Privacy Policy

Last updated: 17 October 2026

This Privacy Policy explains how Sampadha Fin Education ("Sampadha", "we") collects, uses, and protects your personal and financial information on Moneyanam.

1. What we collect

  • Account details you or your advisor provide: name, email, mobile number, PAN.
  • Financial data your advisor enters manually, or that is fetched through the Account Aggregator (AA) framework once you grant consent: mutual fund and equity holdings, bank balances, insurance policies, and SIP transactions.
  • Goals, notes, and reports created by you or your advisor.
  • Results of the identity (KYC) checks you approve, such as PAN verification, and, where available and you approve them, CKYC, bank-account and credit-bureau checks (see section 4).
  • Sign-in and security data: your email address or mobile number, a scrambled record of one-time codes, the network (IP) address and counters we use to block repeated failed attempts, and an audit trail of actions on your account.
  • Records of your choices: the notices you accepted, your consents and approvals, any person you nominate, and the requests you make to us.

2. How we use it

Solely to populate your dashboard, calculate your FinFit protection score, track progress against your goals, and generate reports for you and your advisor. We do not sell your data, and we do not use it for advertising. We share it only with the service providers listed in section 3, which process it on our behalf, and with the independent regulated entities you choose to involve, such as your Account Aggregator. We also disclose data where the law requires it, for example to SEBI or a court.

When you agree to this Privacy Notice and the Terms of Use we keep a record of it: which version, the date and time, the language shown, and, to prove it was you, a one-way scrambled form of your network address and your browser's user-agent text. We keep these records for 7 years.

3. Who processes your data

We use these service providers to run Moneyanam. Each handles personal data only on our behalf and for the purpose shown; we remain responsible for it.

  • Supabase: database, sign-in and file storage. Holds all the data in your account, including documents you upload. Servers in India (Mumbai).
  • Hostinger: hosts the Moneyanam website and application, so your data passes through its servers when you use the app. Servers in India.
  • Finanalyz, and its partner Surepass for Aadhaar e-signature: identity verification and, where you sign an agreement electronically, the e-signature. Data sent: for the check you approved, your name, mobile number, PAN, date of birth, bank-account details and ID-document images; for e-signature, the agreement. We do not store ID-document images. India.
  • CAMSFinserv, the RBI-licensed Account Aggregator you consent through (an independent regulated entity, not our processor): consent is given on its own screens, and it passes on the financial data you chose to share: bank accounts, mutual funds, equities, insurance. India.
  • Finduit, the technology provider through which we receive Account Aggregator data (we are a Financial Information User): works only after you consent, and handles your Account Aggregator handle, mobile number and the financial information you shared. India.
  • Resend, or our own mail server if Resend is not in use: sends our emails (invitations, reports, Account Aggregator notices and signing links); sign-in emails (codes and password resets) are sent through our authentication provider, Supabase. Data sent: your name, email address and the content of the email, which can include report content. Resend is in the United States.
  • Meta Platforms (WhatsApp): when we send you a one-time code by WhatsApp: to sign in (only if you choose WhatsApp sign-in), when you change your mobile number (the code goes to the new number), and when you approve an identity check (the approval code goes to the mobile number on your profile; an adult family member's code goes to their own mobile number). Data sent: the mobile number and the one-time code message. WhatsApp is run outside India, and Meta handles the message under its own terms.
  • Cloudflare (Turnstile): checks on sign-in pages that the visitor is a person, not a bot. Data sent: your network (IP) address and browser signals. United States and its global network.
  • Credit bureau(s), through Finanalyz: only if you approve a credit-report check (which may not be available to you). Data sent: PAN, name and mobile number. A bureau is an independent regulated entity with its own notice. India.
  • CKYC registry (CERSAI), through Finanalyz: only if you approve a CKYC check. Your PAN or identity details are sent to find your KYC record. India.

