Privacy Policy
Crystal Vision Insights Private Limited (hereinafter referred to as ‘we’, ‘us’, ‘our’, or ‘the Company’), operating under the brand name ‘Crystal Vision Insights’, is an AMFI-Registered Mutual Fund Distributor (ARN: 97272). We are committed to protecting the privacy and personal data of all individuals who visit our website, use our mobile application, or engage with our services. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you interact with us through any medium — website, WhatsApp, email, phone, or in person. This policy is published in compliance with: Digital Personal Data Protection Act, 2023 (DPDPA 2023); Information Technology Act, 2000 and IT (Reasonable Security. Practices) Rules, 2011 SEBI Master Circular for Mutual Funds; AMFI Master Circular for MFDs and Code of Conduct — Data Sharing. Principles By accessing our website, signing up for our services, or providing us your personal information, you acknowledge that you have read, understood, and agree to this Privacy Policy.
Under the DPDPA 2023, we act as the Data Fiduciary — the entity responsible for determining the purpose and means of processing your personal data.
Data Fiduciary: Crystal Vision Insights Private Limited
Grievance Officer: Ms. Sarita (Director)
Email for Privacy Queries: cviplcustomercare@gmail.com
Phone: +91-7774032493
Address: Flat No 15, Nupoor Apartment, Sadashiv Peth, Pune, Maharashtra 411030
We collect the following categories of personal data depending on how you interact with us:
3.1 Identity Data
Full name (as per PAN card); PAN (Permanent Account Number); Aadhaar number (masked/last 4 digits for KYC verification); Date of birth, gender, nationality, and residential status; Photograph and signature (for KYC).
3.2 Contact Data
Residential and correspondence address; Email address, mobile number, WhatsApp number; Landline number (if provided).
3.3 Financial Data
Bank account details (account number, IFSC, bank name, branch); Income details, occupation, and employer information; Investment objectives, risk profile, and existing portfolio details; Tax filing status and tax residency.
3.4 Transaction Data
Mutual fund folio numbers and scheme details; Transaction history — purchase, SIP, redemption, switch, STP, SWP; SIP registration and bank mandate details.
3.5 Technical Data (Website & App)
IP address, device identifier, browser type, and operating system; Device model, screen resolution, and app version; Pages visited, time spent, click patterns, and navigation path; Cookies and similar tracking technologies; Push notification token (mobile app); App crash reports and performance logs; Approximate location derived from IP address (NOT precise GPS. location)
3.6 Communication Data
Email and WhatsApp correspondence; Phone call records (date, time, duration — not recordings unless. separately disclosed) Meeting notes, feedback, and survey responses; Complaint and grievance records.
3.7 KYC & Regulatory Data
CKYC / KRA verification status; FATCA / CRS declarations; Nomination details and PEP status declaration.
3.8 Data Collected by Website — Specific Declarations
If you use the Crystal Vision Insights website, we additionally collect: Device ID and unique app instance identifier; Push notification preferences and tokens; Camera access — ONLY for KYC photo/document upload, with your. explicit permission Storage access — ONLY for downloading statements/reports as PDF, with your explicit permission We explicitly declare that the following data is NOT collected by our mobile app: Phone Contacts — NOT accessed; SMS messages — NOT read or accessed; Call logs — NOT accessed; Microphone — NOT accessed; Precise GPS location — NOT collected.
We collect and process your personal data strictly for the following lawful purposes: 1. Mutual Fund Distribution — Processing transactions (purchase, SIP, redemption, switch, STP, SWP) via NSE Invest MF platform on your behalf. 2. KYC/CKYC Compliance — Verifying your identity as mandated by SEBI, AMFI, and KYC Registration Agencies before processing any transaction. 3. Risk Profiling — Assessing your risk tolerance, capacity, and required risk using the Risk Profiler to determine suitable mutual fund categories for you. 4. Suitability Assessment — Matching recommended schemes to your assessed risk profile as per SEBI Master Circular requirements. 5. Portfolio Servicing — Generating portfolio reports, account statements, performance reviews, and rebalancing recommendations. 6. Communication — Sending transaction confirmations, SIP reminders, market updates, scheme information, NAV alerts, and regulatory notices via email, WhatsApp, SMS, or push notifications. 7. Grievance Redressal — Processing and resolving investor complaints within prescribed timelines. 8. Regulatory Reporting — Filing returns and reports as required by SEBI, AMFI, income tax authorities, and other regulatory bodies. 9. Audit & Compliance — Maintaining records for AMFI DDQ audit, internal self-audit, and regulatory inspections. 10. Service Improvement — Analyzing website and app usage patterns to improve user experience, fix technical issues, and enhance functionality. 11. Legal Obligations — Complying with court orders, legal processes, and regulatory directions. We do NOT collect or process personal data for any purpose beyond what is stated above. We do NOT sell, rent, trade, or share your data with any third party for advertising, marketing, or commercial purposes.
