privacy policy

how we treat your data.

The full version is below. The short version is on the next screen — most people only need that.

last updated · 26 june 2026 effective from · 26 june 2026 jurisdiction · india
tl;dr · the short version

only what we need. only while we need it.

You give us an email and a phone number through the form on this site. We use them only to call, text, or WhatsApp you about mutual funds, insurance, and wealth planning that you've asked about.

We don't sell your data. We don't share it with anyone you haven't agreed to. We don't sit on it forever.

The two checkboxes you ticked on the form aren't filler — they're required by Indian law (DPDP Act 2023 + TRAI). Ticking them is your consent. You can take it back any time — reply STOP to a WhatsApp, or email support@fundstowealth.com.

Reading time for the full version below: ~5 minutes. Worth it if you want to know what happens behind the scenes, what your rights are, and how to use them.
the full version · 13 clauses
01

who we are

This site (fundstowealth.com) is operated by Indushree Taxease Consultancy Private Limited — the Mumbai firm behind the funds to wealth brand — through Archita Ritesh Gattani, an AMFI Registered Mutual Fund Distributor (ARN-320768, EUIN E607752), operating from Mumbai Suburban, Pincode 400068.

For everything in this policy, Indushree Taxease Consultancy Private Limited is the "data fiduciary" under the Digital Personal Data Protection Act, 2023, with Archita acting as its registered Mutual Fund Distributor.

Indushree Taxease Consultancy Private Limited · CIN U93090MH2017PTC299865
Archita Ritesh Gattani · ARN-320768 · support@fundstowealth.com · +91 7208390720
02

what we collect

From the form, when you choose to submit it:

  • Your email — so we can write to you
  • Your phone number — so we can call, SMS, or WhatsApp you
  • Your consent records — which checkboxes you ticked, when, with what wording

Automatically, for audit purposes (Indian law requires this):

  • Your IP address — to prove the consent came from a real session
  • Your browser and device info — for security and abuse detection
  • The page you came from — so we know which CTA worked
  • The exact timestamp — for the audit trail

We do not collect anything you haven't actively given us — no background tracking, no third-party trackers, no advertising pixels.

03

why we collect it

Three reasons, all narrow:

  • To reply to you about the financial products you've enquired about
  • To meet our regulatory obligations — AMFI, SEBI, IRDAI, and TRAI all require records of consent and contact
  • To improve the site — anonymously, in aggregate (e.g. "the SIP calculator gets more leads than the lumpsum one")

That's the entire list. We're not building a profile of you. We're not training AI on your data. We're not selling anything to anyone.

04

the lawful basis

Under DPDP 2023, we process your data on the basis of your explicit, itemised, informed consent — given via the checkboxes you ticked. That's the only basis. You can withdraw it any time (see clause 06).

For statutory record-keeping required by SEBI/AMFI/IRDAI, we additionally rely on the "legitimate use" specified in DPDP Section 7 — compliance with Indian law.

05

who we share with

We share your data with only these parties, and only as needed:

  • AMCs and insurer partners — and only after you explicitly consent to a specific product. If you ask Archita about a HDFC mutual fund, your details may go to HDFC AMC for the application. Never before.
  • Our hosting + database providers — Vercel (USA, Singapore edge) for the website, Neon (Singapore) for the database. Both standard sub-processors, both DPDP-compatible.
  • WhatsApp Business + email infrastructure — Meta (for WhatsApp templates) and Resend (for transactional emails). Both have signed processor terms.
  • Regulatory authorities — if compelled by Indian law (court order, AMFI/SEBI/IRDAI/Income Tax/DPDP Board request). We will tell you if we're allowed to.

We do not sell your data, lease it, share it with marketers, or pass it to credit bureaus or analytics platforms.

06

how long we keep it

While you're an active client of Archita's — and for as long as you want to be.

If you withdraw consent, we delete your contact details from the marketing/active record within 7 days.

One caveat: if you've actually invested in a mutual fund or bought an insurance policy through Archita, SEBI/AMFI/IRDAI require us to keep your records for seven years from the date of the last transaction. We hold those in a separate, secured archive, accessible only on demand for regulatory or audit purposes. After seven years, they're anonymised or deleted.

07

your rights under DPDP

You have, by law, all of these rights — and we will honour them within 30 days of request:

  • Access — ask us what data we hold about you, in plain text
  • Correction — fix anything that's wrong
  • Erasure — delete your active records (subject to the 7-year statutory archive above)
  • Withdraw consent — at any time, with no penalty or pressure
  • Nominate — appoint someone to exercise these rights on your behalf in case of incapacity
  • Lodge a grievance — first with us, then with the Data Protection Board of India if you're not satisfied
08

how to use those rights

One email or one WhatsApp message. That's it.

email · support@fundstowealth.com
whatsapp · +91 7208390720
subject line: "DPDP Request"

We will respond and act within 30 days. No forms, no fees, no friction.

09

how we protect it

  • HTTPS on every page — your data never crosses the internet unencrypted
  • Database hosted in Singapore on Neon Postgres — encrypted at rest, daily backups
  • Access controls — only Archita and the site's designated technical administrator can read the leads table
  • Audit logs for every database query touching personal data
  • Tokens and credentials rotated regularly, scoped narrowly
  • 72-hour breach notification to the Data Protection Board if anything goes wrong, per DPDP Rules 2025
10

cookies, trackers, analytics

We use only the bare-minimum cookies that Vercel needs to serve the site (session continuity, edge caching). No advertising cookies. No Google Analytics, no Meta Pixel, no third-party tracking — full stop.

If we ever change this — say, to add Plausible or another privacy-respecting analytics tool — we will update this clause and let you know on the site.

11

children (under 18)

This service is for adults. If you're under 18, please don't submit the form. If a guardian wants to set up investments for a minor child (a Mutual Fund minor folio, for example), the guardian fills the form, gives the consent, and is the legal data principal under DPDP.

We do not knowingly collect data from anyone under 18 directly. If we ever do, we'll delete it the moment we find out.

12

changes to this policy

Privacy and data law in India is still settling — DPDP Rules 2025 were notified in November 2025, full substantive compliance is due by May 2027. As things change, this policy will too.

When we update it, we:

  • Change the "last updated" date at the top
  • Post a one-line summary at the top of the policy noting what changed
  • Send a WhatsApp note to active clients if the change is material
13

grievance officer

For any complaint, query, or escalation under DPDP — you can reach the Grievance Officer directly:

Archita Ritesh Gattani · Grievance Officer
Indushree Taxease Consultancy Private Limited
Mumbai Suburban · 400068
support@fundstowealth.com · +91 7208390720

If you're not satisfied with our response, you can also approach the Data Protection Board of India directly. The DPDP Act gives you that right, no permission needed.