Privacy Policy

1. Information We Collect

We collect information you provide to us and information we obtain through your use of the Platform:

• ✦Information You Provide: This includes your name, corporate email address, phone number, company name, designation, and any other information you submit through our demo request forms or account creation process.
• ✦Financial Data: This includes consolidated information about your corporate bank deposits, mutual fund holdings, and fixed income investments. We access this data via the Sarwat.io open finance platform, strictly according to the permissions you grant through our Consent Policy.
• ✦Usage Data: We automatically collect data about your interactions with the Platform, such as IP address, browser type, pages visited, and time spent, to help us improve our services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• ✦To provide, operate, and maintain the Platform, including aggregating your financial data to provide a consolidated view.
• ✦To generate AI-powered analysis and recommendations based on your aggregated portfolio.
• ✦To communicate with you, respond to your inquiries, and provide customer support.
• ✦To improve and personalize your experience on the Platform.
• ✦To comply with legal and regulatory obligations, including those under the Prevention of Electronic Crimes Act, 2016 (PECA) and directives from the Securities and Exchange Commission of Pakistan (SECP).

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• ✦With Finclude Systems (Private) Limited: As a registered distributor of financial products under SECP guidelines, Finclude Systems may receive data necessary to facilitate distribution and advisory services. All sharing is governed by our partnership agreements.
• ✦With Service Providers: We may employ third-party companies (like cloud hosting providers) to facilitate our Platform. These parties are bound by confidentiality agreements and are prohibited from using your information for any other purpose.
• ✦For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

4. Data Security

We are committed to protecting the security of your information. We use bank-grade security protocols, including OAuth 2.0, Mutual TLS (mTLS), and FAPI-compliant architecture. Data is encrypted in transit and at rest. Access to your data is strictly controlled and logged.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law (such as SECP regulations).

6. Your Rights

Under applicable Pakistani law, you have the right to:

• ✦Access the personal information we hold about you.
• ✦Request correction of any inaccurate information.
• ✦Request deletion of your information, subject to our legal and regulatory obligations.
• ✦Withdraw your consent for data processing at any time, as detailed in our Consent Policy.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at: [Insert Privacy Contact Email]