Privacy Policy
This policy explains what personal data InfinitAI collects, why, on what legal basis, for how long, and the rights you hold over it. It is written in plain language because a privacy policy nobody reads protects nobody, and it applies to this website and the services behind it, operated for users in India.
Definitions
"Personal data" means information relating to an identified or identifiable individual, such as a name, email address or phone number. "Processing" covers anything done with that data: storing, reading, copying, analysing or deleting it. The "operator" is InfinitAI, which decides why and how data is processed; a "processor" processes data on our instructions, such as a hosting provider.
Personal data we collect
When you register we collect your first and last name, email address and phone number. During identity verification we collect the documents described in the AML / KYC policy. When you contact support, we keep your request and our replies, and payment records reference your account. We never ask for passwords or full card numbers by email.
Data about your use of the platform
As you use the platform we record technical and account data: login times and device characteristics for the audit log, pages and features used, strategy settings, and transaction history. This data makes the service work, keeps it secure and lets us answer your questions accurately.
Cookies
We use strictly necessary cookies to keep you signed in and to protect forms against abuse, and, only with your consent, analytics cookies that count visits in aggregate. No advertising cookies are set by us. The necessary ones cannot be disabled without breaking sign-in, which is why they carry no consent requirement.
Operator and processors
InfinitAI is the operator and the primary responsible party for your data. Processing is performed partly by processors bound by contract to act only on our instructions: hosting and infrastructure providers, the identity-verification provider, email delivery services and payments partners. Each receives only the data its function requires.
Purposes of processing
We process personal data to create and operate your account; to verify your identity as required by law; to provide, secure and improve the services; to communicate about your account, withdrawals and incidents; to meet legal obligations; and, with separate consent, to send occasional service news. Each purpose uses the minimum data it needs.
Legal bases
Processing rests on the bases recognised under India's data protection framework and, where relevant, the GDPR. Contract: account operation is impossible without account data. Legal obligation: identity verification, records and reporting. Legitimate interest: security, fraud prevention and service improvement, balanced against your interests. Consent: marketing email and optional analytics, freely given and withdrawable. Verification cannot be refused while you hold a trading account, because the law makes it mandatory.
How long data is kept
Account and contact data are kept while your account is open and for a short wind-down period after closure. Identity-verification and transaction records are kept for the periods required by applicable Indian record-keeping expectations, measured in years. Support correspondence is kept up to three years. When a retention period ends, data is deleted or irreversibly anonymised.
Data transfers
Your data is stored on infrastructure primarily serving Indian users, but some processors operate global networks, so technical processing can occur outside India. Such transfers are covered by contractual safeguards and limited to what the service function requires. We transfer to the systems that run the service, never to jurisdictions chosen to escape protections.
Disclosure to third parties
We disclose personal data only to: the processors above acting on our instructions; regulated banking and payment partners necessary for your deposits and withdrawals; regulators, courts and law-enforcement bodies where a lawful request applies; and a successor entity in the remote event of a restructuring, under the same protections. We never sell personal data or share it with advertisers or data brokers.
Security measures
Data is encrypted in transit and at rest; access follows role-based permissions with logging; verification documents sit in a separate, more restrictive store; and staff access is limited to the teams that need it. No system is perfect, so we maintain an incident process: if a breach affecting your data occurs, affected users and the competent authorities are notified as the law requires. The technical detail is on the Security page.
Your rights
You may request access to the personal data we hold about you; correction of inaccurate data; deletion where no legal retention duty applies; restriction of processing while a dispute is resolved; and objection to processing based on legitimate interest. Marketing consent can be withdrawn at any time through the unsubscribe link in every email. Requests are free, answered within thirty days, and can be made from your registered email to [email protected].
Service providers and analytics
The platform runs on infrastructure hosting, an identity-verification service, an email delivery service and payments partners, each bound by contract to process data only for us and to delete or return it when the contract ends. Analytics counts visits and usage in aggregate, only with consent where required, and never feeds individual profiles to third parties; if consent is refused, the platform works identically.
Advertising, links and children
We do not run retargeting campaigns on this site. Emails we send are transactional, about your account, or explicitly consented service news. Our pages occasionally link to third-party websites, such as payment partners; once you leave our site, this policy no longer applies. The platform is not directed at anyone under eighteen, accounts are not opened for minors, and a registration from a minor is deleted once identified.
Changes and contact
This policy can change as the service or the law does. The current version is always on this page, and material changes are announced to registered users in advance by email. Questions about anything here go to [email protected], handled by the Client Support & Compliance team, and privacy requests are prioritised within our usual support response times.