Privacy Policy

1. Who is responsible

EquiResearch Private Limited ("we") decides how your account data is used and is the data fiduciary for it. Where you upload information about your clients, you remain responsible for it and we process it only on your behalf to provide the Platform to you.

2. What we collect

• Account details — your name, email address and mobile number, which you give when you sign up, and a password only if you set one (stored only in hashed form). We confirm your email with a one-time code. If you sign in with Google, we receive your name and email address from Google.
• Earlier distributor checks — for accounts created while we verified ARNs at sign-up (before 6 October 2026), the ARN and the result of that check against AMFI's public register. We no longer ask for an ARN at sign-up.
• Sign-in and security records — date and time, IP address, approximate location derived from it, browser and device, and the active session, used to keep one session per user and to detect misuse.
• Visit and usage records — for every visit, whether or not you are signed in: your IP address and the approximate location and network derived from it (city, region, country, internet provider — looked up on our own servers, never sent to a third party), your browser, operating system and device type, screen and window size, language and time zone, the page you arrived on and the site or campaign link that brought you (referrer and "utm" tags), a random visitor identifier kept in your browser, and the pages you open and in what order, how long each stays on screen and in active use, the buttons, tabs and links you click (by their label), when you switch away and come back, errors you run into, and when you leave. If you later sign in, earlier visits from the same browser are linked to your account. We never record what you type into forms, and we do not record the text of client details, names you give your portfolios or saved files, or your AI conversations as part of this. If your browser sends a Global Privacy Control or Do Not Track signal, your visits are not linked to one another. It is collected by our own Platform, not by a third-party analytics service, and is not used for advertising.
• What you create — portfolios, comparisons, saved settings, AI Analyst conversations, support tickets, reports you generate (and the address you email them to), and branding details such as business name, logo, ARN and EUIN.
• Client information you upload, where the Platform offers this — for example holdings, statements, names, PAN and contact details of your clients.
• Plan and payment records — the plans you take, invoices and payment references. Card and bank details are handled by the payment provider, not stored by us.

3. How we use it

• to create and secure your account, confirm your email address and keep one active session per user;
• to provide the Platform's features, including AI features and reports you ask for;
• to manage plans, payments and invoices, and to send service emails such as sign-in and verification codes and password resets;
• to answer support requests, fix problems and improve the Platform — including seeing, from usage records, which pages and features people use and where they get stuck or leave;
• to meet legal, tax and regulatory obligations and to enforce our Terms.

We do not sell personal data and do not use it for advertising.

4. Who we share it with

• AI model providers — questions you ask the AI Analyst or help assistant, and documents you ask the Platform to read, are sent through OpenRouter to AI model providers to produce the answer or extract the data.
• Service providers — hosting and backup storage, email delivery, Google (for Google sign-in) and, when payments are enabled, a payment provider. They process data only to provide their service to us.
• Authorities — where the law requires it, or to protect our rights and users.
• A successor — if our business or assets are transferred.

Some of these providers may store or process data outside India, subject to applicable law.

5. How long we keep it

We keep account data while your account is open. After closure, we delete or anonymise it within a reasonable period, except records we must or may keep — such as invoices, tax records, your acceptance of the Terms, and security logs. After your account ends you may ask for an export of client data you uploaded within thirty (30) days, after which it may be deleted.

Visit and usage records are kept for about thirteen (13) months and then deleted automatically; those linked to an account are deleted with it.

6. Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us to:

• give you a summary of your personal data we process and who we shared it with;
• correct, complete or update it;
• erase it, where we are not required to keep it;
• address a grievance about how we handle it; and
• let a person you nominate exercise these rights if you die or become incapacitated.

You may withdraw consent at any time; we may then be unable to keep providing the Platform. Send requests and grievances to our Grievance Officer at contact@equiresearch.com. If you are not satisfied with the outcome, you may approach the Data Protection Board of India.

7. Security

We use reasonable safeguards, including encrypted connections, hashed passwords and access controls. No system is completely secure, and we cannot guarantee the security of data.

8. Cookies and browser storage

See the Cookie Policy.

9. Children

The Platform is for professionals and is not meant for anyone under 18.

10. Changes

This policy may be updated from time to time; the date at the top shows the latest version.