Health 2 Invest ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, WhatsApp chatbot, and financial advisory services.
1. Information We Collect
We collect information you voluntarily provide, information collected automatically, and information from third parties. This includes:
- Personal identifiers: Full name, date of birth, gender, PAN, Aadhaar number, address, phone number, email address, WhatsApp number.
- Financial information: Income details, bank account information, investment history, insurance policies, financial goals.
- Communication data: Records of your interactions with our WhatsApp chatbot, customer support conversations, and email correspondence.
- Documents: KYC documents including PAN card, Aadhaar card, photographs, signatures, cancelled cheques, and policy certificates.
- Website usage data: IP address, browser type, device information, pages visited, and time spent on our site.
2. WhatsApp Business Platform Data
We use the WhatsApp Business Platform (via Meta's Cloud API) to communicate with you. When you message us on WhatsApp:
- Your WhatsApp phone number, profile name, and message content are transmitted to us through Meta's infrastructure.
- Message history is stored on our secure servers for compliance, quality assurance, and to provide continuous service.
- An AI-powered chatbot may respond to your queries. All conversations may be reviewed by our team for training and quality purposes.
- You may opt out of the WhatsApp chatbot at any time by sending "STOP" or contacting us directly.
3. How We Use Your Information
We use your information to:
- Provide financial advisory services including insurance, investment, and retirement planning.
- Process KYC verification as required under Indian financial regulations.
- Respond to your inquiries via WhatsApp, email, phone, and website contact forms.
- Send policy updates, renewal reminders, birthday greetings, and service notifications.
- Comply with legal, regulatory, and tax obligations (SEBI, IRDA, AMFI, Income Tax Department).
- Improve our services, prevent fraud, and maintain the security of our systems.
4. Data Sharing
We do NOT sell your personal information. We may share your data only with:
- Insurance and mutual fund partners to process policies and investments you have authorized.
- Regulatory authorities (IRDA, SEBI, AMFI, Income Tax) as required by law.
- Service providers (Meta/WhatsApp, hosting providers, AI providers) under strict confidentiality agreements.
- Legal authorities when required by court order, subpoena, or applicable law.
5. Data Security
We implement industry-standard security measures to protect your data, including:
- Bank-grade encryption of sensitive documents and passwords (bcrypt hashing).
- HTTPS/TLS encryption for all data in transit.
- Authenticated access gateway for viewing customer documents.
- Restricted admin access with brute-force protection and CSRF tokens.
- Regular security audits and vulnerability testing.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. KYC documents are retained as per regulatory requirements (typically 10 years). You may request deletion at any time (see Section 8).
7. Your Rights
Under Indian law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate information via your dashboard or by contacting us.
- Delete your personal data (subject to regulatory retention requirements).
- Withdraw consent for WhatsApp communications at any time.
- Object to processing of your data for marketing purposes.
8. Data Deletion Request
To request deletion of your personal data, please email us at myhealth2invest@gmail.com or call 033 3569 5047. Include your registered name and phone number. We will process your request within 30 days, subject to any regulatory obligation to retain certain records.
9. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from children. If we become aware that a minor has provided us information, we will delete it promptly.
10. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. Please review their privacy policies separately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Continued use of our services after changes constitutes acceptance of the revised policy.