logologo
Search anything
Ctrl+K
arrow

Privacy Policy

Last update: Feb 27, 2026

This Privacy Policy (“Policy”) explains how Finsky Technologies Private Limited (“we”, “us”, or “our”) collects, uses, stores, and shares personal data when you access or use Multibagg.ai, including its website and related services (the “Platform”).

Multibagg.ai provides AI-powered stock research and analysis tools relating to publicly traded Indian companies.

If you do not agree with this Policy, please do not use the Platform.

1. WHAT INFORMATION DO WE COLLECT?

a. Personal Data You Disclose to us

When you create an account on our Platform, we collect your name, profile picture, and email address. We may collect additional details such as your mobile number, age, profession, and state of residence, if you choose to provide them as part of your profile. We also collect personal data that you voluntarily provide to us when you express an interest in obtaining information about us or our Platform, when you participate in activities pertaining to the Platform, or otherwise when you contact us.

b. Subscription and Payment Information

If you subscribe to a paid plan, we may collect information necessary to manage your subscription, such as billing details, payment status, and transaction identifiers. Payment processing is handled by third-party payment service providers.

c. Interaction and Preference Information

When you interact with features such as our AI chatbot, you may choose to share information about your preferences, investing style, or general context (for example, risk appetite or investment goals). We may retain such information to personalise your experience on the Platform.

d. Portfolio Information (Optional Feature)

If you choose to connect your stock or exchange-traded fund portfolio from a third-party platform, we collect a limited, read-only snapshot of your portfolio as on the date of connection. This may include details such as the names of securities held, quantities, and average purchase prices.

We do not collect or access sensitive financial data like your transaction histories, bank account details, or any information enabling us to place trades or execute transactions on your behalf.

Portfolio data is accessed solely to enable you to use our platform’s analytical and informational features.

e. Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Platform. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Platform, and other technical information. This information is primarily needed to maintain the security and operation of our Platform, and for our internal analytics and reporting purposes.

2. WHY DO WE PROCESS YOUR INFORMATION?

We process your personal data to operate, maintain, and improve the Platform and to provide you with access to our AI-powered research and analysis features. This includes creating and managing your account and subscription, providing and supporting the features available under your selected plan (including portfolio analysis features where you choose to use them), understanding how you interact with the Platform in order to improve functionality and user experience, ensuring fair use of the Platform, and communicating with you - including to request feedback or respond to queries.

AI-Driven Profiling and Automated Processing

The Platform uses artificial intelligence and machine learning models to provide stock research, analysis, and personalised insights. Specifically, our AI systems may:

i. Analyse your interaction patterns, queries, and preferences to personalise research outputs displayed to you.

ii. Process portfolio data (where you have opted to connect your portfolio) to generate analytical insights, risk assessments, and informational summaries.

iii. Use your stated preferences (such as risk appetite and investment goals) to tailor the AI chatbot responses and research summaries.

These AI-driven processes are used solely for informational and analytical purposes. No automated decision-making on the Platform produces legal effects or similarly significant effects on you. The Platform does not execute trades, provide regulated financial advice, or make investment decisions on your behalf. You may contact us at any time to request information about the logic involved in such automated processing.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

We process your personal data in accordance with applicable data protection principles and legal requirements. Depending on the nature of your interaction with the Platform, this may include processing based on the following grounds:

a. Consent:

We may process your personal data where you have provided your consent for a specific purpose. You may withdraw your consent at any time.

b. Legitimate Uses:

In certain situations, we may process personal data without consent where such processing is reasonably necessary, including where you voluntarily provide information for a specified purpose, to comply with legal or regulatory obligations, to respond to lawful requests or orders, or in circumstances involving safety, emergencies, or public order.

For the purposes of Indian data protection law, we generally act as a data fiduciary, as we determine the purposes and means of processing personal data on the Platform.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

We do not sell, rent, trade, or otherwise share your personal data with any third parties for their own purposes. Your personal data is used exclusively by us to operate and improve the Platform.

Notwithstanding the above, we may need to disclose your personal data in the following limited circumstances:

a. Legal and Regulatory Requirements.

We may disclose your personal data where required to do so by law, in response to lawful requests by public authorities, or to comply with applicable regulations, court orders, or legal processes.

b. Business Transfers.

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

c. Affiliate Arrangements.

We may share your information with our affiliates, in which case we will require those affiliates to honour this Policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties, and this Policy does not apply to any data collected by them. You should review their privacy policies before providing any information.

6. DATA STORAGE AND LOCALISATION

All personal data collected through the Platform is stored and processed exclusively within India. We do not transfer, store, or process your personal data outside the territory of India.

