PRIVACY POLICY

Website: review.startuperr.com
Version: 1.0
Effective Date: [Insert Date]
Last Updated: [Insert Date]

1. INTRODUCTION

1.1 About this Privacy Policy

This Privacy Policy explains how MyQuestionBox Education OPC Private Limited collects, receives, stores, uses, processes, shares, retains and deletes information in connection with the software platform available at review.startuperr.com.

MyQuestionBox Education OPC Private Limited is a company incorporated under the laws of India and has its registered office at B902, Vicinia, Chandivali, Powai, Mumbai – 400072, Maharashtra, India. In this Privacy Policy, MyQuestionBox Education OPC Private Limited is referred to as the “Company”, “MyQuestionBox”, “we”, “us” or “our”.

The website, software application, dashboards, reporting tools, artificial intelligence features, document-processing functionality, integrations and related services operated by the Company are collectively referred to as the “Platform”.

1.2 Professional Platform

The Platform is intended to be used by mutual fund distributors, Portfolio Management Services distributors, Alternative Investment Fund distributors, Specialized Investment Fund distributors, independent financial advisers, registered investment advisers, financial planners and other authorised financial-services professionals.

The Platform is not intended for direct use by ordinary retail investors. An investor whose information is entered into the Platform by a professional User does not thereby become a registered User of the Platform.

1.3 Relationship with the Terms of Service

This Privacy Policy should be read together with the Terms of Service, Software and Report Disclaimer, Cookie and Similar Technologies Policy, Artificial Intelligence Usage and Limitations Policy and any other notice presented when a particular feature is used.

Capitalised expressions not defined in this Privacy Policy shall have the meanings assigned to them in the Terms of Service.

1.4 Current Development Stage

The Platform is currently in Beta and is continuing to develop. The information collected, available functionality, service providers, security controls and data-management processes may change as the Platform develops.

Where a material change affects the manner in which Personal Information is processed, the Company will update this Privacy Policy and may provide an additional notice where appropriate.

1.5 Data-Protection Implementation

The Company is progressively implementing additional privacy, consent, security, record-management and data-subject-request processes in light of applicable Indian data-protection requirements.

This Privacy Policy describes the Company’s current intended practices. It should not be interpreted as a representation that the Platform provides a complete privacy-compliance solution to its Users or that every process required under every law applicable to a User has already been implemented.

Each User remains independently responsible for determining and complying with the privacy and data-protection obligations applicable to the User’s own business and Clients.

2. DEFINITIONS

2.1 User

“User” means the individual or organisation that creates, administers or uses an account on the Platform. A User may operate through a separate organisational environment or Tenant.

2.2 Authorised User

“Authorised User” means an employee, director, partner, consultant, representative or other person permitted by a User to access the User’s Tenant.

2.3 Client

“Client” means an investor, customer, prospective customer or other person whose information is entered into, uploaded to, processed through or referred to in the Platform by a User.

2.4 Client Data

“Client Data” means information relating to a Client that is entered into, uploaded to, derived from documents uploaded to or stored through the Platform by or on behalf of a User.

2.5 User Data

“User Data” means information relating to a User, Authorised User, business account, Subscription, billing arrangement, communication or use of the Platform.

2.6 Personal Information

“Personal Information” means information relating to an identified or identifiable individual and includes digital personal data to the extent applicable under Indian law.

2.7 Processing

“Processing” includes collecting, receiving, recording, organising, storing, adapting, retrieving, using, transmitting, displaying, restricting, deleting or otherwise handling information through automated or partly automated means.

3. THE COMPANY’S ROLE IN RELATION TO INFORMATION

3.1 Client Data Controlled by the User

The User decides which Clients are added to the Platform, which Client Data is collected, why that data is collected, which Reports are generated and how the resulting information is used or shared.

The Company processes Client Data primarily to provide software functionality to the User. The Company does not independently decide which investment service, professional service, Report, recommendation or communication should be provided by the User to a Client.

3.2 User’s Responsibility for Client Data

The User is responsible for ensuring that it has lawful authority to collect, upload, store, process and use Client Data through the Platform.

