Privacy Policy

Welcome to 23 Finverse ("Company", "we", "our", or "us"). We respect your privacy and are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.

This Privacy Policy explains how we collect, use, store, process, disclose, and protect your personal data when you access or use the 23 Finverse web application.

By accessing or using our Platform, you acknowledge that you have read and understood this Privacy Policy.

Depending on your use of the Platform, we may collect:

We process your personal data for the following lawful purposes:

• Creating and managing your account
• Providing financial services available on the Platform
• Identity verification and KYC where applicable
• Processing transactions
• Customer support
• Improving our services
• Fraud prevention
• Security monitoring
• Legal and regulatory compliance
• Communication regarding services
• Marketing communications (where consent has been provided)

We process only such personal data as is necessary for the purposes identified.

Under the DPDP Act, your personal data is processed based on your consent or other lawful grounds permitted by law. By using the Platform, you consent to:

• Collection of your personal data
• Processing of your personal data
• Storage of your personal data
• Sharing with authorised service providers where necessary

Where required by law, we will obtain explicit consent before processing sensitive or additional categories of personal data. You may refuse to provide certain personal data; however, doing so may limit access to certain features or services.

You may withdraw your consent at any time by updating your account settings, contacting our Grievance Officer, or writing to us at admin@23finverse.com.

Withdrawal of consent will not affect processing already undertaken before such withdrawal. Certain information may continue to be retained where required by law, regulatory obligations, dispute resolution, fraud prevention, or enforcement of legal rights.

We do not use analytics, advertising or tracking cookies, and no third-party tracking scripts run on the Platform.

When you sign in, your session is kept in your browser's storage so that you stay signed in while you use the panel. It is needed for the panel to work and is removed when you sign out.

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law. Retention periods may vary depending upon regulatory requirements, tax laws, financial regulations, contractual obligations, litigation requirements, and fraud prevention.

Once retention periods expire, personal data is securely deleted, anonymised, or destroyed in accordance with our internal data disposal procedures.

Your personal data may be processed, stored, or accessed outside India where necessary for providing our services. Where cross-border processing occurs, appropriate contractual safeguards are implemented, data is protected using reasonable security measures, and processing complies with the DPDP Act and applicable Government notifications regarding permissible jurisdictions.

We do not transfer personal data to jurisdictions prohibited under applicable Indian law.

We implement reasonable security safeguards to protect personal data against unauthorised access, disclosure, alteration, destruction, or misuse. Our security measures include:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Access controls
• Role-based permissions
• Multi-factor authentication where appropriate
• Network monitoring
• Security audits
• Vulnerability assessments
• Incident response procedures
• Regular software updates

Although we strive to protect your data, no internet transmission or electronic storage system can be guaranteed to be completely secure.

The Platform is not intended for individuals below the age specified under applicable law. We do not knowingly collect personal data from children without obtaining verifiable parental or lawful guardian consent where required.

If we become aware that children's personal data has been collected without appropriate authorisation, we will promptly delete such information. Parents or guardians who believe a child has provided personal data may contact our Grievance Officer.

We may share personal data only where necessary with:

• The bank, NBFC or insurer named on an application, for that application
• Cloud hosting and email providers (Amazon Web Services)
• Payment processors, once payments are introduced
• Regulatory authorities and government agencies where the law requires
• Legal advisors
• Auditors

All such recipients are required to maintain appropriate confidentiality and security safeguards. We do not sell personal data.

Subject to applicable law, you may have the following rights regarding your personal data:

• Right to access personal data
• Right to obtain information regarding processing
• Right to correction of inaccurate data
• Right to update personal data
• Right to erase personal data where applicable
• Right to withdraw consent
• Right to nominate another person to exercise rights in specified circumstances
• Right to grievance redressal

To make a request, email support@23finverse.com, addressed to the Data Protection Contact. Say what you want and give your partner or case reference if you have one. You may ask even if a partner submitted your application.

We may need to verify your identity before sharing or changing anything. Never email a full Aadhaar number, a password or a one-time code. We reply within 30 days of receiving your request.

In accordance with the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer.

• Data Protection Contact, Teish Fintech
• Email: support@23finverse.com
• Address: 5th Floor, Esplanade One Mall, Rasulgarh, Bhubaneswar, Odisha 751010

We aim to acknowledge complaints promptly and resolve grievances within the timelines prescribed under applicable law.

The Platform may integrate with third-party service providers including payment gateways, banking APIs and communication platforms. Such third parties process personal data under their own privacy policies and applicable contractual obligations.

We encourage users to review the privacy policies of third-party services before using them.

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Material changes will be communicated through the Platform or via registered email where appropriate. The revised Privacy Policy becomes effective from the date of publication.

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:

• 23 Finverse (Teish Fintech Private Limited)
• Email: support@23finverse.com
• Website: www.23finverse.com
• Address: 5th Floor, Esplanade One Mall, Rasulgarh, Bhubaneswar, Odisha 751010