What we hold about you, and what we refuse to.

• Your name, mobile number and email. Taken after you pay, because we need to be able to reach you about the engagement you have bought.
• The statements and documents you send. Whatever you choose to share so an adviser can read your holdings. You decide what goes in.
• Anything you type into a form on the site. The enquiry forms ask for a name, email, phone and a corpus range.
• A record of your payment.The gateway’s payment and order identifiers, the amount, and whether it succeeded. Not the instrument you paid with.

This site runs no analytics, no advertising pixels and no third-party tracking. We do not build a profile of you from your browsing, and we could not, because we do not collect it.

We will never ask for a password, a one-time passcode, a broker or net-banking login, or the password on a protected statement. If you receive a message claiming to be from Finwisor and asking for any of those, it is not from us. Report it to us and delete it.

Your card, UPI and net-banking details are entered on Razorpay’s own secure window. They never pass through this site and we never see or store them.

To do the work you paid for, to reach you about it, and to keep the records a registered investment adviser is required to keep. We do not sell your information, we do not rent it, and we do not put you on a marketing list because you bought a second opinion.

Inside the practice, only advisers and staff working on your engagement. Outside it, only these, each named rather than hidden behind a phrase about trusted partners:

• Razorpay Software Private Limited

  Takes the payment. Razorpay receives your card, UPI or netbanking details directly on its own secure window; those never reach Finwisor and are never stored by us.

• Finwisor's client relationship system

  Holds your name, mobile number, email and the stage your engagement has reached, so an adviser can act on it.

• Cloudflare R2

  Stores the statements and documents you send, in a private bucket hosted in the Asia Pacific region.

Beyond that, only where the law requires it, such as a lawful demand from a regulator or a court.

Documents you send are held in a private store in the Asia Pacific region, not open to the public internet and reachable only with credentials scoped to that one store. Your contact details and the stage your engagement has reached sit in our client relationship system.

Two small things, both on your own device and neither reaching us as a tracking signal. If you fill in an enquiry form, the site remembers your details so you do not retype them. If you pay and then refresh before giving us your contact details, the site remembers your order reference so the form can pick up where it left off. That one holds the reference and nothing else, no name, number or email.

Clearing your browser data removes both.

Records relating to advice are kept for the period SEBI requires of a registered investment adviser, currently five years, because we are obliged to be able to show what we advised and on what basis. Enquiries that never became an engagement are deleted on request.

If you ask us to delete your documents once an engagement is finished, we will, and we will tell you what we are required to retain regardless.

Under the Digital Personal Data Protection Act, 2023 you can ask us what we hold about you, ask us to correct it, ask us to erase it where we are not required to keep it, and withdraw a consent you have given. Write to hi@finwisor.com and we will answer rather than send you a form.