The User is responsible for providing any privacy notice required to be given to a Client and for obtaining any consent, authorisation or other lawful basis required for the User’s processing of that Client’s information.

The technical ability to enter or upload information to the Platform does not mean that the Company has confirmed that the User is lawfully entitled to process that information.

3.3 User Account Information

The Company independently processes certain User Data for purposes such as creating and administering accounts, providing subscriptions, billing, communicating with Users, securing the Platform, preventing misuse, providing support and improving the technical operation of the Services.

3.4 No Direct Professional Relationship with Clients

A Client whose information is stored on the Platform does not ordinarily enter into a direct financial-services or professional relationship with the Company.

The Company does not use Client Data to provide investment advice, research, recommendations, product distribution or portfolio-management services to the Client.

4. INFORMATION COLLECTED FROM USERS

4.1 Registration and Account Information

When a User creates or administers an account, the Company may collect the User’s name, business or organisation name, business category, professional description, email address, mobile number, postal address, login information, account preferences and other information required to establish and administer the account.

The Company may also collect information relating to Authorised Users invited to access a Tenant, including their names, email addresses, roles, permissions and account status.

4.2 Professional and Business Information

The Company may collect information supplied by the User concerning its professional category, business structure, regulatory registrations, distributor or adviser status, branding, logo, contact details and report disclosures.

The Company does not presently undertake routine independent verification of every licence or registration supplied by a User. Such information may therefore represent information declared by the User.

4.3 Subscription and Billing Information

Where a User purchases a paid Subscription, the Company may collect billing name, billing address, tax information, goods and services tax registration details, selected Subscription, billing frequency, invoice records, payment status and transaction references.

Payments may be processed through a third-party payment service provider. The Company may not receive or store complete payment-card numbers, banking credentials or authentication information where those details are processed directly by the payment provider.

4.4 Communications and Support Information

The Company may retain communications sent by a User, including support requests, emails, error reports, feedback, complaints, product enquiries and information supplied during technical assistance.

A User should not include unnecessary Client Personal Information in a support request. Where a support issue requires reference to Client Data, the User should provide only the minimum information necessary to explain the issue.

4.5 Login and Security Information

The Company may collect information relating to account access, login dates and times, failed login attempts, password-reset activity, access permissions, device or browser information and suspected security events.

This information may be used to authenticate Users, detect misuse, investigate incidents and protect the Platform.

5. CLIENT DATA PROCESSED THROUGH THE PLATFORM

5.1 Categories of Client Data

Depending upon the features used and the information supplied by the User, Client Data may include a Client’s name, age, date of birth, gender, email address, mobile number, postal address, permanent account number, family information, relationship information, financial goals, goal dates, income, expenses, assets, liabilities, risk-profile responses, investment preferences, investment amounts, systematic investment plan amounts, portfolio holdings, folio information, transaction information and Report history.

Client Data may also include information contained in a Consolidated Account Statement, portfolio statement or another document uploaded by the User.

5.2 Financial Information

The Platform may store information about a Client’s investments in mutual funds, Portfolio Management Services, Alternative Investment Funds, Specialized Investment Funds and other financial products where such information is entered by the User or extracted from an uploaded document.

The Company stores and processes this information to provide the software functionality selected by the User. The Company does not use the Client’s portfolio information to provide independent investment advice or recommendations to that Client.

5.3 Risk and Goal Information

The Platform may process information concerning a Client’s financial goals, time horizon, intended investment amount, risk-profile responses and related assumptions.

Such information is processed to enable the User to use available goal-planning, risk-profiling and report-generation tools. The Company does not independently determine whether the Client’s responses are accurate or whether any resulting classification or Report is professionally appropriate.

5.4 Information About Family Members or Dependants

A User may enter information relating to a Client’s spouse, child, dependant, nominee or other family member where this is relevant to a financial goal or Report.

The User must ensure that it has appropriate authority to process such information. Where information relates to a person under eighteen years of age, the User is responsible for obtaining any permission required from the parent, lawful guardian or other authorised person.

6. UPLOADED DOCUMENTS

6.1 Consolidated Account Statements and PDFs

The Platform may permit Users to upload Consolidated Account Statements, portfolio statements, PDF documents and such additional document types as may be supported in the future.

