Privacy Policy

1. Introduction

Incubazar ("Incubazar", "we", "us", or "our"), a sole proprietorship business, operates the Incubazar platform, a digital incubator connecting founders with investors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform.

2. Information We Collect

2.1 Personal Information You Provide

We collect the following types of personal information that you voluntarily provide:

• Account Information: Full name, email address, phone number, password (encrypted)
• Profile Information: Professional details, company information, startup information, investment preferences, sector interests
• KYC Information (Investors): PAN card number and document, Aadhaar card number and document, bank account details (account number, IFSC code), address proof
• Business Information (Founders): Company name, CIN, incorporation date, business model, pitch deck, financial projections
• Financial Information: Investment amounts, transaction history, subscription plan details
• Documents: Pitch decks, financial statements, business plans, incorporation certificates, SAFE agreements, PAS-4 forms
• Communication Data: Messages sent through our messaging system (post-investment only)
• Payment Information: Billing information processed through Razorpay (we do not store complete card details)

2.2 Information Collected Automatically

When you use the Platform, we automatically collect certain information:

• Device Information: IP address, device type, operating system, browser type and version
• Usage Data: Pages visited, time spent on pages, click patterns, search queries, features used
• Analytics Data: Learning module views, calculator usage, deal views, document downloads
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies (see Cookie Policy)
• Location Data: Approximate location based on IP address

2.3 Information from Third-Party Services

We receive information from integrated third-party services:

• Razorpay: Payment transaction details, payment status, subscription status
• DocuSign: Document signing status, envelope IDs, signer information
• Supabase: Authentication data, database queries, file storage metadata
• Vercel Analytics: Web vitals, performance metrics, page views

2.4 AI and Matching Data

To provide our AI-powered matching service, we collect and analyze:

• Startup sector, stage, funding needs, team composition
• Investor preferences, ticket size, sector expertise, past investments
• Compatibility scores, matching rationale, recommendation data
• User feedback on matches (accepted, declined, reasons)

3. How We Use Your Information

We use your information for the following purposes:

3.1 Platform Operation and Services

• Account Management: Create and manage your account, authenticate access, verify identity
• Matching Services: AI-powered matching between founders and investors based on compatibility
• Transaction Processing: Facilitate deal discovery, interest expressions, document generation, and e-signatures
• Messaging: Enable post-investment communication between verified parties
• Subscription Management: Process premium subscriptions, manage billing, handle renewals
• Learning Platform: Provide access to educational content, track module views (optional analytics)
• Venture Calculator: Store calculation inputs and outputs for your reference

3.2 Legal and Compliance

• KYC Verification: Comply with Know Your Customer and Anti-Money Laundering regulations
• Section 42 Compliance: Ensure private placement compliance under Companies Act 2013
• Record Keeping: Maintain transaction records as required by law (7-10 years)
• Regulatory Reporting: Comply with SEBI, RBI, and other regulatory requirements

3.3 Communication

• Service Updates: Send notifications about platform changes, new features, policy updates
• Marketing: Send newsletters, promotional content, educational resources (with opt-out option)
• Support: Respond to inquiries, provide customer support, resolve disputes
• Transactional Emails: Send subscription confirmations, payment receipts, password resets

3.4 Security and Fraud Prevention

• Detect and prevent fraud, abuse, and security incidents
• Monitor for suspicious activities and unauthorized access
• Protect the integrity of the Platform and user data
• Enforce our Terms of Service and legal rights

3.5 Analytics and Improvement

• Usage Analytics: Understand how users interact with the Platform
• Performance Monitoring: Track page load times, error rates, system health
• Feature Development: Identify popular features, plan improvements
• A/B Testing: Test new features and user interfaces (anonymized data only)

4. Information Sharing and Disclosure

4.1 With Your Consent

We share your information with third parties when you explicitly consent, such as:

• Sharing your startup profile with matched investors
• Sharing your investor profile with founders you've expressed interest in
• Connecting you with other users through the messaging system post-investment

4.2 Service Providers and Partners

We share information with trusted third-party service providers who assist in operating our Platform:

• Supabase (Database & Auth): User data storage, authentication, file storage (data stored in secure cloud infrastructure)
• Razorpay (Payments): Payment processing, subscription management, transaction details
• DocuSign (E-Signatures): Document signing services, signature verification, envelope management
• Vercel (Hosting & Analytics): Application hosting, web analytics, performance monitoring
• AI/ML Service (Matching): Investor-founder matching algorithms (anonymized data processing)

All service providers are contractually bound to maintain data confidentiality and security, and may only use your information to perform services on our behalf.

4.3 Legal Requirements and Protection

We may disclose your information if required by law, court order, government request, or to:

• Comply with legal obligations, subpoenas, or regulatory requests
• Protect our rights, property, and safety, or that of our users
• Prevent fraud, illegal activities, or violations of our Terms of Service
• Respond to SEBI, RBI, or other regulatory inquiries
• Cooperate with law enforcement investigations
• Enforce our agreements and policies

4.4 Business Transfers

In case of merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our Platform before your information is transferred and becomes subject to a different privacy policy.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you, such as:

• Industry trends and market statistics
• Platform usage metrics and analytics
• Research and reports on startup funding landscape

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit (HTTPS) and at rest
• Access Controls: Role-based access with strict permissions
• Authentication: Secure login with password hashing
• Monitoring: Continuous security monitoring and audits
• Data Isolation: Row Level Security (RLS) policies in database

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Maintain transaction records as required by law (typically 7-10 years)

When your information is no longer needed, we will securely delete or anonymize it.

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal requirements)
• Opt-Out: Unsubscribe from marketing communications
• Portability: Request export of your data in machine-readable format
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at privacy@incubazar.in

8. Cookies and Tracking

8.1 Types of Cookies We Use

We use cookies and similar tracking technologies to:

• Essential Cookies: Authentication, session management, security (cannot be disabled)
• Functional Cookies: Remember your preferences, language settings, saved filters
• Analytics Cookies: Understand usage patterns, page views, feature adoption (Google Analytics, Vercel Analytics)
• Performance Cookies: Monitor platform performance, load times, error rates

8.2 Managing Cookies

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect Platform functionality, such as staying logged in or remembering your preferences.

For more information, please refer to our Cookie Policy.

8.3 Do Not Track (DNT)

We currently do not respond to Do Not Track (DNT) browser signals, as there is no universal standard for DNT compliance. We will update this policy if industry standards change.

9. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.

10. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries outside India. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Posting the updated policy on our Platform
• Updating the "Last Updated" date
• Sending email notifications for material changes

Continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or to exercise your privacy rights, contact us:

14. Compliance

This Privacy Policy complies with:

• Information Technology Act, 2000 (India)
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023 (India)
• Companies Act, 2013 (Section 42 - Private Placement)
• SEBI regulations regarding investor protection and data privacy
• Reserve Bank of India (RBI) guidelines for payment data