Privacy Policy

1. Information We Collect

• Personal Information: When you sign up, we collect:
  • Name (required)
  • Email address (required and verified for account access)
  • Phone number (optional)
• Payment Information: Subscription and credit payments are securely processed through third-party payment providers. We do not store complete card numbers, UPI PINs, or banking credentials.
• Credit and Transaction Records: When you buy or use credits, we record:
  • The amount paid, the credits granted, the payment provider reference, and the date of purchase.
  • Your credit balance, and a ledger of each credit debit and refund, including which tool it was spent on and when.
  • The billing details you supply for a tax invoice, including company name, GSTIN and state where you provide them.
• Technical Data: Automatically collected:
  • IP address, browser type, operating system, device information, session logs, and approximate geographic region.
• Usage Data: We track:
  • Content interaction data, including viewed pages, saved grants, and platform engagement activity.
  • Page views, time spent, and clicks (via Google Analytics and Microsoft Clarity).

2. How We Use Your Information

• Account Management: To create your account, send verification emails, and provide unlimited grant access.
• Site Operation: To ensure functionality (e.g., session cookies for login).
• Communication: To send account-related communications including verification emails, login alerts, password reset links, subscription updates, grant alerts, product updates, marketing communications, and customer support messages via email, phone, SMS, or WhatsApp.
• Consent to Contact: By providing your email address and phone number, you consent to receive transactional, informational, and marketing communications from StartupGrantsIndia. You may opt out of non-essential marketing communications at any time.
• Billing and Credits: To process payments, grant and debit credits, show your balance and usage history, issue GST tax invoices, and investigate failed, disputed, or fraudulent payments.
• Analytics: To improve the Site using Google Analytics and Microsoft Clarity data (e.g., understanding user behavior).

3. Cookies and Tracking

• Session Cookies: Used for login functionality (essential, no consent needed).
• Our own cookies:
  • sgi_anon_id (1 year): a random ID that groups the pages a browser visits, for our own product analytics.
  • sgi_session_id (30 minutes): a random ID that groups one visit’s pages together.
  • sgi_ref (7 days): set only when you arrive through a partner’s referral link, so the partner is credited if you sign up.
• Analytics Cookies: Google Analytics and Microsoft Clarity set cookies to track usage. Microsoft Clarity also records sessions (mouse movement, clicks and scrolling on our pages) and builds heatmaps. These help us understand platform usage and improve user experience. You may disable cookies through your browser settings, though some features may not function properly.

4. How We Share Your Information

• Service Providers: We use the following providers to run the Site. Each receives only what it needs for its task.

  Purpose	Provider	Data involved
  Hosting and delivery	Render (application servers in Singapore), Cloudflare (network, caching and security)	Technical data, and all data passing through the Site
  Database, sign-in and file storage	Supabase (database in India)	Account, profile, billing and usage data, uploaded files
  Sign-in	Google, LinkedIn (when you choose to sign in with them)	Name, email and profile picture they return to us
  Payments	Cashfree, Razorpay, PayU, Zoho Payments	Your name, email address, phone number, the amount and an internal reference, to process a payment or autopay. Card, UPI and bank details are entered with the provider and never seen by us
  Expert, CA and loan help	The expert, chartered accountant or lending partner assigned to your request	The details you submitted when you asked us for help (a service enquiry, an expert or CA consultation, or a business loan), shared only with whoever is handling that request and only for that purpose
  AI models	Google (Gemini), Anthropic, OpenAI, DeepSeek, Xiaomi (MiMo)	The text of your requests and the profile, startup and document details needed to answer them
  File conversion	CloudConvert, ConvertAPI, Zamzar, Cloudmersive, Amazon Web Services (Lambda, S3)	Files you upload for conversion or compression, such as pitch decks
  Email	Resend, Zoho ZeptoMail, Amazon Web Services (SES)	Name, email address and the message content
  WhatsApp messages	Meta (WhatsApp Cloud API)	Phone number and the message content
  Browser notifications	Your browser’s push service (for example Google, Mozilla or Apple)	A notification ID for your browser and the notification text, only if you turn notifications on
  Calendar invites	Google Calendar	Name and email of webinar attendees
  Location lookup	ipgeolocation.io	IP address, to estimate your state
  Error monitoring	Sentry	Error reports with technical details of the error. Personal data such as email addresses and phone numbers is removed from them before they are sent
  Analytics	Google Analytics, Microsoft Clarity (including session recordings)	Usage and technical data

• Subscription Management: To process subscriptions, manage billing status, and provide access to subscriber-only features.
• Legal Requirements: We may share data if required by Indian law or to protect our rights.

5. Data Storage and Security

• Storage: Our database is hosted by Supabase in India. The Site runs on Render servers in Singapore behind Cloudflare, and some of the providers listed in section 4 process data outside India.
• Security: We use encryption and industry-standard measures, however, no method of electronic storage or transmission is completely secure.
• Retention: We keep your data while your account is active or as needed for legal compliance.
  Account-related information, including email addresses and phone numbers, may be retained as long as necessary for platform operations, legal compliance, fraud prevention, support, subscription management, and legitimate business purposes.
• Financial Records: Records of credit purchases, credit usage, and the tax invoices issued against them are financial records. We retain them for the period required by Indian tax law even after an account is closed, and they are outside the scope of a deletion request to that extent.

6. Your Rights (Under India’s DPDP Act, 2023)

• Access: Request a copy of your data.
• Correction: Update your name or phone number by contacting us.
• Deletion: You can delete your account yourself at startupgrantsindia.com/delete-account. That page lists what is deleted and what we must keep: payment, credit and tax invoice records (which carry your name, email and GSTIN) for the period tax law requires, and your email opt-outs so we never email you again.
• Complaints: Contact us or India’s Data Protection Authority if issues arise.
• Email requests to team@startupgrantsindia.com.

7. Third-Party Services

• WhatsApp: The group link directs you to WhatsApp. Their privacy policy applies.
• Google Analytics: Collects usage data (see their policy: here).
• Microsoft Clarity: Tracks behavior (see their policy: here).

8. Startup Grants India Chrome Extension

Our Chrome extension fills grant and incubator application forms with the answers you saved in your Startup Grants India account, and can read a program’s form so your workspace knows its questions.

• Where it runs: only on Google Forms, Accubate portals, and the program sites you allow, one at a time, through Chrome’s own prompt. Access it adds for a fill ends after two hours.
• What it sends us: on those forms, the form’s questions and options. It never sends what you have typed into the form, except when you ask it to draft a longer answer from what you started. When a step doesn’t work, it sends the page’s visible buttons, labels and error messages, with ID numbers, phone numbers and emails masked.
• How we use it: we use an AI model to match a form’s questions to your answers and to get past a step that failed. Nothing else.
• What it doesn’t do: it does not read other pages or your browsing history, and it never sends or submits a form; you do. We don’t sell this data or use it for advertising.
• Removing it: to remove everything the extension keeps on your computer, uninstall it.

9. Children’s Privacy

The Site is not for users under 18. We don’t knowingly collect data from children. Contact us if you believe we have such data.

10. Changes to This Policy

We may update this policy. Check back here. Continued use after changes means you accept them.

11. Business Information

• Legal Name: Nexora Technology
• Trade Name: Startup Grants India
• Registered Address: 1402, Tower-6, Sector-67, M3M Merlin, Bhondsi, Gurugram, Haryana, 122102, India
• Email: team@startupgrantsindia.com
• Website: https://www.startupgrantsindia.com

12. Contact Us

Email: team@startupgrantsindia.com