Privacy Policy

This Privacy Policy was last revised on 15th October 2025

1. INTRODUCTION

This Privacy Policy ("Policy") describes how Fineye Solutions Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at Gautam Buddha Nagar, UP-201306 ("FinEye", "we", "us", or "our"), collects, uses, discloses, retains, and protects information obtained from its Clients and users ("you", "your") in connection with the use of our platform, website, dashboard, APIs, and related services ("Platform" or "Services").

FinEye respects your right to privacy and is committed to protecting personal and business information in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, where applicable, the Digital Personal Data Protection Act, 2023.

This Policy forms an integral part of the Terms of Use of FinEye and should be read together with them. By using or accessing the Platform, you acknowledge that you have read, understood, and consented to the practices described in this Policy.

2. SCOPE AND APPLICABILITY

This Policy applies to:

  • Business entities ("Clients") that engage FinEye for bank account analysis or related services;
  • Users or representatives who access the Platform, APIs, or dashboards on behalf of such Clients.

This Policy does not apply to third-party websites, applications, or services that may be linked through the Platform. FinEye is not responsible for the privacy practices of such third parties.

3. INFORMATION WE COLLECT

We collect the following categories of information to deliver and improve our Services:

(a) Information Provided by Clients

When you engage with FinEye or create an account on our Platform, we may collect:

  • Company name, business registration details, and GST number;
  • Authorized contact person's name, designation, phone number, and email address;
  • API credentials or access keys generated for integration purposes;
  • Billing, invoicing, and payment details; and
  • Any documents voluntarily shared with FinEye for verification or compliance.

(b) Information Collected Through Use of the Platform

When you access or use our Platform or APIs, we may automatically collect:

  • Log data, including IP address, browser type, device identifiers, and timestamps;
  • Usage data, such as frequency of API calls, session duration, and performance metrics;
  • Error logs and diagnostic information for system monitoring and troubleshooting; and
  • Data transmitted through the API or dashboard for analysis, such as bank transaction data, account details, or metadata provided by the Client or its authorized users.

(c) Information from Other Sources

FinEye may receive information from:

  • Financial institutions or third-party service providers authorized by the Client;
  • Publicly available databases or government registers for KYC validation; and
  • Regulatory or supervisory authorities when required by law.

4. PURPOSE AND LEGAL BASIS OF PROCESSING

We process information only for lawful and legitimate purposes, including:

  • Service Delivery: To provide the contracted Services, including data aggregation, account analysis, reporting, and support.
  • Client Authentication: To verify the identity of Clients and their authorized representatives.
  • Compliance: To meet legal, regulatory, tax, and audit obligations.
  • Improvement and Security: To enhance Platform performance, detect fraud or misuse, and ensure information security.
  • Communication: To send administrative notices, service updates, or support communications.
  • Business Operations: For internal analytics, product development, and quality assurance.
  • Legal Claims: To establish, exercise, or defend legal claims where necessary.

We process information either on the basis of consent, contractual necessity, or legitimate business interest, as permitted under Applicable Laws.

5. SENSITIVE PERSONAL DATA

If any "sensitive personal data or information" (as defined under the IT Rules or DPDP Act) is processed by FinEye, it will be handled with additional safeguards, including encryption, access controls, and restricted retention. Such data may include account numbers, financial transactions, or identification documents shared by the Client for analysis.

FinEye processes such data only on behalf of and under the instructions of the Client and does not use or share such data for any independent purpose.

6. CONSENT AND AUTHORIZATION

By using the Platform and sharing data, the Client represents and warrants that:

  • It has obtained all necessary consents and authorizations from its customers, employees, or end users before transmitting any personal or financial data to FinEye; and
  • Such consent covers the collection, use, storage, and processing of data by FinEye in accordance with this Policy.

FinEye acts strictly as a data processor and relies on the Client to ensure lawful data collection and transmission.