Uploaded documents may contain substantial Personal Information, including names, permanent account numbers, folio numbers, investment holdings, transaction details, email addresses, mobile numbers and other financial information.

6.2 Document Extraction

The Platform may use software to extract, classify, map and organise information contained in an uploaded document.

Information extracted by software may be incomplete or inaccurate. The User must compare extracted information with the original document before generating or sharing a Report.

6.3 Document Storage

Uploaded documents may be retained for so long as the relevant account remains active or until the User deletes the document, subject to the retention and backup provisions of this Privacy Policy.

6.4 Future File Types

Where additional file types are supported in the future, this Privacy Policy shall apply to information contained in those files unless a separate notice is provided.

7. INFORMATION COLLECTED AUTOMATICALLY

7.1 Technical Information

When a User accesses the website or Platform, the Company’s systems or infrastructure providers may automatically receive technical information such as internet protocol address, browser type, device type, operating system, referring page, date and time of access, pages or screens viewed, session duration and error information.

7.2 Log Information

The Company may maintain server, application, security and audit logs for purposes including troubleshooting, system administration, fraud prevention, security monitoring and investigation of suspected misuse.

7.3 Usage Information

The Company may collect information about the use of Platform features, such as modules accessed, buttons selected, Reports generated, errors encountered, files uploaded, storage consumed and AI functionality used.

Where reasonably possible, product-usage analysis will be conducted using aggregated or non-Client-identifying information.

7.4 Cookies

The website and Platform may use cookies or similar technologies to maintain authenticated sessions, remember account preferences, protect against misuse and operate essential functionality.

Further information is provided in the Cookie and Similar Technologies Policy.

8. GOOGLE ANALYTICS

8.1 Planned Analytics Use

Google Analytics is not intended to be treated as an essential part of the current Client-reporting functionality. The Company may introduce Google Analytics to understand website visits, navigation patterns, device categories, browser information, referral sources and general use of the Platform.

8.2 Activation and Notice

When Google Analytics is activated, this Privacy Policy and the Cookie and Similar Technologies Policy may be updated to describe the configuration and information collected.

Where a consent mechanism is required or considered appropriate, the Company may provide a cookie banner or preference control before non-essential analytics cookies are activated.

8.3 No Financial Research Purpose

Website analytics will be used to understand and improve the technical and commercial operation of the Platform. It will not be used to prepare investment research, assess financial products or generate investment recommendations.

9. PURPOSES FOR WHICH INFORMATION IS USED

9.1 Providing the Platform

The Company may process information to create and administer accounts, authenticate Users, maintain Tenants, store Client Data, process documents, generate Reports, operate goal-planning and portfolio-review workflows, provide AI-assisted drafting and make other selected functionality available.

9.2 Customer Support

Information may be used to respond to support enquiries, investigate errors, diagnose document-processing issues, restore account functionality and provide assistance requested by a User.

9.3 Billing and Subscription Administration

User Data may be used to process Subscription purchases, issue invoices, manage renewals, collect payments, address failed payments, maintain accounting records and respond to billing enquiries.

9.4 Platform Security

Information may be processed to authenticate account access, prevent unauthorised activity, investigate security incidents, protect the integrity of the Platform, enforce access restrictions and prevent fraud or misuse.

9.5 Service Communications

The Company may use a User’s contact details to send account confirmations, password-reset messages, payment notices, renewal reminders, security alerts, changes to the Services, legal notices and other communications necessary for operating the User’s account.

9.6 Product Communications

The Company may send Users information concerning new features, Platform improvements, training material or related services.

Users may opt out of non-essential promotional communications using the method provided in the communication. Opting out of promotional communication will not prevent the Company from sending necessary account, billing, security or legal messages.

9.7 Platform Improvement

The Company may use technical, support and usage information to identify errors, improve reliability, understand feature usage, develop new modules and improve the user experience.

The Company will not use identifiable Client Data to prepare investment research, investment recommendations or independent financial-product analysis.

Information may be processed where reasonably necessary to comply with law, respond to a lawful request, enforce the Terms of Service, establish or defend legal claims, investigate misuse or protect the rights and safety of the Company, Users or other persons.