4. Checks you approve, and WhatsApp

Identity checks (such as PAN verification, mobile-to-name, CKYC, bank-account, credit-bureau and ID-document reading) go to the providers in section 3. Each check is shown to you in the client app and runs only after you approve it with a one-time code that we send by WhatsApp to the mobile number on your profile. We never send this code by email. An adult family member approves checks on themselves with a code sent by WhatsApp to their own mobile number. A child's checks also need a parent or guardian's consent (section 10), and the parent or guardian approves each one with a code sent to their own mobile number. For a child we do not run a mobile-number lookup or a credit-bureau check: a mobile number belongs to an adult, and a child has no credit record of their own. A check uses only the details we already hold on record for that person. A CKYC or credit-bureau check also needs a PAN that we have been able to link to the mobile number on record through checks you approved, so we do not run it on a PAN that was only typed in. We do not run a check on details typed in for someone else. When our staff verify a PAN they are shown only whether the name matches the one on record, not the details the provider sends back. You can see your approvals, and withdraw them, in My consents.

WhatsApp is optional for signing in, but it is the only way we send the approval code for a check. Whenever we send you a code by WhatsApp (to sign in, to change your mobile number, or to approve a check) we send the mobile number and the code to WhatsApp (Meta Platforms), which runs outside India, so it can deliver the message. If your profile has no valid mobile number, or WhatsApp is not available, the check cannot be approved and is not run. You can sign in with your password or an email code instead of WhatsApp.

5. Transfers outside India

The database, hosting, identity-verification and Account Aggregator providers of Moneyanam are in India. These providers handle some personal data outside India:

  • Resend (United States): your name, email address and the content of the emails we send you, to deliver them.
  • Meta Platforms, WhatsApp (outside India): your mobile number and the one-time code, when we send you a code by WhatsApp: to sign in with WhatsApp, to change your mobile number, or to approve an identity check.
  • Cloudflare (United States and its global network): your network (IP) address and browser signals, to tell people from bots on sign-in pages.

We send only the data listed, and only to deliver the service you asked for or to keep sign-in secure. At the date of this notice the Central Government has not restricted transfers to any country under the DPDP Act, 2023. We will update this notice if that changes or if we add a provider outside India.

6. Account Aggregator data

Data fetched via the AA framework is used only for the purpose you consented to, and is retained only for the "data life" period declared in that consent. When that period ends, the raw data and the holdings, accounts, insurance policies, transactions and cash flows we built from it are deleted from our systems; entries made by you or your advisor by hand are not affected. If you revoke the consent, we stop fetching new data and mark what we already hold as out of date; it is deleted when the declared data-life period ends. We never see your bank login, AA login, or passwords — those stay entirely within the AA's own interface.

7. Security

Access to your data is restricted by role — your advisor, their manager, and platform administrators see only what their role permits. Financial data fetched via AA is encrypted in transit and at rest. See our Terms of Use for how AA consent works.

If a personal-data breach affects you, we will tell you without delay by email and in the app — what happened, what it may mean for you and what you can do — and we will report it to the Data Protection Board of India and, where required, CERT-In.

8. How long we keep your data

These are the periods for each kind of data. "Closure" means the day your account closes after a closure request (section 9).

  • Your account and advice records: your profile, goals, holdings, net worth and cash flows entered by hand, notes, reports, documents, fee records, risk profile, change requests and the results of identity checks. Kept while you are a client and for 7 years after closure, as SEBI regulations require of investment advisers, and then deleted.
  • Account Aggregator data: only for the data-life period in your consent. When it ends, the raw data and the holdings, accounts, policies, transactions and cash flows built from it are deleted. At closure they are deleted straight away.
  • Credit-bureau reports and unfinished onboarding forms: kept while you are a client, and deleted at closure.
  • Sign-in security records (failed-attempt counters, one-time-code records and the network addresses recorded with them): deleted 90 days after they were last used; your own are deleted at closure.
  • Our log of emails sent to you (recipient, subject and delivery status): 7 years.
  • Records that you accepted our notices, and your approvals of identity checks: 7 years after they were made (your latest acceptance is kept for as long as your account exists). Records of a parent or guardian's consent for a child: 7 years after the consent is withdrawn.
  • Requests from a nominee: a rejected request and its proof are deleted 180 days after the decision, and a request nobody has acted on after 1 year. A verified request is kept until your records are deleted, or for 7 years after the decision if your account never closed.
  • Records of personal-data breaches and the notices we sent about them: as the law requires.
  • The audit trail of actions on accounts (who did what, and when) is kept as a security and regulatory record. We are setting a fixed period for it and will publish it here.