Your personal data is shared only with the following authorized entities for the specific purposes mentioned. All data processors are bound by contractual obligations to protect your data: NSE Invest MF — Mutual fund transaction processing platform; CAMS (Registrar & Transfer Agent) — Folio management, Consolidated. Account Statements KFintech (Registrar & Transfer Agent) — Folio management, Consolidated Account Statements MF BOX — KYC verification and processing; Asset Management Companies (AMCs) — Investment processing, servicing, commission Invest well CRM — Client relationship management system; Invest well Back-office analytics, portfolio reporting Enjan Market — Scheme research and analytics (no personal investor. data shared) Anchor Edge / Masterstroke — Marketing material creation (no. personal investor data shared) KYC Registration Agencies (KRAs) — CKYC compliance and. verification SEBI / AMFI / Tax Authorities — Regulatory reporting and audit as. required by law Google Play Store / Apple App Store — App distribution, crash. reporting, anonymized analytics. We do NOT share your personal data with any entity other than those listed above for the stated purposes.
Our website and mobile app use cookies and similar technologies to enhance your experience: Essential Cookies — Required for the website/app to function. (session management, authentication, security). These cannot be disabled. Analytics Cookies — Help us understand how visitors use our. website/app (pages visited, time spent, bounce rate). Powered by Google Analytics or similar tools. Retained for up to 12 months. Functional Cookies — Remember your preferences such as language, display settings, and login status. Retained for up to 6 months. Push Notification Tokens (Website Only) — Used to send. transaction alerts, SIP reminders, and market updates. Can be disabled in app settings or device settings. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality. Our mobile app does not use advertising or third-party tracking cookies.
We retain your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law: Active Client Data — Throughout the period of engagement plus 8. years after last transaction, as per SEBI/AMFI requirements. KYC Records — As mandated by KYC Registration Agency regulations. and PMLA requirements. Transaction Records — Minimum 8 years from date of transaction.; Complaint Records — Minimum 8 years from date of. resolution/closure. Communication Records — 8 years for client communications. 10. years for regulatory communications. Website/App Analytics — Anonymized analytics retained for 24. months. Personal identifiers purged after 12 months. App Crash Logs — 6 months from date of incident.; Inactive Client Data — If no transaction for 3 consecutive years, data is archived with restricted access. Retained for the regulatory period, then securely deleted. Upon expiry of the retention period, or upon a valid erasure request (subject to regulatory retention obligations), data is securely deleted or anonymized.
Under the Digital Personal Data Protection Act, 2023, you have the following rights: 1. Right to Access — Request a summary of your personal data held by us and details of processing activities performed on your data. 2. Right to Correction — Request correction of any inaccurate, incomplete, or misleading personal data. 3. Right to Erasure — Request deletion of your personal data. Note: SEBI and AMFI require us to retain certain data for prescribed periods even after your request. We will inform you of any data that cannot be erased due to regulatory obligations. 4. Right to Nomination — Nominate any individual to exercise your data protection rights on your behalf in the event of your death or incapacity. 5. Right to Grievance Redressal — Lodge a privacy-related complaint with our Grievance Officer (details in Section 2). We will acknowledge within 48 hours and resolve within 30 days. 6. Right to Approach Data Protection Board — If not satisfied with our response, you may file a complaint with the Data Protection Board of India as established under DPDPA 2023. 7. Right to Withdraw Consent — Withdraw your consent for data processing at any time by writing to cviplcustomercare@gmail.com. Withdrawal of consent may impact our ability to provide distribution services and may require closure of your account. Consequences will be communicated before processing.