10. ARTIFICIAL INTELLIGENCE PROCESSING

10.1 Purpose of AI Features

The Platform may use artificial intelligence to prepare draft summaries, explanations, observations, headings and human-friendly language for Reports.

AI functionality is intended to assist a User with drafting. It is not intended to make investment decisions or independently assess the suitability of a financial product for a Client.

10.2 External AI Provider

The Company may use OpenAI or another external artificial intelligence service provider to operate limited AI Features.

The specific provider, model and technical implementation may change as the Platform develops.

10.3 Intended Exclusion of Personally Identifiable Information

The Platform is intended to avoid deliberately sending personally identifiable Client information to an external AI provider.

Where feasible, information submitted for AI processing should be limited, structured, masked, de-identified or separated from direct identifiers.

10.4 User Responsibility for Prompts

Users must not enter a Client’s name, permanent account number, Aadhaar number, email address, mobile number, residential address, account number, login information, identification document or other unnecessary Personal Information into an AI prompt or unrestricted free-text instruction.

The Company cannot guarantee that a User will never manually enter Personal Information into an AI-enabled field. The User is therefore responsible for reviewing information before submitting it to an AI Feature.

10.5 AI Output

AI-generated content may be inaccurate, incomplete or misleading. Every AI-generated output must be reviewed by the User before it is retained in a final Report or shared with a Client.

10.6 Processing by External Providers

Information supplied to an external AI provider may be processed using infrastructure and operations maintained by that provider. The location and technical handling of such processing may depend upon the provider’s services and contractual arrangements.

Users should not submit Personal Information to an AI Feature unless the Platform expressly indicates that the relevant field is designed and approved for that purpose.

11. GOALSTOX TECHNOLOGY PRIVATE LIMITED

11.1 Role of Goalstox

Certain publicly available financial-product information, product lists and Platform Defaults may be received through Goalstox Technology Private Limited.

Goalstox operates goalstox.com and has its registered office at B902, Vicinia, Chandivali, Powai, Mumbai – 400072, Maharashtra, India.

11.2 Nature of Information Supplied

Information made available through Goalstox may originate from publicly available material published by product manufacturers, asset management companies, portfolio managers, fund managers, industry bodies, self-regulatory organisations and similar public or official sources.

Goalstox does not provide research reports, investment advice or investment recommendations through the Platform.

11.3 Client Data and Goalstox

Goalstox does not ordinarily receive identifiable Client Data merely because it supplies publicly available product information or Platform Defaults to the Company.

Where any future functionality requires information to be disclosed to Goalstox, the Company will provide an appropriate notice and will limit the information to what is reasonably necessary for that functionality.

11.4 Powered-by Attribution

The appearance of “Powered by MyQuestionBox and Goalstox” on the Platform or a Report identifies the technology and data-support arrangement. It does not mean that Client Data is used by Goalstox for marketing, Rm, research or product-distribution purposes.

12. INFORMATION SHARED WITH SERVICE PROVIDERS

12.1 General Principle

The Company may share or permit access to information where reasonably necessary for a service provider to host, secure, maintain, support or operate the Platform.

A service provider is not authorised by the Company to use information for an unrelated independent purpose merely because it processes information on the Company’s behalf.

12.2 Amazon Web Services

The Company may use Amazon Web Services for hosting, storage, backup, networking or related infrastructure.

The Platform’s primary hosting and storage are intended to be maintained in India, subject to the configuration and technical operation of the relevant services.

12.3 DigitalOcean

The Company may use DigitalOcean for hosting, application infrastructure, deployment, backup or related technical services.

The precise allocation of functions between infrastructure providers may change for operational, security, reliability or cost reasons.

12.4 OpenAI

The Company may use OpenAI for limited AI-assisted drafting functionality. The Company does not intend to transmit directly identifying Client information to OpenAI.

Users must comply with the restrictions on entering Personal Information into AI prompts.

12.5 Google Analytics

Google Analytics may be introduced for website and usage analytics. The Cookie and Similar Technologies Policy and relevant notices will be updated when the service is activated.

