COOKIE AND SIMILAR TECHNOLOGIES POLICY

Website: review.startuperr.com
Version: 1.0
Effective Date: [Insert Date]
Last Updated: [Insert Date]

1. INTRODUCTION

1.1 About this Policy

This Cookie and Similar Technologies Policy explains how MyQuestionBox Education OPC Private Limited uses cookies and related technologies in connection with review.startuperr.com and the software services made available through it.

MyQuestionBox Education OPC Private Limited is a company incorporated under the laws of India and having its registered office at B902, Vicinia, Chandivali, Powai, Mumbai – 400072, Maharashtra, India. In this Policy, it is referred to as “MyQuestionBox”, the “Company”, “we”, “us” or “our”.

The website, authenticated web application, dashboards, reporting tools, document-processing functionality, artificial intelligence features and related services are collectively referred to as the “Platform”.

1.2 Relationship with Other Documents

This Policy must be read together with the Terms of Service, Privacy Policy, Software and Report Disclaimer, AI Usage and Limitations Policy and any notice or preference control displayed when cookies or similar technologies are used.

This Policy concerns information stored on or accessed from a User’s browser or device. The broader collection and processing of Personal Information through the Platform is described in the Privacy Policy.

1.3 Current Status

The Platform is currently in Beta. The cookies, service providers and technical methods used by the Platform may change as functionality is developed.

At present, the Platform may use cookies and related technologies that are necessary to operate authenticated accounts, maintain sessions, protect security, remember essential preferences and provide requested functionality.

Google Analytics is not presently treated as an active part of the Platform’s essential reporting functionality. The Company intends to introduce website and Platform analytics in the future. This Policy will apply to such functionality when it is activated, and the Company may provide an additional cookie notice or preference control at that time.

2. WHAT COOKIES ARE

A cookie is a small text file or identifier that a website places or reads on a browser or device. Cookies allow a website to recognise a browser during a session or across more than one visit.

Cookies may enable a website to keep a User signed in, remember settings, protect forms and accounts, identify technical problems, understand how pages are used or measure website activity.

2.2 Similar Technologies

The Platform may use technologies that perform functions similar to cookies, including browser storage, session storage, security tokens, device or application identifiers, pixels, software development kits and server-side identifiers.

References to “cookies” in this Policy include similar technologies where the context permits.

2.3 First-Party and Third-Party Cookies

A first-party cookie is set or read through the domain being visited. A third-party cookie or identifier is set or processed by another service integrated into the website or Platform.

The Company may use first-party cookies to operate the Platform. Where Google Analytics or another external service is introduced, information may also be processed by that service provider in accordance with its own terms and privacy practices.

2.4 Session and Persistent Cookies

A session cookie ordinarily expires when the browser session ends. A persistent cookie may remain for a specified period or until it is deleted.

The duration of a cookie depends upon its function, the configuration selected by the Company and the operation of the browser or third-party service concerned.

3. NECESSARY PLATFORM COOKIES

3.1 Purpose of Necessary Cookies

The Platform may use cookies that are reasonably necessary to provide a service expressly requested by the User or to maintain the secure and reliable operation of the Platform.

These cookies may be required to create and maintain an authenticated session, recognise that a User has logged in, route requests correctly, preserve temporary workflow information, protect forms, prevent request forgery, detect suspicious activity and maintain account security.

3.2 Authentication and Session Management

When a User signs in, the Platform may store a session identifier or authentication-related cookie on the User’s browser.

This identifier allows the Platform to associate requests with the correct authenticated account or Tenant. It does not by itself constitute investment information, research or a recommendation.

A User who blocks or deletes an authentication or session cookie may be signed out, may be unable to access protected areas or may lose unsaved progress.

3.3 Security Cookies and Tokens

The Platform may use cookies or security tokens to protect login processes, forms, document uploads, account settings and other requests against misuse, impersonation, unauthorised submission or malicious activity.

Security-related cookies may also assist with enforcing access permissions, detecting repeated failed login attempts and investigating suspected compromise.

