Last updated: 1 May 2026
1. What we collect
- Identity data: name, PAN, Aadhaar (for eKYC only), date of birth.
- Contact data: email, phone, address.
- Financial data: bank account, demat details, investment portfolio, transaction history.
- Usage data: pages viewed, features used, device and browser metadata.
2. Why we collect it
- To complete KYC and open your investment account, as required by SEBI.
- To provide investment advisory services and execute transactions you authorise.
- To send you service updates, portfolio reports, and tax statements.
- To comply with legal and regulatory obligations (PMLA, SEBI, RBI, IT Department).
- To improve our products — only on aggregated, anonymised data.
3. Who we share it with
We share your data only with:
- SEBI-registered partner brokers, AMCs, and IRDAI-licensed insurers — as needed to execute the investments you authorise.
- Regulators (SEBI, RBI, IT Dept., FIU-IND) on lawful demand.
- Third-party service providers (e-sign, eKYC, hosting) under strict contractual data-protection terms.
We do not sell your data, and we do not share it with marketing partners.
4. How we protect it
- Encryption in transit (TLS 1.2+) and at rest (AES-256).
- Role-based access on the server side — least-privilege by default.
- Annual third-party security audits and quarterly internal reviews.
- Database row-level security: only server-side service-role keys can read sensitive data.
5. How long we keep it
Active client data is retained for the duration of our relationship. After you close your account, we retain records for 8 years as required by SEBI and PMLA, after which they are securely deleted.
6. Your rights
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate data.
- Deletion: request deletion (subject to regulatory retention requirements).
- Portability: receive your data in a machine-readable format.
- Withdrawal: revoke consent for non-essential processing.
Email privacy@peculiex.example.com to exercise any of these rights. We respond within 30 days.
7. Cookies
We use essential cookies to keep you logged in and analytics cookies to understand how the Platform is used. You can change cookie preferences at any time via the banner shown on first visit.
8. Updates
When we update this policy materially, we'll notify you by email at least 14 days before the change takes effect.