12.6 Payment Providers

The Company may use third-party payment gateways, banks or payment processors to collect Subscription fees.

Payment providers may process payment and authentication information under their own terms and privacy notices.

12.7 Professional Advisers and Authorities

The Company may disclose information to auditors, accountants, lawyers, insurers, regulators, courts, law-enforcement bodies or government authorities where reasonably necessary for professional advice, legal compliance, investigation, enforcement or protection of legal rights.

13. SALE AND MARKETING USE OF CLIENT DATA

13.1 No Sale of Client Data

The Company does not sell Client Data.

13.2 No Direct Marketing to Clients

The Company does not use Client contact details stored by a User to directly market financial products, subscriptions or unrelated services to that User’s Clients.

13.3 No Research Use

Neither the Company nor Goalstox uses identifiable Client Data to issue investment research, product rankings, investment recommendations or Rm communications.

13.4 No Unrelated Commercial Access

Company personnel are not permitted to access Client Data for personal use or for an unrelated commercial purpose.

Access may occur only where reasonably necessary for operating the Platform, providing authorised support, protecting security, complying with law or fulfilling another purpose disclosed in this Privacy Policy.

14. DATA HOSTING AND LOCATION

14.1 Primary Hosting

The Company intends to maintain primary Platform hosting and storage in India using infrastructure provided by Amazon Web Services, DigitalOcean or another suitable service provider.

14.2 External Service Processing

Certain limited information may be processed outside India where a third-party provider, such as an AI, communication, analytics or payment provider, operates infrastructure in another jurisdiction.

The Company will seek to limit such processing to what is reasonably necessary for the relevant service and will avoid intentionally sending identifiable Client Data to an external AI provider.

14.3 Changes to Hosting

The Company may change hosting providers, server locations or technical architecture where reasonably required for security, reliability, availability, legal compliance or product development.

Where a change materially affects how Personal Information is handled, the Company may update this Privacy Policy or provide an additional notice.

15. DATA SECURITY

15.1 Security Approach

The Company maintains reasonable technical and organisational measures intended to protect information against unauthorised access, alteration, disclosure, loss and misuse.

15.2 Password Protection

User passwords are not intended to be stored in plain text. Password credentials are protected using one-way cryptographic hashing or equivalent security controls appropriate to the Platform’s authentication system.

15.3 Encryption in Transit

The Platform uses HTTPS to encrypt information transmitted between a supported browser and the Platform.

15.4 Backups

The Company maintains encrypted backups as part of its continuity and recovery arrangements.

The frequency, retention and recoverability of backups may vary depending upon the Platform’s Beta status and infrastructure configuration.

15.5 Access Controls

Access to production systems and Client Data is restricted to authorised persons and service providers who require access for legitimate technical, operational, security, support or legal purposes.

15.6 User Responsibilities

Users must protect their login credentials, maintain secure devices, restrict access to Authorised Users and promptly remove access when a person leaves the organisation or no longer requires it.

The User should notify the Company promptly if it suspects that an account, credential, uploaded document or Client record has been compromised.

15.7 No Absolute Guarantee

No internet-based service can guarantee complete security. The Company does not warrant that unauthorised access, data loss, malware, technical failure or another security incident can never occur.

Users should retain independent copies of documents and information required for professional, regulatory or business-continuity purposes.

16. ACCESS TO CLIENT DATA BY COMPANY PERSONNEL

16.1 Restricted Access

The Company does not routinely inspect Client Data for financial, Rm, research or marketing purposes.

16.2 Permitted Operational Access

Authorised Company personnel may access Client Data where reasonably necessary to provide technical support requested by the User, diagnose an error, restore functionality, investigate suspected misuse, protect Platform security, comply with law or perform maintenance that cannot reasonably be completed without access.

16.3 Limitation of Access

Operational access will be limited, so far as reasonably practicable, to the information necessary for the relevant task.

16.4 Support Requests

Where a User requests assistance concerning a particular Client record, document or Report, the User authorises the Company to access the relevant information to the extent necessary to provide that assistance.

17. DATA RETENTION

17.1 Active Accounts

User Data, Client Data, uploaded documents and Reports may be retained for so long as the relevant account remains active and the information is required to provide the Services.

