Privacy Policy

Effective Date: 01.04.2026

Last updated: 19.05.2026

By using this Platform, you agree to the terms of this Privacy Policy. Please read the following Privacy Policy to understand how your personal information will be treated as you use this Platform and its services. The following discloses our information gathering and dissemination practices.

By using our Platform or Services, you consent to the processing of your personal data in accordance with our Privacy Policy. If you do not agree, do not use the Platform or the Services. Our Privacy Policy may change from time to time and your continued use of the Platform, or the Services, is deemed to be acceptance of such changes, so please check periodically for updates.

Our Platform and Services may contain links to third party websites that are not covered by this Privacy Policy. We therefore ask you to review the privacy statements of other websites and applications to understand their information practices.

PERSONAL DATA WE COLLECT

We collect and process personal data about you ("Data Principal" under the DPDPA) across the following categories, depending on the Services you avail:

Identity and Contact Data

• Full name, date of birth, gender, nationality, and photograph.

• Postal address, email address, and telephone numbers.

• Passport, PAN card, Aadhaar number (where legally required and consent obtained), driving licence, or other government-issued identification.

• For NRI Clients: overseas address, visa/OCI/PIO card details, country of residence, and tax identification numbers of the country of residence.

Financial and Investment Data

• Bank account details, DEMAT account information, and portfolio holdings.

• Income, net worth, tax returns, and financial statements.

• Investment objectives, risk appetite, and existing financial commitments.

• Transaction history, securities holdings, and dividend/interest records

Corporate and Business Data

• Company name, CIN, GSTIN, and directorship details.

• Audited financial statements, management accounts, and projections.

• Material contracts, intellectual property records, and corporate structure information (for due diligence and valuation engagements).

Technical and Usage Data

• IP address, browser type, device identifiers, and operating system.

• Website usage patterns, pages visited, time spent, and clickstream data.

• Cookies and similar tracking technologies.

Communication Data

• Records of correspondence, emails, meeting notes, and call logs.

• Feedback, queries, and complaints submitted to the Company.

• Attendance records and participation data for courses / Learning & Development programmes.

COOKIES AND TRACKING TECHNOLOGIES

The Services may use cookies and similar technologies to enhance functionality, analyse usage, and improve user experience. We may deploy the following types of cookies:

• Strictly Necessary Cookies: Essential for the operation of the website and cannot be disabled.

• Analytical / Performance Cookies: Help us understand how visitors interact with the website (e.g., Google Analytics). Deployed only with your consent.

• Functionality Cookies: Remember your preferences and settings for a personalised experience.

• Marketing Cookies: Used to deliver relevant content and advertisements. Deployed only with explicit consent.

You may manage your cookie preferences through our Cookie Consent manager on the website, or by adjusting your browser settings. Note that disabling certain cookies may affect Services functionality.

BASIS FOR PROCESSING PERSONAL DATA

We will only process your personal data if at least one of the following applies:

(i) you have given consent to the processing of your personal data for one or more specific purposes;

(ii) the processing is necessary to perform the Services under your Engagement Letter or Service Agreement and you have consented to it;

(iii) there is a contractual necessity to deliver our services;

(iv) there are certain legitimate uses/interests; or

(v) there are legal obligations.

CHILDREN’S DATA

We do not knowingly collect personal data of individuals under the age of 18 without verifiable parental consent. If you believe that a child has provided us with personal data without appropriate parental consent, please contact us immediately and we will take prompt steps to delete such data in accordance with the DPDPA, 2023.

PROCESSING YOUR PERSONAL DATA

We may use your personal data to make available Services, manage your access to or use of Services, in furtherance of a service request, enquiry, or other activity related to your use of the Services, or manage our relationship with you.