Our infrastructure and data storage systems are hosted on servers located in India, ensuring that your personal data remains subject to Indian data protection laws, including the Digital Personal Data Protection Act, 2023, at all times.

7. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Platform. These online tracking technologies help us maintain the security of our Platform, prevent crashes, fix bugs, save your preferences, and enhance your experience on our website. You can manage your privacy preferences through your browser settings.

8. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

We retain your personal data only for as long as is necessary for the purposes set out in this Policy, unless a longer retention period is required or permitted by law. The specific retention timelines are as follows:

a. Account and Profile Data: Retained for the duration of your active account. Upon account deletion, personal data is deleted or anonymised within 90 days, except where retention is required by law.

b. Subscription and Payment Data: Retained for the duration of your subscription and for a period of up to 8 years thereafter to comply with applicable tax, accounting, and financial record-keeping obligations.

c. AI Chatbot Interaction Data: Conversation logs and interaction data are retained for up to 3 years from the date of interaction to improve service quality and for analytical purposes, unless you request earlier deletion.

d. Portfolio Data: Retained for as long as the portfolio feature remains connected and active. Upon disconnection or account deletion, portfolio data is deleted within 90 days.

e. Usage and Log Data: Retained for up to 2 years from the date of collection for security monitoring, troubleshooting, and platform improvement purposes.

f. Legal and Compliance Records: Where retention is required to comply with legal obligations, resolve disputes, or enforce our agreements, data may be retained for the period mandated by applicable law.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal data we process. These measures include:

a. Encryption: Personal data is encrypted in transit using TLS/SSL protocols and at rest using industry-standard encryption algorithms.

b. Access Controls: Access to personal data is restricted to authorised personnel on a need-to-know basis, with role-based access controls and multi-factor authentication enforced for administrative access.

c. Infrastructure Security: Our Platform is hosted on reputable cloud infrastructure providers that maintain industry-recognised security certifications. We conduct periodic security assessments of our systems and infrastructure.

d. Incident Response: We maintain a data breach response procedure to promptly detect, investigate, and respond to any personal data breach, including notifying affected individuals and relevant authorities as required by applicable law.

e. Audit and Monitoring: We maintain audit logs of access to personal data and conduct regular reviews to detect and prevent unauthorised access or processing.

Despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Although we do our best to protect your data, transmission of personal data to and from our Platform is at your own risk. You should only access the Platform within a secure environment.

10. WHAT ARE YOUR PRIVACY RIGHTS?

Under the Digital Personal Data Protection Act, 2023 and other applicable laws, you have the following rights in relation to your personal data:

a. Right to Confirmation and Access: Request confirmation as to whether your personal data is being processed and obtain a summary of your personal data being processed and the processing activities undertaken.

b. Right to Correction: Request the correction of inaccurate or incomplete personal data, and the updating of your personal data.

c. Right to Erasure: Request the erasure of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal retention requirements.

d. Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your personal data. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. If you withdraw consent, we may not be able to provide certain features of the Platform to you.

e. Right to Grievance Redressal: Lodge a complaint with our grievance officer or with the Data Protection Board of India if you believe your personal data has been processed in violation of applicable law.

f. Right to Nominate: Nominate an individual to exercise your rights in the event of your death or incapacity.

How to Exercise Your Rights

To exercise any of the above rights, you may submit a request to our grievance officer at tech@multibagg.com. Your request should include your registered name and email address along with a description of the right you wish to exercise. We will verify your identity before processing the request.

We will acknowledge your request within 48 hours and endeavour to respond substantively within 30 days of receipt. If we require additional time, we will inform you of the reason and expected timeline. Where a request is manifestly unfounded or excessive, we reserve the right to refuse the request, in which case we will inform you of the reasons for our refusal.

11. ACCOUNTABILITY AND GOVERNANCE

We are committed to maintaining accountability and transparency in our data governance practices:

a. We maintain internal records of our data processing activities, including the categories of personal data processed, the purposes of processing, and the categories of recipients.

b. We conduct periodic reviews and assessments of our data protection practices to ensure ongoing compliance with the Digital Personal Data Protection Act, 2023 and other applicable laws.

c. Our grievance officer oversees compliance with this Policy and serves as the point of contact for data protection inquiries and complaints.

12. CHANGES TO THIS POLICY

We keep our Policy under regular review and may amend this Policy from time to time, at our sole discretion. The terms of this policy may change and if it does, the changes will be posted on this page and, where the changes are significant, we will notify you via email or through a prominent notice on our Platform. Please ensure that you review this Policy regularly.

13. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

You may contact our grievance officer, Mr. Aaditya Aanand, with any inquiry relating to this Policy or your personal data at tech@multibagg.com.