3.4 Load Management and Reliability

Where required by the Company’s hosting or infrastructure arrangements, a cookie or similar identifier may be used to direct a User’s session to an appropriate server, maintain continuity during a request or protect the Platform against excessive or harmful traffic.

Where the Platform provides a cookie banner, preference centre or similar control, a cookie or browser-storage entry may be used to remember the User’s choice.

Without such a record, the Platform may be unable to remember whether the User accepted, rejected or configured non-essential cookies.

3.6 Necessity of These Cookies

Necessary cookies are used because the Platform may not function securely or correctly without them. Disabling them may prevent login, document processing, report generation, account administration or other requested functionality.

Where applicable law permits necessary cookies to operate without separate consent, the Company may place or read them for the purpose of providing and protecting the Platform. The Company will not use the description “necessary” merely to avoid providing a choice for a cookie used primarily for analytics, advertising or an unrelated purpose.

4. FUNCTIONAL AND PREFERENCE TECHNOLOGIES

4.1 Platform Preferences

The Platform may use a cookie or browser-storage entry to remember limited choices made by a User, such as display preferences, selected language, interface state or another setting that improves continuity between pages or sessions.

4.2 Tenant Settings

Material Tenant configurations, Client information, product priorities, Primary Disclaimer wording and Secondary Disclaimer wording are intended to be stored within the Platform’s secured application database rather than solely in a browser cookie.

A cookie may identify the active session or account through which those settings are accessed, but should not ordinarily contain the full content of a Tenant’s disclaimers, Client portfolio or uploaded Consolidated Account Statement.

4.3 Optional Functionality

Where a functional cookie is not necessary for the basic operation of the Platform, the Company may provide an option to disable it.

Disabling such a cookie may result in settings not being remembered or in a less convenient user experience.

5. GOOGLE ANALYTICS

5.1 Planned Use

The Company intends to introduce Google Analytics or a comparable analytics service to understand how visitors and Users interact with the website and Platform.

Analytics may help the Company understand page visits, navigation paths, session activity, device or browser categories, referral sources, general geographic information, errors and broad patterns of feature use.

5.2 Analytics Does Not Perform Financial Research

Analytics information will be used to understand and improve the operation, security, usability and commercial performance of the Platform.

Google Analytics will not be used by MyQuestionBox or Goalstox to prepare investment research, calculate financial-product returns, provide investment advice or generate recommendations.

5.3 Google Analytics Cookies

When Google Analytics is activated, it may use first-party cookies or similar identifiers to distinguish browsers, sessions and interactions.

The precise cookie names and duration may depend upon the version and configuration of Google Analytics in use. The current cookie register, cookie banner or preference centre should identify the analytics cookies actually deployed.

5.4 Information Sent to Google Analytics

Depending upon the configuration, Google Analytics may receive information concerning page views, events, device and browser characteristics, approximate geographic information, referral source, session activity and identifiers used to distinguish a browser or session.

The Company must not deliberately send Client names, permanent account numbers, Aadhaar numbers, folio numbers, account numbers, uploaded document contents, portfolio holdings, email addresses, mobile numbers or other directly identifiable Client Data to Google Analytics.

5.5 Configuration and Data Minimisation

When Google Analytics is introduced, the Company intends to configure it in a manner proportionate to the Platform’s requirements.

Where supported and appropriate, the Company may disable unnecessary advertising functionality, restrict granular location or device collection, redact inappropriate query parameters, limit event data and avoid the transmission of Personal Information.

5.6 User and Client Identifiers

The Company does not intend to use a Client’s permanent account number, Aadhaar number, folio number, mobile number, email address or another direct Client identifier as a Google Analytics user identifier.

Where the Company uses an internal identifier to understand authenticated Platform use, it should not be intelligible to Google as the identity of the Client and should not be accompanied by directly identifying Client Data.

5.7 Activation of Analytics

Before or when Google Analytics is activated, the Company may update this Policy, identify the relevant cookies in its cookie register and introduce a banner or preference control for non-essential analytics technologies.