Without limitation to the foregoing, your information may be processed:

(i) to deliver our services including to sign you up, facilitate purchases, manage subscriptions, if any, and maintain our services. This includes monitoring, troubleshooting, data analysis, testing, system maintenance, reporting and hosting of data;

(ii) to communicate with you about our services including to send you service updates, invoices, technical notices, security alerts, support messages and responses to your enquiries. We may contact you through a variety of channels, including email, telephone, SMS and through our platform;

(iii) for security management including to address threats and fraud, and protect you, our business and people. We may use malware and other monitoring tools to detect suspicious activity and block unauthorized access;

(iv) to ensure compliance with our terms of use and related internal reporting;

(v) to develop, enhance, market, sell or provide our products or services, or those of companies with which we have a commercial relationship;

(vi) for the specified purpose for which you have voluntarily provided personal data to us, and in respect of which you have not indicated that you do not consent to the use of your personal data;

(vii) to provide tips or guidance on how to use Services;

(viii) to personalize the service we provide to you, tailor your experience to your requirements, and make more appropriate recommendations;

(ix) to collect feedback;

(x) to prevent fraudulent transactions;

(xi) to run competitions, sweepstakes or surveys;

(xii) to analyze software usage patterns for improving product design and utility;

(xiii) to comply with, any legal or regulatory requirements or provisions; and

(xiv) to preserve our legal rights and defend and bring claims to protect our interests.

SHARING AND DISCLOSURE OF PERSONAL DATA

We do not sell your personal data. We may share it with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality safeguards.

Service Providers and Data Processors

• Technology providers, cloud hosting services, data analytics platforms, and KYC verification agencies who process data on our behalf under binding Data Processing Agreements.

• Legal counsel, auditors, and tax advisors engaged by the Company for professional purposes.

Regulatory and Statutory Authorities

• SEBI, RBI, FIU-IND, Income Tax Department, MCA, Registrar of Companies, stock exchanges, and other competent authorities as required or permitted by Applicable Laws.

• Courts, tribunals, and law enforcement agencies pursuant to lawful orders

Transaction Counterparties (with Client Consent)

In connection with M&A, due diligence, or IPO transactions, certain Client data may be shared with counterparties, merchant bankers, auditors, or legal counsel, subject to non-disclosure agreements.

Cross-Border Transfers

Where personal data of NRI Clients or data related to international transactions is processed, cross-border transfers may occur

AI AND AUTOMATED DECISION-MAKING

Our Data Science & AI Services employ automated analytical and machine learning models. Where automated processing produces outputs that have significant effects on your financial decisions or business outcomes, we ensure that:

•  Human oversight is maintained over all significant recommendations and outputs.

•  You are informed where automated processing has materially contributed to an advisory output.

•  You have the right to request human review of any automated recommendation that adversely affects your interests.

We do not use personal data for fully automated decision-making that produces legal effects or similarly significant effects without human review, except to the extent permitted by Applicable Laws.

DATA RETENTION

We store your personal information for a period of time that is consistent with the business purposes set forth in this notice or as long as needed to fulfil and comply with legal obligations. The criteria we used to determine how long we store your personal information will vary depending on several different factors. We typically consider the following when determining data retention:

· The purpose for collecting the personal information;

· The volume, nature, and sensitivity of the personal information we are processing;

· The potential risk of harm from unauthorized use or disclosure of the personal information;

· Whether we can achieve the purposes for processing with less data or through other means; and

· Legal requirements that may apply to the data, such as applicable statutes of limitation or contractual obligations.

YOUR RIGHTS

As a data principal, you may exercise rights as set forth below.

GRIEVANCE REDRESSAL

Name: Dr. Murugan Babu T

Designation: Grievance Officer

Address: iQuantsGraph Private Limited, No 470, Vanjiamman Building, 1st Floor, Avinashi Road, Peelamedu, Coimbatore, Tamil Nadu – 641004

Email: info@iquantsgraph.com

Working Hours: 10.00 Am to 6.00 Pm (Monday to Friday) ; 10.00 Am to 1.00 Pm (Saturday)

UPDATES AND CHANGES TO PRIVACY POLICY

We may update this Privacy Policy at any time, with or without advance notice. In the event there are significant changes, we will display a notice on the Platform or notify you by email. Your continued use after such updates constitutes acceptance of the revised terms.