Privacy Policy

Last updated: May 2026

1. Information We Collect

We collect information you provide when you register, complete your profile, or use our services. This includes your name, email address, phone number, LinkedIn profile, and investment preferences. When you invest through the platform, we also collect transaction details necessary for compliance.

2. How We Use Your Information

To provide and personalize InvestHaat services
To match investors with relevant startup opportunities
To send transaction confirmations and platform updates
To comply with applicable laws and SEBI regulations
To prevent fraud and maintain platform security

3. Data Sharing

We do not sell your personal information. We may share data with:

Payment processors (Razorpay) for transaction processing
KYC verification partners for regulatory compliance
Cloud infrastructure providers (AWS) under strict data agreements
Law enforcement when legally required

4. KYC Data

Aadhaar numbers, PAN numbers, and bank account details are encrypted at rest using AES-256 and are never displayed in plain text after submission. KYC data is retained as required by SEBI and PMLA regulations.

5. Cookies

We use httpOnly cookies for session management (im_token) and a client-readable cookie (im_user) for UI personalization. We do not use third-party advertising cookies.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at privacy@investhaat.in. Note that some data may be retained for regulatory compliance even after account deletion.

7. Contact

For privacy-related queries, contact our Data Protection Officer at privacy@investhaat.in.