01Who this policy covers
Practice users are the distributors, advisers and their staff who hold a Brhannivesh account. Client families are the investors whose portfolio data a practice imports to prepare reports.
For client data, the practice is responsible for deciding what is imported and why. Brhannivesh processes that data on the practice's instructions and only to provide the service.
02Information we collect
From practice users, we collect the details given at sign-up and in account settings. From client statements, we process only what is needed to prepare reports.
- Practice details: name, work email, firm name, practice type, registration number and the number of client families.
- Client portfolio data: holder names, PAN, folio and account identifiers, holdings, transactions and valuations contained in consented statements.
- Consent records: the scope, method and date of each client's consent.
- Usage records: sign-ins, report generation, edits, approvals and deliveries, kept as an audit trail.
03How we use it
We use information only to operate and improve the reporting service for the practice that provided it.
- Consolidating holdings and preparing quarterly reports and summaries.
- Identifying points for discussion for the advisor's review.
- Delivering approved reports by email or through the client portal.
- Providing support, securing accounts and maintaining audit records.
04What we never do
Client portfolio data is never sold, rented or shared with fund houses, insurers, brokers or advertisers. It is never used to market financial products to clients or to build profiles for any purpose other than the practice's own reports.
05Consent from client families
A client's statements are imported only after their consent is recorded. Consent sets out which statements may be read and for what purpose.
A client may withdraw consent through their advisor at any time. Imports stop immediately, and existing data is deleted according to the practice's retention settings and any record-keeping obligations that apply to the practice.
06Security
Data is encrypted in transit and at rest. Statement passwords supplied at consent are stored encrypted and used only to open that client's statements.
Access within a practice is controlled by role, and every access to a report is logged. Brhannivesh has no transaction access to any investment account.
07Retention and deletion
Each practice chooses how long statements, reports and audit records are kept, within limits set by its regulatory obligations. Data past its retention period is deleted on schedule, and the deletion itself is recorded. When a practice closes its account, its data is deleted after a final export period.
08Service providers
We use carefully selected providers for hosting, email delivery and similar infrastructure. They process data only on our instructions and under confidentiality and security obligations at least as strict as this policy.
09Your choices
Practice users can access, correct or export their account information from settings, or ask us to delete it.
Client families should contact their advisor to access, correct or delete their portfolio data, or to withdraw consent. We support practices in responding to these requests.
10Changes to this policy
If we make a material change to how personal data is handled, we will notify practice users by email before the change takes effect.
Questions about this document can be sent through the contact page.