17.2 Expired or Inactive Accounts

Where a Subscription expires, is cancelled or becomes inactive without the account being deleted, the Company may retain the account and associated information for up to one year.

The purpose of this period is to permit possible account restoration, address support or billing matters and complete ordinary operational and backup processes.

The Company may delete information before the end of that period and does not guarantee that an inactive account will remain recoverable throughout the entire year.

17.3 Account Deletion

A User may initiate or request deletion of its account using the available account functionality or the contact details stated in this Privacy Policy.

Following account deletion, access to the Tenant will cease and deletion of associated Client Data and User Content from active systems will be initiated, subject to backup retention, legal requirements and information required for an existing dispute or security investigation.

17.4 Individual Client Deletion

Where available, a User may delete an individual Client record or uploaded document without deleting the entire Tenant.

The User remains responsible for determining whether deletion is legally appropriate and whether the User is required to retain an independent record.

17.5 Backups

Residual copies may remain in encrypted or restricted backups until the relevant backup is overwritten or expires through the ordinary backup cycle.

Information retained only in a backup will not ordinarily be accessed or restored except for disaster recovery, security investigation, legal compliance or another legitimate technical purpose.

The Company may retain limited User, transaction, billing, tax, security and legal records for longer where necessary to comply with law, establish or defend legal claims, investigate fraud or enforce the Terms of Service.

17.7 User’s Independent Record-Keeping

Deletion from the Platform does not relieve a User from any regulatory, contractual or professional obligation to retain Client records, Reports, consents or communications.

The User should export and preserve required information before deleting an account or Client record.

18. DATA EXPORT AND PORTABILITY

18.1 Export Functionality

The Platform may provide functionality allowing Users to export Client Data, Reports or documents in formats supported by the Platform.

18.2 Technical Limitations

Not every configuration, relationship, audit event, AI output or internal system field may be available for export.

The Company does not warrant that exported information will be compatible with another software service.

18.3 Export Before Closure

The User is responsible for exporting information it wishes or is required to retain before cancelling a Subscription, deleting an account or allowing the post-expiry retention period to end.

19. CORRECTION AND UPDATING OF INFORMATION

19.1 User Account Information

A User may update account and business information through available account settings or by contacting the Company.

19.2 Client Data

The User is responsible for correcting and updating Client Data stored in its Tenant.

The Company will not ordinarily alter Client Data without the User’s instruction, except where necessary to address a technical fault, comply with law or protect Platform security.

19.3 Source Data

Financial-product information obtained through Goalstox originates from publicly available manufacturer, industry-body or self-regulatory-body sources.

Where such source information appears incorrect or outdated, the User should verify the information against the current original source and notify the Company where appropriate.

Neither the Company nor Goalstox independently calculates or prepares the underlying returns, ratios or other financial-product information.

20. REQUESTS CONCERNING PERSONAL INFORMATION

20.1 Requests by Users

Subject to applicable law, technical feasibility and lawful retention requirements, a User may request access to, correction of or deletion of Personal Information relating to the User’s own account.

20.2 Requests by Clients

Where a Client seeks access to, correction of or deletion of information supplied to the Platform by a User, the Client should ordinarily contact that User.

Because the User determines the purpose and use of Client Data, the Company may refer the request to the relevant User or require the User’s instructions before taking action.

20.3 Identity Verification

The Company may request information reasonably necessary to verify the identity and authority of a person making a request.

The Company may refuse or defer a request where identity cannot reasonably be verified, the request affects another person’s information, retention is required by law or the request is otherwise not legally required.

Where processing is based on consent and applicable law provides a right to withdraw that consent, the relevant person may withdraw consent using the method communicated at the time of collection or by contacting the responsible User or Company, as applicable.

Withdrawal will not affect processing that occurred lawfully before withdrawal and may result in the relevant Service or functionality becoming unavailable.

21. GRIEVANCES AND COMPLAINTS

21.1 Contacting the Company

A User or other person may contact the Company concerning a privacy question, request or complaint using the following details:

MyQuestionBox Education OPC Private Limited
B902, Vicinia, Chandivali, Powai, Mumbai – 400072, Maharashtra, India
Email: [Insert Privacy or Grievance Email Address]

21.2 Information Required

A request should contain sufficient information to identify the relevant account, explain the issue and permit the Company to verify the requester’s authority.

