Privacy Policy

FVT GLOBAL CONSULTING PRIVATE LIMITED is the operator named in the application. Finvestalk handles account, marketplace, communication, billing and support information. An independent Expert may have separate legal duties for professional records; the Expert must explain any additional use before collecting information for it. Our responsibilities for our own processing remain with us.

Account information includes your mobile number, name, email address, profile preferences and authentication/session records. We use it to authenticate you, maintain your account and communicate about your services.

Consultation information includes messages, shared files, session participants, timestamps, duration, charges, reviews and support correspondence. We use it to deliver consultations, maintain records and investigate billing, safety and service complaints. Share only what is necessary; never send passwords, OTPs, PINs or full card credentials.

Expert onboarding includes contact details, date of birth, address, PAN/identity documents, qualifications, professional claims, verification results, agreement acceptances and bank/tax information. These support application review, profile publication, fraud checks and payouts. Public profile information is visible to visitors; identity and bank documents are not intended for public publication.

Payment information includes amounts, order/payment references, status, invoices, wallet entries and refunds. Razorpay handles checkout payment details; Finvestalk records payment and reconciliation information. Expert bank details are processed for payouts.

Technical information includes IP address, browser/device information, session activity, security logs and diagnostic events. We use these for authentication, abuse prevention, troubleshooting and service performance.

Site activity: while you have Finvestalk open, your browser tells us which page you are on and when you move to another, together with a random visitor identifier kept in your browser, your screen size, time zone and language. We record this with your IP address, browser, device and operating system, and, when you are signed in, your account and the consultation you are viewing. We use it to show who is online, to run and support live consultations, and to understand how the service is used. Authorised Finvestalk staff can see it in internal activity dashboards. These activity records are deleted after 90 days.

We process consultation base prices, GST, member charges, platform commission, expert gross earnings, income-tax TDS, net earnings, refunds and payout records to operate billing, prepare documents, reconcile payments and meet applicable record-keeping duties. Member receipts show their own charges; expert earning details and internal platform allocations are restricted to the relevant expert and authorised staff.

Members have no paid plans or subscriptions and pay for consultations from their Wallet at the expert’s listed rate. Expert access has no paid subscription or plan. We record the activation and end of the one-month access trial. Historical subscription, agreement-acceptance and financial records may be retained for their stated accounting, audit or dispute purposes; retiring a plan does not erase those records.

Finny is an AI assistant, not a human Expert. Its conversations, feedback and relevant account or service context are stored and processed to answer questions, carry out authorised platform actions and investigate quality or safety issues. It can produce inaccurate answers; verify important information.

The application supports OpenAI, Anthropic and Google Gemini integrations, selected by service configuration, including configured fallback processing. Relevant prompts, conversation context and retrieved information may be sent to the configured provider. Provider availability in code does not mean every conversation is sent to every provider. Do not put unnecessary identity documents or financial secrets into Finny.

Conversation history and operational evaluation records may be used to assess service quality. This notice does not claim that providers never retain data or that model-training restrictions have been independently verified. Separate permission is required before private consultation material is reused for publicity or unrelated training.

Platform chat messages and uploaded files are stored. Audio/video features use LiveKit to transport media and process connection/session metadata. The inspected application does not provide a call-recording feature; chat history and call-duration records are different from recordings. Do not record another participant without their informed permission and a lawful purpose. Any future platform recording requires a separate notice explaining consent, access, use and retention.

We explain the purpose of collection and seek consent where current Indian law requires it, including for sensitive personal information. You may decline optional information or withdraw consent through support; we will explain if the requested service cannot continue without necessary information. Service communications are distinct from optional marketing consent.

The Digital Personal Data Protection Act, 2023 and final Rules, 2025 have phased commencement. At this policy date, the principal notice, consent, children’s-data and individual-rights provisions are scheduled for the eighteen-month phase following the November 2025 Gazette publication; the consent-manager phase is scheduled at one year. We do not describe every DPDP provision as already operative. Applicable IT Act and sensitive-data rules continue to matter during the transition. When operative, DPDP processing must meet consent or a specifically permitted certain legitimate use; a generic legitimate-interest claim is not a substitute.

Your selected Expert receives information needed for your consultation. Authorised support, verification, financial and security personnel may access relevant records for their assigned work. Public reviews and public profile content can be seen by others.

Integrations in the application include Razorpay for payments, Resend for email, MSG91 for SMS, Cloudflare R2 for files, LiveKit for calls and the AI providers described above. Deployment uses or supports Vercel/Railway hosting, PostgreSQL/Neon storage, Redis/Upstash caching and Sentry diagnostics. Actual enabled services and locations depend on deployment configuration. Information is also disclosed when legally required to authorities or professional advisers.

Processing may occur outside India. The service does not promise India-only storage or particular provider retention terms. Cross-border transfers of sensitive information require the applicable legal safeguards and permissions; vendor arrangements and locations must be confirmed before new uses are enabled.

Account settings offer member account-closure requests with a 30-day grace period. Active consultations, funds/holds, refunds or historical plan charges may require resolution first. The closure process removes or anonymises specified profile and authentication information; it retains financial ledgers and consultation records. It is not immediate deletion of every message, file, backup or provider record. Expert closure and requests affecting retained records require support review.

Financial, tax, dispute, security and professional records may need longer retention for their specific purpose or legal obligation. There is no single verified automatic deletion period for every category in the current service. Request a review of information no longer needed; we will explain the relevant retention reason and available action. Keeping an account closed is not a reason to retain all personal information indefinitely.

Use account settings to correct available profile fields and request closure. Use Support for access, correction, consent withdrawal or deletion requests that settings cannot complete. We may verify your identity proportionately, without asking for passwords or OTPs. Explain which records and service are involved. Statutory rights apply according to the law and its commencement date; this notice does not remove existing rights.

Authentication cookies keep you signed in; browser storage also holds preferences, drafts and interface state. Blocking essential storage may prevent sign-in or session recovery. Diagnostic and platform activity records support reliability and marketplace operation. Optional advertising or marketing tracking requires its own notice and any required permission; accepting the Terms is not blanket permission for it.

With your optional analytics consent, Google Analytics uses cookies to measure public-page visits and campaign attribution. Private workspaces, messages, financial inputs and form contents are excluded. Select Analytics preferences on a public page to allow or reject analytics; rejecting removes Google Analytics cookies and stops further collection.

OTP, booking, billing, security and support messages are operational communications. Optional promotional communications must offer a separate choice and an available opt-out; do not treat withdrawal from marketing as closure of your account.

Accounts and paid consultations are intended for adults aged 18 or older who can enter binding contracts. No child-account or verified parental-consent service is offered. Do not create an account for a child. Contact support if a child’s information has been submitted so it can be assessed and removed where appropriate.

Access controls, protected authentication, restricted file delivery and diagnostic redaction are used in the application. No service can promise perfect security. Report suspected exposure promptly through Support; never include secrets in a public review.

Material new processing purposes require an appropriate notice and any required fresh consent; continuing to browse is not a substitute. See Grievance Redressal for complaint channels and the status of required business contact disclosures.

Terms of Use · Privacy Policy · Refund & Cancellation Policy · Disclaimer · Expert Agreement · Grievance Redressal · Contact