Privacy Policy

Last updated 30 September 2026

This policy explains what Rezz Invest collects when you browse rezzinvest.com or use the application at app.rezzinvest.com, why we collect it, who it is shared with, and what you can ask us to do about it.

1. Who we are

Rezz Invest — SEBI-Registered Research Analyst, Reg. No. INH000027654. We provide research and model recommendations. Transactions are executed on the NSE Invest platform through the IntelliQubes distributor portal (NSE Invest member 1026894); you authorise every transaction yourself.

For anything in this policy, contact tushar@rezzinvest.com or +91 99979 76746.

2. What we collect

When you just browse the marketing site

• Server logs — your IP address, the time, the page requested, the referring page and your browser's user-agent string. These are the standard records any web server keeps. We keep them for one year — the period the Digital Personal Data Protection Rules, 2025 set for processing logs — and then delete them automatically.
• Links in our posts — when you arrive through a link we published (on LinkedIn, Quora, Instagram and similar), the link carries a short code naming that post. We record the click — the code, the time, and the same IP address and browser string as the server log — so we can tell which posts people found useful. The code identifies the post, never you. Kept one year.
• How the page was used — when you leave a page, your browser sends us one short message: which page, how far down you scrolled, how long it was open, how long you were actively reading, which parts of the page were on screen, whether our own scripts hit an error, and which of the page's own links, buttons and questions you tapped (for example, “opened the question on cost”). On the sign-up and log-in pages it also notes which fields you reached and whether the form went through — never what you typed. The message carries no identifier and sets nothing in your browser; we store it with the same IP address and browser string as the server log. If you come back to the page and do more, it sends one more. Kept one year.
• Fonts and charts — our pages load their typeface from Google Fonts and, on the home page, a charting library from jsDelivr. Your browser fetches those files directly, so those services see your IP address, as they would for any website that uses them. Neither sets a cookie.
• A visitor count — the logs are reduced each night to daily totals (how many visits, which pages, which country of origin, which referrer). IP addresses are discarded at that point and are not part of the stored figures.

We set no cookies on the marketing site.

If you open an account

We collect what we need to open a mutual-fund account, place the orders you authorise and run your account — most of it required by SEBI and NSE:

• Name, email address, mobile number, date of birth, gender, occupation and address
• PAN and KYC status (fetched from the KRA), and FATCA declarations
• Bank account details and your e-NACH mandate, so debits you authorise can be collected
• Your fund choices, weekly limit, orders, units and holdings
• A record of each sign-in — the date, time and whether it was a mobile or desktop browser. We do not store your IP address or full browser string against your account.
• Which of our posts brought you here, if any — the short post code from the link you arrived through and the page you came from, recorded once when you create the account.
• A tamper-evident log of every action taken against NSE on your behalf, and a record of the WhatsApp messages and emails we send you

3. Cookies this site sets

The app sets no cookie until you log in, and the marketing site sets none at all. Do Not Track and Global Privacy Control signals need no special handling here: nothing on these sites tracks you across sites.

4. Why we are allowed to hold it

• To provide the service you asked for — account opening, recommendations, order placement.
• To meet legal obligations — SEBI and NSE require us to keep identity, suitability and transaction records.
• With your consent — WhatsApp updates. You can withdraw consent at any time.
• For basic security and measurement — the server logs, link clicks and page-use messages described above, kept for one year as the DPDP Rules require for processing logs, and then deleted.

5. Who we share it with

We do not sell your data and we do not share it for advertising. We share only what each of these needs to do its job:

• NSE Invest and IntelliQubes — to open your account and place the orders you authorise
• KYC Registration Agencies (CVL KRA) — to verify your PAN and KYC status
• Your bank and NPCI — to register and collect the e-NACH mandate you approve
• SendGrid and WhatsApp (Meta) — to deliver the emails and messages you have asked for
• DigitalOcean — hosts our servers and databases, in its Bangalore data centre

6. How long we keep it

• Raw web server logs — one year, then deleted automatically
• Daily visitor totals — indefinitely, as counts with no personal data in them
• Account, KYC, mandate and transaction records — for as long as SEBI and NSE rules require after your account closes
• Tracked-link clicks and page-use messages — one year, then deleted automatically

7. Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data we hold about you
• correct anything that is wrong or out of date
• erase data we no longer need — except records SEBI or NSE require us to keep
• withdraw a consent you previously gave
• nominate someone to exercise these rights if you cannot

8. Grievances

9. Changes to this policy

If we change what we collect or why, we will update this page and change the date at the top. Material changes will be announced on the site.