Privacy Policy
Compliant with the Digital Personal Data Protection (DPDP) Act, 2023 & CERT-In Directives
Zero transaction rights. Bank statements are accessed exclusively through consent-based Account Aggregators.
Database isolation via cryptographic tokens and Row-Level Security (RLS) policies.
We never sell, lease, or monetize your cap-tables or financial telemetry to unsolicited third parties.
1. Information We Collect
As a Data Fiduciary under the DPDP Act 2023, we collect only data strictly necessary for providing deal-readiness diagnostics, credit evaluations, and grant matching:
- Corporate & Identity Details: Company Legal Name, CIN/LLPIN, Director DINs, official email address, mobile contact, and GSTIN registration numbers.
- Financial Telemetry (Consent-Driven): Cash flow statements, debt profiles, and bank transaction summaries retrieved strictly in read-only format via RBI-regulated Account Aggregators.
- Cap-Table & Equity Architecture: Founder shareholding, option pools (ESOPs), convertible debt notes, and past investment instruments uploaded for audit.
2. How Data Is Processed and Used
Your data is processed strictly for legitimate uses:
- Calculating the 4-Vector Fundability Scorecard (ƒ) and cap-table health decay scores.
- Compiling bankable credit dossiers formatted for partner bank underwriting.
- Evaluating technical eligibility against central/state grant requirements (SISFS, BIRAC, iDEX).
- Transmitting loan applications to partner banks or institutional VCs strictly upon your explicit affirmative action.
3. Data Retention & Revocation of Consent
In accordance with the DPDP Act 2023, data principals retain complete rights over their data. You may withdraw consent or request complete erasure of your business dossier and telemetry snapshots at any time by contacting us directly at support@unfund.in. Data is automatically purged from active audit instances upon account deactivation, except where statutory compliance under tax or corporate law mandates retention.
4. Cybersecurity & Localization
All customer data, operational logs, and document stores are localized within Indian data center jurisdictions in alignment with CERT-In directions. We enforce Transport Layer Security (TLS 1.3), AES-256 data encryption at rest, and strict API token authorization models.