Privacy notice

GrowProfit is operated by Inspirelabs Solutions Limited, a company registered in India (CIN U74999TG2017PLC115610) with its registered office at 21st Floor, OneWest Building, Narsinghi Nanakramguda Service Road, Hyderabad 500030. For the personal data described here, we are the Data Fiduciary under the DPDP Act: we decide why and how it is processed, and we answer to you for it.

Where an advisor or a family office adds your data to their workspace, they decide what to add and why. We process it on their instructions to provide the service, and they are responsible for having your consent or another lawful basis.

We collect only what the service needs. Most of it comes from you or from the statements you upload.

Each purpose is a separate consent, recorded with the exact version of the notice you saw. You can withdraw any consent as easily as you gave it, from your account’s privacy settings. Withdrawing doesn’t undo processing that already happened lawfully.

Website analytics is chosen on this website, not in your account, and the choice is kept only in your browser. Change it from “Cookie settings” at the bottom of any page.

Some of these features are still being built. Where a purpose isn’t available yet, we don’t ask for it and don’t process data for it.

• When you add a member marked as a minor, you confirm you are their parent or lawful guardian.
• When you add another adult’s PAN or holdings, you confirm they have authorised you to. Both confirmations are recorded.
• We never use the data of members marked as minors for profiling or marketing.
• Advisors and family offices are responsible for the authority they hold over their clients’ and members’ data.

• Sell your personal data, or share it for anyone else’s marketing.
• Show you advertising, or let advertising networks track you on GrowProfit.
• Use your holdings to sell you financial products, or give you investment advice.
• Store your broker passwords. Connections use the provider’s own consent flow.
• Look at your workspace without your permission. Support access needs your grant, is read-only, ends within 24 hours and is logged.

We use a small number of service providers (Data Processors) who process data only on our instructions and under contract:

We also share data when you ask us to (for example, a read-only link you create for your CA, which shows only the portfolios and reports you choose), and when the law requires it, such as a valid order from a court or regulator. We will tell you about such a request unless the law forbids it.

All primary data, replicas, backups, logs and stored files are kept in India, in Mumbai, with backups in Hyderabad. Report emails are sent from India too, through Amazon SES. There are two exceptions. To send account and security emails (such as sign-in codes, password resets and security alerts), your email address and the content of each email pass through our email delivery provider, Resend, in the United States. And if you allow analytics on this website, Google Analytics, in the United States, records your visits to the website’s pages; it sees nothing inside your account. Your portfolio data, statements and reports are never sent outside India. If any of this changes, the processor and country will be listed here first.

PAN, date of birth and phone numbers are encrypted with a key per person. Every table holding your data is protected by row-level security in the database, as well as by the application. Uploaded files are scanned and read in an isolated process with no network access. Every change to financial data, membership or settings is written to an append-only audit log.

No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the DPDP Act requires. The full picture is on our security page.

You can exercise these rights from your account’s privacy settings, or by writing to us. Each request gets a reference number and you’re told of every status change.

If the law sets a shorter period for any of these, we will meet it.

Our Grievance Officer is Dileep Reddy K, reachable at [email protected]. Write with your name, the email on your account and what happened; we will acknowledge within 2 days.

If you are not satisfied with how we resolve your grievance, you may complain to the Data Protection Board of India.

When we change this notice materially, we will show you a summary of the change when you next sign in. Continuing to use GrowProfit is never treated as consent to a new purpose: anything new needs your fresh opt-in.

Questions about this notice or your data: [email protected]. Post: 21st Floor, OneWest Building, Narsinghi Nanakramguda Service Road, Hyderabad 500030.