The Company may initially keep analytics disabled until the visitor has made an applicable choice through the available consent mechanism.

5.8 Analytics Retention

The retention period for analytics information will depend upon the Google Analytics property settings and the Company’s operational requirements.

The Company should configure analytics retention for a period that is reasonably necessary for understanding Platform activity and should review that period as the Platform develops.

6. ADVERTISING, REMARKETING AND SOCIAL-MEDIA PIXELS

6.1 No Current Advertising Cookies

The Company does not presently state that review.startuperr.com uses advertising, behavioural targeting, remarketing, Meta Pixel or LinkedIn Insight Tag functionality.

This Policy must not be interpreted as authorising such technology merely because it discusses analytics or future cookies.

6.2 Future Introduction

If the Company later introduces advertising cookies, remarketing tags, social-media pixels or similar technologies, it will update this Policy and provide an appropriate notice or preference mechanism before or when such technology is activated.

6.3 No Client Portfolio Advertising

The Company and Goalstox will not use Client portfolio holdings, uploaded Consolidated Account Statements or identifiable Client financial information to create targeted advertising audiences through cookies or advertising pixels.

7. ARTIFICIAL INTELLIGENCE AND COOKIES

7.1 AI Processing Is Separate

The use of an AI feature does not necessarily require an AI provider to place a cookie directly on the User’s browser.

AI processing may occur through server-to-server communication between the Platform and the relevant AI service provider.

7.2 No Tracking Permission Created by AI Use

Use of an AI feature does not authorise the Company or the AI provider to use Client Data for browser-based advertising or unrelated tracking.

The handling of information submitted for AI-assisted drafting is addressed in the Privacy Policy and AI Usage and Limitations Policy.

8. HOSTING AND INFRASTRUCTURE PROVIDERS

8.1 Infrastructure Cookies

Amazon Web Services, DigitalOcean or another infrastructure provider may support hosting, security, content delivery, networking or load management for the Platform.

Where an infrastructure-related cookie or identifier is used, it should be limited to the technical operation, availability or protection of the Platform.

8.2 Provider-Controlled Technologies

A service provider may process technical information as part of supplying infrastructure or security services. The Company does not control every internal identifier used within a provider’s infrastructure.

This does not permit the provider to use Client Data for unrelated advertising, research or financial-product recommendations on behalf of MyQuestionBox or Goalstox.

9.1 Preference Control

Where a cookie banner or preference centre is available, a visitor may be able to accept, reject or configure categories of non-essential cookies.

Necessary cookies may remain active because disabling them may prevent the Platform from functioning securely.

9.2 Withdrawal or Change of Choice

Where supported, a visitor may change a previous cookie choice through a “Cookie Settings” link or similar control made available on the website.

Changing a choice may stop future use of a non-essential cookie but may not automatically delete information previously collected by a third-party provider.

9.3 Browser Controls

Most browsers allow a User to view, block or delete cookies and to restrict cookies from specified websites.

Browser settings differ. A User should consult the privacy or cookie settings of the browser being used.

9.4 Effect of Blocking Cookies

Blocking all cookies may prevent the Platform from remembering the User’s session, authenticating requests or providing secure account functionality.

The Company is not responsible for reduced functionality caused by the User blocking or deleting a cookie required for the requested service.

9.5 Google Analytics Opt-Out

Where Google Analytics is active, a User may also have access to controls made available by Google, including browser-based opt-out functionality.

The availability and operation of such tools are controlled by Google and may change independently of the Company.

10.1 Current Register

The Company should maintain a current technical register of cookies and similar technologies deployed on the production website.

The register should identify, where applicable, the cookie or identifier name, provider, purpose, category, whether it is first-party or third-party and its expected duration.

10.2 Accuracy of the Register

Cookie names and duration may change when the Platform, hosting configuration, authentication framework, analytics implementation or third-party service is updated.

The Company should review the production website periodically and update the public register where a material change occurs.

10.3 Register at Launch

Before publishing this Policy as a final production document, the Company’s technical team should confirm the actual cookies used by the live website.

