Privacy Policy

Last updated: 7 August 2026 · Applies to the Vemuri Financial Services Backoffice application and its public pages.

This policy explains what personal data Vemuri Financial Services ("we", "us") collects through this application, why, how long we keep it, and how you can exercise your rights over it. It's written for both our own users (admins, employees, distributors) and the clients whose data our users manage inside this app (e.g. eKYC records, mailing-list contacts).

1. What we collect

Category	What	Why
Account data	Username, email, password (hashed, never stored in plain text)	To create and secure your login
eKYC records	Client name, PAN, phone, email, KYC status	Entered by our users to track their own clients' KYC status — we never collect Aadhaar numbers
Mail marketing contacts	Contact name, email, date of birth, anniversary, wedding date	So a user can send festival/birthday/anniversary greetings to their own imported client list
Payment records	Plan/amount/UPI reference or gateway transaction ID	To confirm and record a subscription payment — we never see or store card numbers or UPI PINs; those are handled entirely by our payment gateway
Usage & audit logs	Actions taken in the app, IP address, timestamps	Security, troubleshooting, and detecting unauthorized access

2. Why we process it (legal basis)

• Contract — to provide the account/module you've signed up for.
• Consent — for eKYC client records and Mail marketing contacts, entered by our users, who confirm they have the underlying client's consent before storing or emailing them.
• Legitimate use / legal obligation — audit logs and payment records, kept for security and to meet standard financial record-keeping expectations.

3. What we don't collect

We do not collect or store Aadhaar numbers anywhere in this application. Card numbers, CVVs, and UPI PINs are never seen by our servers — payments are processed by a PCI-DSS certified gateway or via a UPI reference number you provide after paying independently.

4. How long we keep it

• Account data — for as long as your account is active, plus a reasonable period after closure for legal/audit purposes.
• eKYC records — retained per standard financial-services record-keeping practice; typically several years, consistent with SEBI/AMFI expectations for distributor records. Confirm current requirements with your compliance advisor if you need a precise figure for your business.
• Mail marketing contacts — kept until the importing user deletes them or their account is closed.
• Audit logs — kept for security investigation purposes; not indefinitely.

5. Your rights

You (or, for a client record entered by one of our users, that client) can ask us to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your data, subject to any legal retention obligation that overrides the request.
• Withdraw consent for anything we process on a consent basis (e.g. being on a Mail marketing list).

Backoffice users (not their clients) can self-serve the deletion request directly: My account → Delete my account permanently removes your login, profile, favorites, and imported Mail contacts on the spot, with a password check and an explicit confirmation step first. Records we're required to retain — payment/invoice history, GST filing history, and eKYC client entries you created — stay on file as described in §4, no longer linked to a working account of yours. For anything that self-service doesn't cover (including a request made on behalf of a client), email our grievance contact below. We aim to respond within a reasonable time and will tell you if a legal obligation prevents us from acting on part of a request.

6. Security

We use industry-standard practices to protect your data: encrypted connections (HTTPS) everywhere, hashed passwords, role-based access control on every module, and continuous review of the application for common security issues (SQL injection, cross-site scripting, cross-site request forgery, and others). No online system can guarantee absolute security, but we take this seriously and review it on an ongoing basis.

7. Third parties

We share data only where necessary to run the service: our payment gateway (to process a payment you initiate), our email provider (to send you account or campaign emails), and our hosting provider (to run the application). We do not sell personal data to anyone.

8. Grievance officer / contact

For any question, correction, deletion, or complaint about your data:

Vemuri Financial Services
Email: vemurifin@gmail.com
Website: https://fin.vemurigroup.in

9. Changes to this policy

If we materially change what we collect or why, we'll update this page and the "Last updated" date above.

← Back to sign in · Compliance & regulatory standing →