Privacy Policy

Wealth Vision Research (SEBI Research Analyst Reg. No. INH000029379, BSE Enlistment No. 7419) respects your privacy. This Privacy Policy covers the Wealth Vision Research Android app (package com.wealthvisionresearch.wealthapp), https://wealthvisionresearch.com and our related research services. It explains the data we collect, why we use it, who receives it, how it is protected and retained, and how you can exercise your rights.

If the app is distributed by a verified Google Play organization account with a legal name different from Wealth Vision Research, that organization acts as the authorized app publisher identified on the Play listing. Wealth Vision Research remains the Research Analyst service provider and is responsible for the app data practices described here.

1. Information We Collect

App account and authentication data

• Phone and sign-in: Indian mobile/WhatsApp number, OTP challenge status, verification time and security attempt records. OTP values are stored only as protected digests and are invalidated after successful use.
• Account and profile: internal client/account identifier, full name, customer type, optional email where provided, consent versions and acceptance times.
• Device and session: app-generated device identifier, device name/platform, session creation and last-use times, refresh-token digest, IP-derived security digest and session revocation status.

KYC, payment and service data

• KYC/PAN: PAN submitted for client compliance, PAN-holder name returned by the verification provider, verification reference, status, review notes and dates. PAN is stored using authenticated encryption; routine screens and records use only a keyed hash or the last four characters.
• Google Play purchases: selected product/offering, price and service duration, Play product and order identifiers, purchase status/time and a keyed hash of the purchase token. Google Play processes the payment method. We do not receive or store your card number, CVV, UPI PIN, banking password or Google password.
• Research service: subscription, entitlement, research delivery history where recorded, and related consent, support, complaint and audit records.

Communications and notifications

• Support and enquiries: name, email address, phone number, subject, message, attachments or references you choose to provide, and our response/resolution record.
• Push notifications: app-generated device identifier, Firebase Cloud Messaging or Expo push token, platform, enabled status and delivery results. Notification permission is optional.
• Correspondence: emails, WhatsApp messages and legally verifiable records of service-related communications.

Technical, website and campaign data

• Technical logs: IP address, browser or app user-agent, requested URL/API route, timestamp, app/runtime version and diagnostic/security events generated by our systems or infrastructure.
• Website cookies: an essential session cookie secures forms. The /bio campaign page uses Meta Pixel identifiers and Google Ads click identifiers. The /liveclass page retains advertisement identifiers long enough to measure a verified payment.

2. Android Permissions and Data Not Requested

The Android app requests notification permission so it can deliver optional research alerts. It does not request access to contacts, SMS, call logs, precise or approximate location, camera, microphone, photos, videos or files. It does not connect to a broker, trading, demat or bank account and does not collect those account passwords or OTPs.

3. Why We Use Information

• authenticate users, secure accounts, maintain signed-in devices and prevent fraud or abuse;
• provide free and paid research content, verify Google Play purchases and maintain entitlements;
• send optional research and account notifications;
• complete Research Analyst client onboarding, PAN verification and KYC obligations;
• record consent, research delivery, payments, refunds, support and complaints as required by law;
• operate, diagnose, secure and improve the app, website and related infrastructure;
• respond to enquiries, deletion requests, grievances and legal or regulatory requests; and
• measure the limited website campaigns described in section 9.

We do not sell or rent personal information and do not use app account, KYC/PAN or Google Play purchase data for third-party advertising.

4. Legal Basis and Consent

We process data with your consent, to perform the service agreement, for legitimate security and operational purposes, and to comply with Research Analyst, tax, accounting, payment, grievance and other Indian legal obligations. You may withdraw consent where processing depends on consent, but this does not override records we are legally required to retain.

