Privacy Policy

1. Introduction

This Privacy Policy explains how Rizecraft Technologies Private Limited, a company incorporated under the laws of India with its registered office at B 102 August Park, CV Raman Nagar, Bangalore 560093 (“Rizecraft”, “we”, “us”, or “our”), collects, uses, discloses, and protects personal data of visitors to rizecraft.com (the “Website”).

This Policy applies to the Website only. It does not apply to our products FiNest and other upcoming products, or to any other Rizecraft application, each of which has its own separate privacy policy describing how personal data is handled within that product. Where the Website links you to a Product or to a third-party site, that Product's or site's own privacy policy governs your use of it.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and rules made thereunder, and other applicable Indian law.

2. Personal Data We Collect

We collect the following categories of personal data when you visit or interact with the Website:

We do not knowingly collect sensitive categories of personal data (such as financial information, health data, or government identifiers) through the Website. If you choose to include such information in a message to us, we will handle it in accordance with this Policy and delete it once it is no longer needed for the purpose for which it was shared.

3. How We Collect Personal Data

• Directly from you when you fill out a contact, waitlist, or newsletter sign-up form, or otherwise email or message us.
• Automatically — through cookies and similar technologies when you browse the Website (see Section 6).
• From third parties — for example, analytics or hosting providers who help us operate the Website.

4. Purpose and Legal Basis for Processing

Under the DPDP Act, we process your personal data on the basis of your consent, or where processing is for a “legitimate use” recognised under the Act (for example, to respond to a request you have voluntarily made). We use personal data to:

• Operate, maintain, and improve the Website;
• Respond to enquiries and fulfil waitlist or newsletter requests;
• Understand how visitors use the Website, through aggregated analytics;
• Detect, prevent, and address technical issues, fraud, or misuse;
• Comply with applicable legal obligations.

We do not use personal data collected via the Website for any purpose incompatible with the purposes above without seeking fresh consent, where required.

5. Disclosure of Personal Data

We do not sell personal data. We may share personal data with:

• Service providers who process data on our behalf (e.g., website hosting, email delivery, and analytics providers), under contractual obligations of confidentiality and purpose limitation;
• Professional advisors (legal, accounting) where necessary;
• Government or regulatory authorities, where required by applicable law, court order, or to protect our rights, property, or safety, or that of others;
• A successor entity, in connection with a merger, acquisition, or sale of assets, subject to that entity honouring the commitments in this Policy.

6. Cookies and Similar Technologies

The Website may use cookies and similar technologies to operate correctly, remember your preferences, and understand aggregate usage patterns. You can control or disable cookies through your browser settings; doing so may affect some Website functionality.

7. Data Retention

We retain personal data collected through the Website only for as long as necessary to fulfil the purposes described in this Policy, or as required to comply with legal, accounting, or reporting obligations. Enquiry and waitlist data is typically retained for as long as needed to respond to you or keep you updated, unless you ask us to delete it sooner.

8. Data Security

We implement reasonable technical and organisational security practices and procedures, consistent with applicable law, to protect personal data against unauthorised access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Transfers

Personal data collected via the Website may be stored or processed by service providers located outside India. Where such transfers occur, we take reasonable steps to ensure the recipient provides an appropriate standard of protection, consistent with the DPDP Act and other applicable law.

10. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Request correction or updating of inaccurate or incomplete personal data;
• Request erasure of your personal data, where it is no longer necessary for the purpose it was collected or where you withdraw consent;
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
• Nominate another individual to exercise these rights on your behalf, in the event of your death or incapacity;
• Lodge a grievance with our Grievance Officer (Section 15), and, thereafter, with the Data Protection Board of India.

To exercise any of these rights, contact us at maya@rizecraft.com

11. Children's Privacy

The Website is not directed at children, and we do not knowingly collect personal data from individuals below the age of 18 through the Website. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

12. Third-Party Links

The Website may link to third-party sites, including app stores and social media platforms, and to our own Products (FiNest and/or other apps), each governed by its own privacy policy. We are not responsible for the privacy practices of any third party.

13. Limitation of Liability

To the maximum extent permitted by applicable law, Rizecraft's total aggregate liability to you arising out of or in connection with this Policy, or our collection, use, or processing of your personal data under this Policy, whether in contract, tort (including negligence), or otherwise, shall not exceed Indian Rupees Five Hundred (INR 500).

This limitation applies regardless of the form of action and even if Rizecraft has been advised of the possibility of such damages, and shall survive any termination of your use of the Website. Nothing in this clause excludes or limits liability that cannot be limited as a matter of applicable law, i.e. under the Digital Personal Data Protection Act, 2023.

14. Indemnity

You agree to indemnify, defend, and hold harmless Rizecraft and its directors, officers, employees, and agents from and against any and all claims, demands, losses, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or relating to: (a) your breach of this Policy; (b) any personal data you submit to us that is inaccurate, unlawful, or that you were not authorised to provide (including personal data of a third party submitted without their consent); or (c) your misuse of the Website. This indemnity is independent of, and not subject to, the limitation of liability set out in Section 13.

15. Grievance Officer

In accordance with the Information Technology Act, 2000, rules made thereunder, and the DPDP Act, the Grievance Officer / contact for privacy matters is:

Name: Maya Kunnath
Email: maya@rizecraft.com
Address: B 102 August Park, CV Raman Nagar, Bangalore 560093

16. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or applicable law. The “Last updated” date above reflects the most recent revision. Where changes are material, we will take reasonable steps to notify you, such as posting a notice on the Website.

17. Contact Us

If you have questions about this Policy or our data practices, contact us at maya@rizecraft.com

This Privacy Policy should be read together with our Terms of Use. Using the FiNest app? It has its own privacy policy and terms of use.