Privacy Policy

1. Introduction

Aapka Nivesh ("we," "us," or "our") is an AMFI Registered Mutual Fund Distributor (ARN-142205 & 314139), operating through the website www.aapkanivesh.com. We are committed to protecting the privacy and security of your personal information.

This Privacy Policy explains what limited data we collect when you use our website or contact us, and how we handle it. Our website is a static site — we do not run analytics, set cookies, or track your browsing activity.

2. Information We Collect

2.1 Information You Provide via Forms

When you voluntarily submit a form on our website, we receive the following information:

• Contact Form: Name, email address, phone number, and your message
• Webinar Registration Form: Name, email, phone number, and any questions you submit

All form submissions are processed through Formspree, a third-party form handling service. We receive your submissions via email. We do not store form data on our own servers or databases.

2.2 Information We Do NOT Collect

Our website is a static HTML site. We do not:

• Use any analytics tools (no Google Analytics, no Mixpanel, etc.)
• Set any cookies or use tracking pixels
• Collect browser type, device information, or screen resolution
• Track pages visited, time spent, or navigation patterns
• Run any JavaScript that profiles or fingerprints users
• Store any data in local storage or session storage

2.3 Hosting Provider Logs

Our web hosting provider may automatically log standard server access information (such as IP address and request timestamp) as part of their infrastructure. This is standard for all websites and is governed by the hosting provider's own privacy policy. We do not access or process these logs.

3. How We Use Your Information

The only personal data we receive is what you voluntarily submit through our forms. We use it for:

• Responding to Inquiries: To reply to your messages and consultation requests
• Webinar Communication: To confirm your webinar registration and send event details
• Follow-up: To contact you regarding your investment query, if requested

We do not use your data for marketing, advertising, profiling, or any purpose other than directly responding to your inquiry.

4. Third-Party Services

Our website uses the following third-party services. Each has its own privacy policy:

• Formspree — Processes form submissions. May collect IP address for spam protection. Formspree Privacy Policy
• Google Maps — Embedded on the Contact page to show our location. Google may set its own cookies. Google Privacy Policy
• Google Fonts — Used for typography. Google may log font requests. Google Privacy Policy
• Font Awesome (cdnjs) — Used for icons, served via Cloudflare CDN. Cloudflare Privacy Policy

We do not sell, rent, or trade your personal information to anyone. Your data may only be shared with regulatory authorities (AMFI, SEBI) if required by law.

5. Data Security

We take the following measures to protect your data:

• HTTPS Encryption: All data sent to/from our website is encrypted via SSL/TLS
• Form Protection: Our contact form includes honeypot spam detection, input sanitization (HTML tag stripping), rate limiting (max 3 submissions per minute), and field validation
• Secure Links: All external links use rel="noopener noreferrer" to prevent tabnabbing attacks
• Security Headers: Pages include X-Content-Type-Options, X-Frame-Options, referrer policy, and permissions policy headers

6. Cookies & Tracking

Our website does not set any cookies, use tracking pixels, or employ analytics scripts. We do not track or profile your browsing activity in any way.

Third-party services embedded on our site (such as Google Maps on the Contact page) may set their own cookies. These are governed by the respective third party's privacy policy as listed in Section 4.

7. Data Retention & Automatic Deletion

We retain form submission data for a maximum of 30 days (one month) from the date of submission. After this period:

• All form submission emails are permanently deleted from our email inbox
• Formspree submission records are purged from the Formspree dashboard
• No copies, backups, or archives of your data are retained

Our website includes an automatic data retention reminder system that alerts us when submissions are approaching the 30-day mark, ensuring timely deletion.

If you wish to have your data deleted before the 30-day period, you may contact us at any time (see Section 10) and we will delete it within 48 hours.

8. Your Rights

You have the right to:

• Access: Request a copy of any personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request immediate deletion of your data at any time
• Withdrawal: Withdraw consent for us to contact you

To exercise these rights, contact us using the details in Section 10. We will respond within 48 hours.

9. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect information from minors. If we learn that a minor has submitted personal data through our forms, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy if our practices change. Any updates will be posted on this page with a revised "Last Updated" date.