Privacy Policy - My Wealthy Future Services

1. Introduction and Scope

My Wealthy Future Services Private Limited ("Company", "We", "Our", "Us", or "MWFS") respects your privacy and is committed to protecting your personal data. This Privacy Policy establishes our commitment to maintaining the confidentiality, integrity, and security of all information you provide through our website (mywealthyfutureservices.com) and mobile applications (collectively referred to as the "Service").

This Privacy Policy applies to all individuals ("Users", "You", or "Your") who access or use our Service. It outlines how we collect, process, use, store, disclose, and otherwise manage your personal and non-personal information in accordance with applicable data protection laws, including the Information Technology Act, 2000, and the Information Technology Rules, 2011.

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person, including name, email address, phone number, physical address, payment information, transaction history, IP address, device identifiers, and any other information that can directly or indirectly identify an individual.

Processing: Any operation performed upon personal data, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, transmission, or erasure.

Data Controller: My Wealthy Future Services Private Limited, which determines the purposes and means of processing personal data.

Data Processor: Any third party engaged by MWFS to process personal data on our behalf under contractual obligations.

Service: Our website and mobile applications, including all features, content, and services provided through these platforms.

3. Categories of Personal Data Collected

We collect the following categories of personal data:

3.1 Information You Provide Directly

Account Information: Full name, email address, phone number, date of birth, residential address, and identity verification documents
Payment Information: Bank account details, credit/debit card information, UPI identifiers, wallet credentials, and transaction history
Communication Data: Messages, inquiries, complaints, feedback, and any correspondence with our support team
Profile Information: Preferences, settings, saved payment methods, and service history
Document Information: Government-issued ID, address proof, and other verification documents required for regulatory compliance

3.2 Information Collected Automatically

Device Information: Device type, operating system version, device identifiers, mobile network information, and device manufacturer
Usage Data: Pages accessed, features used, time and duration of activities, clicks, scrolls, and search queries
Connection Data: IP address, browser type and version, referring/exit pages, and operating system
Location Data: Approximate location based on IP address or GPS data (if you grant permission)
Cookie and Tracking Data: Information collected through cookies, web beacons, and similar tracking technologies
Performance Data: System performance metrics, error logs, and crash reports

3.3 Information from Third Parties

Payment Processors: Transaction confirmation and payment status information
Service Providers: Information necessary to complete requested transactions
Regulatory Authorities: Information as required for compliance and verification purposes
Business Partners: Information shared for service delivery and integration purposes

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to enter into and perform our service agreement with you
Legal Compliance: Processing required to comply with legal obligations, tax requirements, and regulatory mandates
Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, security enhancement, and service improvement
Consent: Processing based on your explicit consent for specific purposes such as marketing communications or promotional offers
Public Interest: Processing necessary for purposes in the public interest or official authority
Vital Interests: Processing necessary to protect vital interests of any person

5. Purposes of Data Processing

Your personal data is processed for the following purposes:

To facilitate service delivery and complete financial transactions
To verify identity and prevent fraudulent activities
To provide customer support and respond to inquiries and complaints
To send service updates, technical notices, security alerts, and administrative messages
To conduct transaction monitoring and comply with anti-money laundering regulations
To maintain and improve our Service, develop new features, and optimize user experience
To conduct analytics, research, and statistical analysis for service improvement
To enforce our Terms of Service and other agreements
To detect, prevent, and address fraud, security issues, and technical problems
To send marketing communications and promotional offers (only with your consent)
To comply with legal, regulatory, and law enforcement requirements
To establish, exercise, and defend legal claims
To conduct Know Your Customer (KYC) and regulatory verification
To maintain business records and audit trails

6. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

6.1 Service Providers and Processors

We engage third-party service providers to assist in operating our Service, including payment processors, cloud service providers, customer support platforms, analytics providers, and IT service providers. These processors are contractually bound by data protection obligations.

6.2 Business Partners

We may share information with business partners, merchants, and service integrators as necessary to provide integrated services and complete transactions.

6.3 Financial Institutions

Your payment and financial information is shared with banks, payment gateways, and financial institutions as necessary to process payments and transactions.

6.4 Legal and Regulatory Authorities

We may disclose personal data when required by law, court order, government request, or to protect our legal rights, property, and safety.

