosed where mandated by Indian law, judicial decree, or statutory requests from SEBI, the Reserve Bank of India, or investigative agencies.

• Cloud hosting: All user data, transaction records, and logs are encrypted at rest and in transit (using TLS 1.3 and AES-256 encryption) and hosted on AWS infrastructure located in India.
• Data retention: Personal information is retained for an active account lifecycle. If you delete your account or discontinue services, your personal identification records will be purged or irreversibly anonymised within twelve (12) months, except where a longer retention period is mandatory under statutory taxation, anti-money laundering, or securities regulations.
• Security controls: We implement strict role-based access control (RBAC), multi-factor authentication for administrators, continuous vulnerability assessment, and industry-standard security firewalls.

Subject to applicable Indian laws and regulatory retention mandates, you hold the following rights:

• Right to access & review: You may review and request a summary of the personal data we hold about you.
• Right to correction: You may request the rectification of inaccurate or outdated personal data.
• Right to erasure / revocation of consent: You may withdraw your consent or request account deletion by emailing support@aarthik.ai. Upon verification, your account will be deactivated and data purged per our retention schedule, subject to regulatory compliance.

In accordance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, the details of the Grievance Redressal Officer are as follows:

• Company name: Pocketwise Technologies Private Limited
• Brand name: Aarthik AI
• Grievance Officer: Legal & Compliance Desk
• Registered address: 310, Trinity Cygnus, Udhna-Magdalla Road, Vesu, Surat - 395007, Gujarat, India
• Official support email: support@aarthik.ai
• Grievance Officer email: grievance@aarthik.ai
• Response timelines: We acknowledge complaints within 48 business hours and endeavour to resolve all grievances within thirty (30) days from the date of receipt.