Legal Documentation

Privacy Policy

How we collect, use, store, and protect your personal information

Last Updated: October 24, 2025

DPDPA 2023 Compliant

This Privacy Policy complies with the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable data protection laws in India and internationally.

1
Our Commitment to Privacy

At Indie Hub Private Limited ("Indie Hub," "we," "us," "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains:

  • What personal data we collect and why
  • How we use, store, and protect your information
  • Your rights regarding your personal data
  • How to contact us about privacy concerns

By using the Indie Hub platform, you consent to the data practices described in this policy.

2
Information We Collect

2.1 Information You Provide

Account Information

  • Name, email, phone number
  • Company name and designation
  • LinkedIn profile
  • Professional background

Financial Information

  • Banking details
  • Payment information
  • Transaction history
  • Tax identification

KYC Documents

  • Government ID (Aadhaar, PAN)
  • Address proof
  • Business registration
  • Financial statements

Application Data

  • Funding applications
  • Business plans
  • Pitch decks
  • Investment preferences

2.2 Automatically Collected Information

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent)
  • Cookies and tracking technologies
  • Location data (with your consent)
  • Performance and analytics data

2.3 Information from Third Parties

We may receive information from third-party services when you connect your accounts (e.g., Google, LinkedIn), payment processors, credit bureaus, and publicly available sources for verification purposes.

3
How We Use Your Information

Provide Services

Process applications, facilitate investments, manage your account

Verify Identity

Conduct KYC/AML checks as required by law

Communications

Send transaction updates, newsletters, and important notices

Security

Detect fraud, prevent abuse, ensure platform security

Analytics

Improve our services, understand usage patterns, develop new features

Legal Compliance

Comply with legal obligations, regulations, and law enforcement requests

4
Legal Basis for Processing

We process your personal data based on:

Consent

You have given explicit consent for processing (e.g., marketing communications)

Contractual Necessity

Processing is necessary to fulfill our contractual obligations to you

Legal Obligation

We must process data to comply with applicable laws (e.g., KYC requirements)

Legitimate Interests

Processing serves our or third parties' legitimate interests (e.g., fraud prevention)

5
Data Sharing & Disclosure

We do not sell your personal data. We may share your information with:

Investors & Portfolio Companies

When you apply for funding or express investment interest (with your consent)

Service Providers

Payment processors, cloud hosting, analytics, customer support, KYC verification services

Business Partners

Co-investment partners, syndicate members (with explicit consent)

Legal Authorities

When required by law, court order, or government regulation

Business Transfers

In case of merger, acquisition, or sale of assets

Note: All third-party service providers are contractually bound to protect your data and use it only for specified purposes.

6
Data Security

We implement industry-standard security measures to protect your personal data:

Encryption

Data encrypted in transit (TLS/SSL) and at rest (AES-256)

Access Controls

Role-based access, multi-factor authentication

Monitoring

24/7 security monitoring and threat detection

Secure Storage

Data stored in secure, compliant cloud infrastructure

Regular Audits

Periodic security assessments and penetration testing

Incident Response

Documented breach notification procedures

While we take extensive measures to protect your data, no system is completely secure. Please protect your account credentials.

7
Data Retention

We retain your personal data for as long as necessary to:

  • Provide you with services
  • Comply with legal and regulatory obligations (e.g., tax records: 7 years)
  • Resolve disputes and enforce agreements
  • Maintain business records and analytics

After account deletion, we anonymize or securely delete your data, except where retention is required by law.

8
Your Privacy Rights (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

1

Right to Access

Request a copy of your personal data we hold

2

Right to Correction

Request correction of inaccurate or incomplete data

3

Right to Erasure

Request deletion of your personal data (subject to legal obligations)

4

Right to Data Portability

Receive your data in a structured, machine-readable format

5

Right to Withdraw Consent

Withdraw consent for processing at any time

6

Right to Grievance Redressal

Lodge complaints about data handling

7

Right to Nominate

Nominate another person to exercise your rights after death/incapacity

To exercise your rights: Contact our Data Protection Officer at privacy@indiehub.in. We will respond within 30 days.

9
Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through your browser settings.

Essential Cookies

Required for basic site functionality

Always Active

Performance Cookies

Help us understand how you use the site

Optional

Functional Cookies

Remember your preferences

Optional

Advertising Cookies

Deliver relevant ads and measure effectiveness

Optional

10
Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it.

11
International Data Transfers

Your data may be transferred to and processed in countries outside India. We ensure adequate safeguards through:

  • Standard contractual clauses
  • Data processing agreements
  • Compliance with applicable cross-border data transfer regulations

12
Updates to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on the Platform. Continued use after changes constitutes acceptance.

Tip: Review this policy periodically to stay informed about how we protect your data.

Contact & Grievance Redressal

Data Protection Officer:

Indie Hub Private Limited

privacy@indiehub.in

Grievance Officer:

grievance@indiehub.in

General Inquiries:

support@indiehub.in

Response Time:

We aim to respond to all privacy requests within 30 days

Right to Lodge Complaint: You have the right to lodge a complaint with the Data Protection Board of India if you believe your privacy rights have been violated.

Related Legal Documents

Your privacy matters to us. If you have any questions, please don't hesitate to reach out.

© 2025 Indie Hub Private Limited. All rights reserved.