5. Service Providers and Disclosure

We limit disclosure to what is necessary for the stated purpose. Recipients may include:

• Meta/WhatsApp: delivery of requested sign-in OTP messages and, only on disclosed website campaign pages, Meta campaign measurement;
• Google: Google Play Billing and purchase verification, Firebase Cloud Messaging for Android notifications, Google Fonts on the website and Google Ads campaign measurement where described below;
• Expo: app update delivery and iOS push routing where applicable;
• KYC and payment providers: PAN verification, and payment/refund processing for non-Play services where applicable;
• Infrastructure providers: hosting, database, security, backup and communications services acting on our instructions;
• Professional and regulatory recipients: auditors, compliance advisers, SEBI, RAASB, courts or other lawful authorities where required; and
• Telegram: only when you choose to request access to our channel through the relevant website campaign.

These providers may process limited technical data such as IP address, device/app information and service logs as part of their operation. Their processing is also governed by their applicable terms and privacy notices. We do not share personal information with third parties for their own direct marketing.

6. Security

We use HTTPS in transit; authenticated encryption for stored PAN; keyed hashes for PAN matching, purchase tokens, refresh tokens and selected security identifiers; short-lived access tokens; revocable device sessions; rate-limited, expiring and single-use OTP challenges; role-based access to administration; audit trails; server-side validation; restricted file permissions; and software/security maintenance.

No transmission or storage method is completely secure. Do not share an OTP, full PAN, payment secret, bank password or trading credential through an ordinary support message.

7. Data Retention

• Research Analyst client, KYC, consent, payment and service records: generally at least five years from the end of the relationship, and longer when litigation, a complaint or regulatory examination remains open.
• Account sessions and OTP records: retained only for their operational life and a limited security/audit period. Active sessions are revoked when the user logs out, revokes a device or deletes the account.
• Push tokens: retained while needed for requested notifications and disabled on account deletion or when no longer valid.
• Support and enquiry records: generally up to 24 months unless they become part of a client, complaint, transaction, security or legal record.
• Technical and campaign records: retained for limited security, diagnostics, attribution and deduplication periods, then deleted or anonymised.

When a retention period ends, data is deleted or anonymised using a reasonable operational process.

8. Account and Data Deletion

In the Android app, open Profile → Delete account and confirm the request. If you cannot access the app, use the public Account Deletion page. Account closure immediately revokes sessions and disables push delivery. Associated data not needed for a legal, payment, refund, complaint, fraud-prevention or security purpose is deleted or anonymised; legally required records remain restricted until their retention period ends.

9. Website Cookies and Campaign Measurement

The main statutory website uses an essential session cookie. The standalone /bio campaign page may load Meta Pixel and retain Google Ads click identifiers. A one-use Telegram invite can be associated with those identifiers long enough to measure a confirmed subscription. A Cashfree-verified /liveclass payment may produce a standard purchase event containing value, currency, campaign identifiers, IP address, browser user-agent and a one-way hash of the verified WhatsApp number. You may block cookies or tracking; core statutory pages remain available. This campaign measurement is separate from the Android app, which does not include an advertising SDK.

10. Your Choices and Rights

• request access to or correction of personal data;
• delete your app account and data not subject to required retention;
• withdraw consent for optional processing and disable notifications in Android settings;
• unsubscribe from non-essential communications; and
• raise a privacy complaint with our Grievance & Data Protection Contact.

Use our secure contact form. We aim to respond within 30 days after verifying identity. Research-service complaints also follow the process on our Grievance Redressal page.

11. Children

The app and research services are intended only for adults aged 18 or older. We do not knowingly collect app account data from children. If you believe a child has provided information, contact us so we can investigate and delete it where retention is not legally required.

12. International Processing and External Services

Some technology providers may process limited data on infrastructure outside your state or country, subject to their service arrangements and applicable law. Our website and app also link to external services, including Google Play, SEBI and grievance portals, which publish their own privacy practices.

13. Changes to This Policy

We may update this policy when the app, providers or legal requirements change. The revised version will appear here with a new date. Material changes affecting existing users will also be communicated through an appropriate available channel.

14. Privacy Contact

Last updated: September 2026.