AlvestAlvest
Home

ALVEST SOLUTIONS PVT LTD

Privacy Policy

Effective date:
July 16, 2026
Applies to:
alvest.planitt.in / Web app / iOS / Android

ALVEST SOLUTIONS PVT LTD processes personal data in line with the IT Act, 2000, SPDI Rules, 2011, and the DPDP Act, 2023. This policy applies to Alvest, including alvest.planitt.in and related mobile applications, and explains what we collect, why we use it, and the choices available to you.

See also: Terms and Conditions | Help & Support

1. Information we collect

  • Account details: name, email, phone, and hashed credentials.
  • Billing metadata via Razorpay or Stripe; we do not store full card numbers.
  • Device and usage data: IP, browser or app details, clickstream, and session behavior.
  • Third-party data: Google account profile fields you authorize, authentication identifiers, and payment confirmations.

2. Why we process data

  • Account setup, authentication, support, and security monitoring.
  • Delivering courses, signals, subscriptions, and billing records.
  • Product analytics and reliability improvements.
  • Compliance with Indian legal and regulatory obligations.

3. Google data and OAuth use

If you sign in with Google, we receive only the information made available by Google's authentication flow and the permissions you grant. We use that data to sign you in, maintain your account, prevent fraud or unauthorized access, and provide support tied to your account.

We do not sell your Google-provided personal information and we do not use Google user data for advertising. You can revoke Alvest's access from your Google account permissions at any time, but some sign-in-related features may stop working until you use another supported login method.

5. Data sharing

We do not sell personal data. We may share data with payment processors, authentication and analytics providers, cloud infrastructure vendors, and competent authorities when legally required.

6. Retention

  • Account and profile data: for the life of the account plus up to 5 years after closure.
  • Payment and transaction records: up to 8 years where required by law.
  • Analytics data: up to 2 years in anonymized or aggregated form.

7. Your rights

You may request access, correction, or erasure, subject to legal retention requirements, and lodge grievances under the DPDP Act, 2023 via the contact details below.

8. Security

We use TLS in transit, encryption at rest where applicable, access controls, and audit practices aligned with industry standards for fintech-adjacent platforms.