9. Your rights

You have these rights under the DPDP Act, 2023. Here is how to use each one.

  • Access and download: see a summary of the personal data we hold about you in Your data in the client app, and use Download my data to get a copy as a JSON or CSV file. The providers your data is shared with are listed in section 3.
  • Correction: you can ask us to correct any detail we hold about you, in the client app (Profile). Changes to your city, address, state and PIN code take effect immediately. A new email address takes effect after both your old and your new address confirm it. A new mobile number needs a one-time code sent by WhatsApp to the new number, and then your advisor's approval. Every other change, including profession and employer, is reviewed by your advisor, who will reply within 7 days. You can also ask your advisor, or write to our officer (section 11).
  • Erasure: To have your personal data erased, use Close my account in the client app (Profile). After you ask, a senior administrator approves the request and there is a 7-day cooling-off period in which you can cancel. When your account closes we block your sign-in at once and delete your Account Aggregator data (including the holdings, insurance policies, transactions and cash flows built from it), your credit-bureau reports, unfinished onboarding forms and sign-in security records. The records that show the basis of our advice (your goals, and the holdings, net worth and cash flows entered by hand, notes, reports, signed documents and fee records), the results of the identity (KYC) checks we ran for you, and your login itself are kept for 7 years from the day your account closes, as SEBI regulations require of investment advisers, and then deleted.
  • Withdrawing consent: you can withdraw a consent at any time. Use My consents in the client app for the permissions and check approvals you gave us, and, for a child, for a parent or guardian's consent. An Account Aggregator consent is revoked in your Account Aggregator app (or ask your advisor to start the revocation). Withdrawing stops further processing for that purpose; it does not undo what was already done, and records we must keep by law are kept as shown in section 8.
  • Nomination: You can nominate a person (and an alternate) to exercise your data rights if you die or become unable to. Manage it in the client app (My nominee). A nominee can make a request at /nominee-request. Your nominee can contact our Grievance & Data Protection Officer with proof; a senior administrator verifies it before acting.
  • Grievances: write to or call our Grievance & Data Protection Officer (section 11). We acknowledge every grievance promptly and resolve it within 30 days. If it is not resolved to your satisfaction you can complain to the Data Protection Board of India; complaints about our investment advice can also go to SEBI SCORES and SMART ODR. See Grievance Redressal.

10. Children's data

Moneyanam clients must be 18 or older. A parent or lawful guardian can have a child (under 18) added as a family member so the household plan can account for them. For a child we hold their name, date of birth and relationship to the client.

  • A PAN / KYC identity check or an Account Aggregator data fetch is run for a child only after the parent or guardian, who must themselves be a client aged 18 or over, has given consent in the client app. Your advisor cannot give this consent for you. You confirm that you are the parent or lawful guardian of any child you add.
  • If a child's Account Aggregator account uses your own mobile number, we show you a notice in the client app first; approving the Account Aggregator request with the OTP on your mobile is then treated as your consent, as parent or guardian, for Account Aggregator data only. It does not cover PAN / KYC checks.
  • We use a child's data only for financial planning for the household. We do not track children or use their data for advertising.
  • The parent or guardian can withdraw consent at any time in the client app. Withdrawing stops any further checks and data collection for the child. Records we already hold are kept for 7 years, the period SEBI regulations require of investment advisers, and then deleted; data fetched through an Account Aggregator is also deleted when that consent's data life ends. A record that consent was given and withdrawn is kept.
  • A guardian's consent does not carry over once the child turns 18: your advisor is alerted and will ask them for their own consent.

11. Contact

Questions about this policy, or requests regarding your data, can be sent to our Grievance & Data Protection Officer. For complaints, see Grievance Redressal.

  • Grievance & Data Protection Officer: M.V. Narasinga Rao
  • Phone: +91 98665 29956
  • Email: service@sampadha.com
  • Address: Dr 4-4-4-2, 3rd Floor, above Tapadia Diagnostic Center, beside South Indian Bank, Lalamma Gardens, Hyderabad, Telangana 500089 (DIGIPIN 42248C6J54). View on map
  • Hours: 10:00 am – 5:00 pm