The following schedule records the intended categories but must be supplemented with the exact production-cookie details after a technical scan.

The Platform may use a first-party authentication or session cookie supplied through review.startuperr.com. Its purpose is to maintain secure authenticated access to the User’s account and associate browser requests with the correct session.

The exact cookie name and duration will depend upon the authentication framework and production configuration. It may expire when the browser closes, after a defined period of inactivity or when the User signs out.

11.2 Form and Request-Security Token

The Platform may use a first-party security cookie or token to protect forms and authenticated requests from unauthorised or forged submission.

The exact name and duration will depend upon the production framework. Disabling it may prevent forms, uploads, setup changes or other requests from functioning correctly.

Where a cookie banner or preference centre is implemented, the Platform may use a first-party cookie or browser-storage entry to record the visitor’s cookie choices.

The record may remain for a limited period so that the Platform does not repeatedly request the same preference.

11.4 Google Analytics Cookies

Google Analytics cookies are planned but should not be listed as currently active until the analytics tag has been deployed on the production website.

When activated, the cookie register should identify the actual Google Analytics cookie names, purposes and configured duration. The Company should also state whether analytics storage is disabled until the visitor grants the applicable permission.

11.5 Other Cookies

The Platform does not intend to use an additional cookie or tracking technology without reviewing its purpose and updating this Policy or cookie register where appropriate.

12.1 Reports Do Not Contain Browser Cookies

A PDF or other Report generated by a Tenant does not ordinarily contain the User’s browser authentication cookies.

The Report may contain Client Data, Tenant branding, Tenant disclaimers and public-source financial-product information, but such report content is separate from the browser cookies discussed in this Policy.

If the Platform later permits Reports to be viewed through a secure web link, cookies may be used to protect access, maintain a temporary viewing session or record necessary security events.

The Company will update this Policy or provide an additional notice if such functionality materially changes the cookies used for Report access.

13. RETENTION AND DELETION

A cookie may expire automatically at the end of a session or after a configured period.

A User may also delete cookies manually through browser settings.

13.2 Server-Side Records

Deleting a browser cookie does not necessarily delete server logs, account records, analytics information or Personal Information stored within the Platform.

The retention of such information is governed by the Privacy Policy and applicable data-retention arrangements.

Where the Company records a cookie preference or consent choice, it may retain that record for a reasonable period to demonstrate and respect the User’s selected preference.

14. THIRD-PARTY WEBSITES

The Platform may contain links to goalstox.com, product-manufacturer websites, industry bodies, self-regulatory organisations, payment providers and other third-party websites.

Those websites may place their own cookies when visited. The Company does not control the cookies, preference mechanisms or privacy practices of a separate third-party website.

A User should review the cookie and privacy information provided by the relevant third party.

15. CHANGES TO THIS POLICY

15.1 Updates

The Company may amend this Policy when the Platform, analytics configuration, service providers, legal requirements or cookie practices change.

15.2 Material Changes

Where a change materially expands the use of non-essential cookies or introduces a new category of tracking, the Company may provide notice through the website, Platform, cookie banner or another reasonable method.

15.3 Effective Date

The revised Policy will take effect on the date stated in the updated document.

An updated Policy will not by itself constitute consent where a separate affirmative choice is required for a new non-essential cookie.

16. CONTACT INFORMATION

Questions concerning this Policy may be addressed to:

MyQuestionBox Education OPC Private Limited
B902, Vicinia
Chandivali, Powai
Mumbai – 400072
Maharashtra, India

Website: review.startuperr.com
Email: [Insert Privacy or Support Email Address]

17. IMPORTANT IMPLEMENTATION NOTE

This Policy must reflect the technologies actually deployed on the live Platform.

Before publication, the Company should confirm the exact names, providers, purposes and expiry periods of the production cookies used for login, session management, request security and preferences.

Google Analytics, advertising cookies, social-media pixels or other non-essential tracking technologies must not be described as active unless they have actually been implemented. When Google Analytics is introduced, the cookie register and preference mechanism should be updated before or at the time of activation.