7. DISCLOSURE AND SHARING OF INFORMATION

FinEye does not sell, rent, or trade personal or business information. We may share information only in the following limited circumstances:

  • With Affiliates and Service Providers: To trusted partners, subcontractors, or data processors who assist in service delivery, subject to confidentiality and data protection agreements.
  • With Regulatory or Law Enforcement Authorities: Where required by Applicable Laws, court orders, or government regulations.
  • In Business Transfers: In connection with a merger, acquisition, or sale of assets, provided that the recipient agrees to maintain equivalent privacy safeguards.
  • With the Client: Processed results, reports, or aggregated data are shared exclusively with the Client and not with any third party without authorization.

8. DATA STORAGE AND RETENTION

All information collected by FinEye is stored on secure servers located within India, in compliance with Indian data localization and IT security standards.

We retain information only for as long as it is necessary for the purposes outlined in this Policy, unless a longer retention period is required by law, regulation, or contractual obligation.

Upon termination of Services or upon written request, FinEye will delete or anonymize Client data within a reasonable period, subject to applicable legal requirements.

9. DATA SECURITY MEASURES

FinEye maintains appropriate administrative, technical, and physical safeguards to protect information against unauthorized access, disclosure, alteration, or destruction. These include:

  • Encryption of data in transit and at rest;
  • Secure access management and authentication controls;
  • Regular security audits and penetration testing;
  • Limited access to data on a 'need-to-know' basis; and
  • Incident response and breach notification procedures.

While we employ robust measures, no electronic transmission or storage method is fully secure. The Client acknowledges this inherent risk and agrees to use the Platform with due diligence.

10. DATA SUBJECT RIGHTS (WHERE APPLICABLE)

Where the DPDP Act, 2023 applies, individuals whose data is processed by FinEye (through its Clients) may have the following rights, exercisable through the Client acting as the Data Fiduciary:

  • Right to access personal data;
  • Right to correction, completion, or updating of data;
  • Right to withdraw consent;
  • Right to grievance redressal; and
  • Right to nominate another individual to exercise rights in the event of incapacity or death.

FinEye shall assist the Client in responding to such requests to the extent technically feasible and permitted by law.

11. COOKIES AND TRACKING TECHNOLOGIES

The FinEye Platform may use cookies, web beacons, or similar technologies to enhance functionality and user experience.

Cookies may collect technical information such as browser type, session duration, and usage metrics. Users may adjust browser settings to disable cookies; however, this may limit functionality.

12. THIRD-PARTY LINKS

The Platform may contain links to external websites or third-party tools. FinEye is not responsible for the content, accuracy, or privacy practices of such third-party sites. Clients are encouraged to review their respective privacy policies.

13. CHILDREN'S DATA

FinEye does not knowingly collect or process personal data relating to individuals under the age of 18. Users under 18 must not provide information to the Company or use the Company Platform. If the Company identifies any information about a minor that was submitted, collected, or generated contrary to this Policy, such information will be permanently deleted without prior notice.

14. UPDATES TO THIS POLICY

FinEye reserves the right to amend or update this Policy at its discretion to reflect changes in business practices, technology, or legal requirements.

Revised versions will be posted on the Platform with the updated "Last Updated" date. Continued use of the Platform after changes are published constitutes acceptance of the revised Policy.

15. GRIEVANCE REDRESSAL

In compliance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, FinEye has designated a Grievance Officer as follows:

Grievance Officer:
Designation: Grievance Officer
Email: infosec@fineye.co
Address: Gautam Buddha Nagar, UP-201306

The Grievance Officer shall address any discrepancies or grievances within the period prescribed by law.

16. CONTACT INFORMATION

For any questions, complaints, or requests concerning this Policy, please contact:

FinEye
Email: support@fineye.co
Address: Gautam Buddha Nagar, UP-201306
Phone: +91-9667090342

17. GOVERNING LAW AND JURISDICTION

This Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising from or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at New Delhi, India.