We implement the following technical and organizational measures to protect your personal data: Access Controls — Role-based access to client data. Only. authorized personnel (Directors and designated staff) can access investor records. Access logs are maintained. Encryption — Sensitive data (PAN, Aadhaar, bank details) stored. with encryption at rest. All data transmitted via HTTPS/SSL encrypted connections. Password Protection — All platform credentials (NSE Invest MF, Invest well CRM, Redvision, MF BOX) are password-protected with mandatory periodic rotation. Physical Security — Paper records stored in locked cabinets with. restricted key access. Office premises are secured. Device Security — Work devices are password-protected and. encrypted. Remote wipe capability for mobile devices. Data Backup — Regular encrypted backups with secure off-site/cloud. storage. Incident Response — Any suspected data breach will be reported to. affected Data Principals and the Data Protection Board of India within 72 hours of discovery, as required under DPDPA 2023. Vendor Security — All data processors (listed in Section 5) are. contractually bound to maintain equivalent security standards. Periodic Review — Security practices reviewed semi-annually. Vulnerabilities assessed and addressed promptly.
We do not knowingly collect personal data from children below the age of 18 years without verifiable parental consent. Mutual fund investments in the name of a minor are processed through the parent/legal guardian’s account as per SEBI regulations. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us at cviplcustomercare@gmail.com, and we will take steps to delete such data. The Crystal Vision Insights website is intended for users aged 18 years and above. We do not target, collect data from, or market to children.
Our website and app may contain links to third-party websites including AMC websites, SEBI, AMFI, CAMS, KFintech, MF Central, and other financial service portals. We are not responsible for the privacy practices of these third-party websites. We encourage you to read their respective privacy policies before providing any personal information. Third-party services embedded in our app (e.g., Google Analytics, Firebase, push notification services) may collect technical data as described in Section 3.5. We ensure that such services comply with applicable privacy regulations.
We obtain your consent for data processing through the following mechanisms: At Client Onboarding — Explicit consent obtained via signed Client. Data Gathering Form and/or electronic consent on NSE Invest MF platform. On Website — By using our website, you consent to the use of. essential cookies. Analytics cookies require your explicit acceptance via cookie consent banner. On Website — App permissions (camera, storage) are requested. individually at the time of use with clear explanation of purpose. You can revoke permissions at any time through your device settings. For Communications — Consent for marketing communications. (WhatsApp broadcasts, email newsletters) is obtained at onboarding. You may unsubscribe at any time by replying ‘STOP’ or clicking ‘Unsubscribe’. You may withdraw consent at any time by writing to cviplcustomercare@gmail.com. We will process the withdrawal within 7 working days. Consequences of withdrawal will be communicated before processing.
Your personal data is primarily stored and processed within India. In some cases, data may be processed by cloud service providers or analytics platforms whose servers may be located outside India. In such cases, we ensure that: The data transfer complies with DPDPA 2023 requirements for. cross-border data transfer. The receiving jurisdiction is not on the restricted list notified by. the Central Government under DPDPA 2023 Section 16(1). Adequate contractual safeguards are in place to protect your data. [[Note: Update this section once the Central Government notifies the restricted jurisdiction list under DPDPA 2023 Section 16(1).]]{.mark}
We reserve the right to update this Privacy Policy at any time. Changes will be communicated through: Prominent notice on our website (crystalvisioninsights.in); In-app notification on the Crystal Vision Insights mobile app; Email notification to registered users for material changes. The updated policy will include the revised ‘Last Updated’ date at the top. Continued use of our services after changes constitutes acceptance of the updated policy.
For any privacy-related concerns, data access requests, correction requests, erasure requests, or complaints, please contact:
[Grievance Officer: Ms. Sarita, Director
Email: cviplcustomercare@gmail.com
Phone: +91-7774032493
Address: Flat No 15, Nupoor Apartment, Sadashiv Peth, Pune, Maharashtra 411030 Response: Acknowledgement within 48 hours. Resolution within 30 days. If not satisfied with our response, you may approach the Data Protection Board of India under DPDPA 2023.
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, SEBI regulations, and AMFI guidelines. Any dispute arising out of this policy shall be subject to the exclusive jurisdiction of the courts in Pune, Maharashtra, India.
By using our website, or engaging with our services, you acknowledge that: 1. You have read and understood this Privacy Policy in its entirety. 2. You consent to the collection, processing, storage, and sharing of your personal data as described herein. 3. You understand your rights under DPDPA 2023 as described in Section 8. 4. You may withdraw consent at any time, subject to the consequences communicated to you. *Mutual Fund investments are subject to market risks, read all scheme related documents carefully. *
AMFI-Registered Mutual Fund Distributor | ARN: 97272 SIF Distributor (ARN-97272) — [10 Feb 2026 to 09 Feb 2029}