6.4 Business Transfers

In the event of merger, acquisition, bankruptcy, or sale of assets, your personal data may be transferred as part of the business transaction. We will provide notice before such transfer occurs.

6.5 With Your Consent

We may share your personal data with third parties for purposes other than those stated above only with your explicit written consent.

7. Data Security and Protection

We implement comprehensive technical, organizational, and administrative measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

End-to-end encryption for sensitive data transmission using SSL/TLS protocols
Advanced encryption at rest using industry-standard AES-256 encryption
Secure access controls, multi-factor authentication, and role-based permissions
Regular security audits, vulnerability assessments, and penetration testing
Employee training and awareness programs on data protection and information security
Secure data centers with physical access controls and surveillance
Regular data backups and disaster recovery procedures
Incident response procedures and breach notification protocols

While we employ robust security measures, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security of your personal data. You acknowledge and accept this inherent risk.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law:

Account Information: Retained for the duration of your account and 3 years after account closure for compliance purposes
Transaction Data: Retained for a minimum of 7 years as required by tax and financial regulations
KYC/Verification Documents: Retained for 5 years from account closure as per regulatory requirements
Communication Records: Retained for 2 years from the date of communication for dispute resolution and service improvement
Usage and Analytics Data: Aggregated data retained indefinitely; individual-level data retained for 12 months
Cookies and Tracking Data: Retained until expiration date set at the time of creation (typically 1-2 years)

After the retention period expires, personal data is securely deleted or anonymized unless we are required to retain it further by law. You may request deletion of your data at any time, subject to legal retention requirements.

9. Your Privacy Rights and Choices

You have the following rights regarding your personal data:

9.1 Right to Access

You have the right to request and obtain a copy of your personal data held by us in a structured, commonly used, and machine-readable format.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update your account information directly through your dashboard.

9.3 Right to Erasure

Subject to legal retention requirements, you have the right to request deletion of your personal data. However, deletion may not be possible if data is required for legal, regulatory, or contractual obligations.

9.4 Right to Restrict Processing

You may request restriction of processing of your personal data while we verify its accuracy or assess the lawfulness of processing.

9.5 Right to Object

You have the right to object to processing of your personal data for marketing purposes or other legitimate interests. You may withdraw consent for non-essential processing at any time.

9.6 Right to Data Portability

You have the right to receive your personal data in a portable format and to transmit such data to another service provider without hindrance.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

9.8 Right to Lodge Complaint

You have the right to lodge a complaint with the appropriate supervisory authority regarding our processing of your personal data.

To exercise any of these rights, please contact us using the contact information provided in Section 12 below. We will respond to your request within 30 days.

10. International Data Transfer

Your personal data is primarily stored and processed within India. However, in some cases, we may transfer your data to countries outside India for purposes such as cloud storage, backup, or service delivery. When transferring personal data internationally, we ensure compliance with applicable data protection laws and implement appropriate safeguards, including standard contractual clauses and adequacy decisions where applicable.

11. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your user experience, analyze service usage, and personalize content. These technologies allow us to:

Remember your preferences and login information
Understand how you interact with our Service
Measure the effectiveness of marketing campaigns
Prevent fraud and enhance security
Deliver targeted advertisements based on your interests

You can manage cookie preferences through your browser settings. Note that disabling cookies may limit your ability to use certain features of our Service. We also respect "Do Not Track" signals where applicable.

12. Contact Us for Privacy Matters

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer or Privacy Team:

My Wealthy Future Services Private Limited

Email: mrenzosmart@gmail.com

Phone: +91 90915 61826

Address: Sonarpur, Kolkata 700150, West Bengal, India

Response Time: We aim to respond to all privacy requests within 30 days of receipt

13. Policy Updates and Changes

We may update this Privacy Policy periodically to reflect changes in our data practices, technology, legal requirements, or other factors. We will notify you of material changes by email or prominent notice on our Service. Your continued use of the Service following such notifications constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly.

14. Jurisdiction and Applicable Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, and the Information Technology Rules, 2011. Any disputes arising from this Privacy Policy or related to data protection matters shall be subject to the exclusive jurisdiction of the courts located in Kolkata, West Bengal, India.

Your Consent

By using our Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with our privacy practices, please refrain from using our Service.