Sensitive identification documents should not be sent unless specifically requested through a secure method.

21.3 Grievance Contact

The Company may separately designate and publish the name and contact details of a grievance or privacy contact as its privacy programme develops or where required under applicable law.

21.4 Regulatory Rights

Nothing in this Privacy Policy limits any right that an individual may have to approach a competent authority under applicable law.

22. CHILDREN AND MINORS

22.1 Platform Users

A person must be at least eighteen years of age to create or independently operate an account on the Platform.

The Platform may contain information relating to a minor where a User enters that information for a lawful financial goal, family record, dependant record, nomination or similar purpose.

The User is responsible for obtaining the permission of the parent, lawful guardian or other authorised person where required.

22.3 No Direct Services to Children

The Company does not knowingly offer the Platform directly to children or use information about children for targeted advertising or direct financial-product marketing.

23. BUSINESS TRANSFERS

If the Company undergoes a merger, restructuring, acquisition, financing, sale of business or transfer of assets, information associated with the Platform may be transferred to the relevant successor or acquiring entity.

Any recipient will be required to handle the information in accordance with applicable law and the privacy commitments applying at the time of transfer, unless Users are notified of a lawful change.

The Company may preserve or disclose information where it reasonably believes that disclosure is required by law, court order, governmental direction or lawful regulatory request.

Information may also be disclosed where reasonably necessary to investigate fraud, misuse, security incidents or violations of the Terms of Service; protect the Company’s rights or property; prevent harm; or establish, exercise or defend legal claims.

Where legally permitted and reasonably practicable, the Company may notify the affected User before disclosing Client Data in response to a legal demand.

25. THIRD-PARTY WEBSITES

The Platform may contain links to websites operated by Goalstox, product manufacturers, industry bodies, self-regulatory organisations, payment providers or other third parties.

The Company does not control the privacy practices of a third-party website. A User who leaves the Platform should review the privacy notice applicable to the external website or service.

A link does not mean that the Company endorses the third party’s privacy, security, financial products or information.

26. CHANGES TO THIS PRIVACY POLICY

26.1 Policy Updates

The Company may amend this Privacy Policy to reflect changes in the Platform, service providers, legal requirements, security practices or information-processing activities.

26.2 Notice of Material Changes

Where a change materially affects the processing of Personal Information, the Company may provide notice through the Platform, by email or through another reasonable method.

26.3 Effective Date of Changes

An updated Privacy Policy will take effect on the date stated in the revised document.

Continued use of the Platform after the effective date shall be subject to the revised Privacy Policy, but shall not by itself constitute consent where applicable law requires a separate affirmative action.

27. GOVERNING LAW

This Privacy Policy shall be governed by the laws of India.

Subject to any statutory right to approach a competent authority, courts having jurisdiction in Mumbai, Maharashtra shall have jurisdiction in relation to disputes concerning this Privacy Policy.

28. CONTACT INFORMATION

Questions, requests or complaints concerning this Privacy Policy may be addressed to:

MyQuestionBox Education OPC Private Limited
B902, Vicinia
Chandivali, Powai
Mumbai – 400072
Maharashtra, India

Website: review.startuperr.com
Email: [Insert Privacy or Grievance Email Address]

29. IMPORTANT CLARIFICATION

The Platform is a software service for professional Users. Neither MyQuestionBox Education OPC Private Limited nor Goalstox Technology Private Limited provides research reports, investment advice or investment recommendations through the Platform.

Financial-product information displayed through the Platform is obtained through Goalstox from publicly available information published by product manufacturers, industry bodies, self-regulatory organisations and similar public or official sources.

Neither MyQuestionBox nor Goalstox independently calculates the returns, performance ratios, information ratios, risk measures or other financial-product data reproduced from those sources.

The processing of Client Data through the Platform is intended to assist the User in providing the User’s own professional services. It does not transfer the User’s privacy, professional, regulatory or Client-related responsibilities to the Company or Goalstox.