Privacy Policy

MyFinancialAdvisory (“MFA”) respects the privacy and security of information entrusted to us.

This Privacy Policy explains the types of information we may process, why we use it, how it may be shared, and the choices available to users.

1. Information we may collect

Depending on how you use MFA, we may collect:

Account and contact information:

• name;
• email;
• phone number;
• authentication/account information.

Business information:

• business/organisation name;
• registered addresses;
• tax/business identifiers;
• business profile information.

Service and compliance information:

• information required for the service you request;
• application or filing information;
• case details;
• document requests and responses.

Documents:

• customer-uploaded private business, tax, registration, identity or supporting documents where required for a service.

Billing:

• invoice information;
• payment status;
• transaction references;
• applicable tax information.

Communications:

• support tickets;
• case messages;
• service correspondence;
• grievance communications.

Technical/security information:

• session and authentication events;
• security/audit information;
• browser/device/network information where legitimately collected by the application or hosting providers.

Analytics:

• website usage information where analytics is enabled.

2. How we use information

We may use information to:

• create and secure accounts;
• provide requested services;
• maintain customer/business records;
• prepare cases, applications, filings or deliverables;
• request and review required documents;
• generate invoices and payment records;
• communicate service and support updates;
• protect MFA and customers against fraud, misuse or unauthorised access;
• comply with applicable law and lawful authority requests;
• improve service usability and reliability;
• measure public website usage where analytics is enabled.

3. Legal and appropriate processing

We process personal data only for legitimate and lawful purposes associated with the service, user request, consent, contractual relationship, legal obligation or another basis permitted under applicable law.

Where consent is required, MFA should provide clear information about what information is requested and the relevant purpose.

4. Private customer documents

Customer-specific documents are treated as private records.

They are stored using MFA’s private document-storage architecture and are not intended to be publicly accessible.

Private customer documents are not used as public CMS/media assets.

Access is restricted according to account, organisation, case and internal-role permissions.

5. Service providers

MFA may use service providers to operate the platform, including providers for:

• database/authentication/private storage;
• website hosting and content delivery;
• public media management;
• transactional email;
• payment processing;
• business verification where enabled;
• analytics.

Providers receive information only as reasonably necessary for the relevant function and are subject to their own contractual/security obligations.

Current production providers may include Supabase, AWS, Cloudinary, Resend, Razorpay, Sandbox or other specifically enabled services.

A provider being listed here does not mean every provider receives every category of customer data.

6. Public media vs private records

Cloudinary or similar public-media infrastructure may be used for public MFA branding, CMS images and approved client logos.

Private customer/case documents and issued invoice files are not intended to be placed in public media storage.

7. Payments

MFA may use a payment provider such as Razorpay.

MFA does not need to store your complete card credentials when those credentials are entered directly with the payment provider.

Payment references/status required for billing and reconciliation may be retained by MFA.

8. Email and communications

MFA may send transactional communications necessary to operate the service, including:

• account/security messages;
• document requests;
• case updates;
• invoices;
• support replies;
• deliverable notifications.

Marketing communication, if introduced, should be managed separately from necessary service communication.

9. Cookies and sessions

MFA uses cookies or similar browser mechanisms necessary for:

• authentication;
• secure session continuity;
• user preferences;
• platform security.

Where analytics is enabled, analytics technologies may also be used as described in this Policy and any applicable notice/consent mechanism.

10. Analytics

MFA may use Google Analytics or similar analytics tools to understand aggregate website usage and improve the service.

Analytics configuration should not be used as a substitute for the private customer-document security model.

11. Data sharing

MFA may disclose information:

• to authorised MFA personnel who require it for the service;
• to service providers necessary to operate MFA;
• to government departments/regulators when requested by the customer or required for the purchased service;
• where required by applicable law, legal process or competent authority;
• to professional advisers where legitimately necessary.

MFA does not make private customer documents publicly available merely because they were uploaded through the website.

12. Retention

We retain information for as long as reasonably required for:

• delivery and support of the requested service;
• customer/account continuity;
• legal, tax, accounting or regulatory obligations;
• dispute resolution;
• fraud/security protection;
• legitimate audit records.

Different records may require different retention periods.

Where information is no longer required and no legal or legitimate retention requirement applies, it may be deleted, anonymised or otherwise securely disposed of.

13. Customer rights and requests

Subject to applicable law, you may contact MFA regarding:

• access to information about you;
• correction or updating of inaccurate information;
• deletion/erasure requests;
• withdrawal of consent where processing depends on consent;
• grievances relating to personal information.

Some information may need to be retained despite a deletion request where retention is necessary for legal, accounting, tax, regulatory, security or dispute purposes.

14. Security

MFA uses technical and organisational controls intended to protect data against unauthorised access, alteration, disclosure or loss.

These include authentication, role-based/tenant authorization, private storage, secure links and activity/audit controls where implemented.

No internet system can truthfully be described as completely risk-free or 100% secure.

15. Children

MFA is intended for business/professional users and is not designed as a service directed at children.

Do not submit a child’s personal data unless it is lawfully necessary for an authorised service and applicable requirements are satisfied.

16. International/service-provider processing

Some technology providers may process or store information through infrastructure located in different jurisdictions, subject to applicable contractual and legal safeguards and any restrictions imposed by Indian law.

17. Changes to this Policy

This Policy may be updated when MFA’s services, providers or legal requirements change.

The published page will show its effective/update date.

18. Contact and grievance

Privacy/general enquiries: info@myfinancialadvisory.com

Grievance: shubham@myfinancialadvisory.com

Phone: +91 70156 05390

For consumer grievances handled through the designated grievance channel, MFA will follow applicable grievance-redressal requirements, including applicable acknowledgement and resolution timelines.