Meet Richie, Your Finance Buddy

Privacy Policy

Richie AI Financial Planner ("Richie", "we", "us", or "our") is a product of FREP FINTECH SOLUTIONS PVT LTD, committed to maintaining the highest standards of privacy and data protection. This Privacy Policy outlines the manner in which we collect, process, use, disclose, and safeguard your personal and financial data when you access, browse, register, or engage with any of our services, either via mobile applications, websites, or third-party integrations.

By accessing or using Richie, you consent to the practices described herein.

1. Scope and Applicability

This Privacy Policy applies to all individuals who access or use our services, including registered users, subscribers, and visitors, and covers data collected via mobile applications, websites, customer support, and any affiliated channels operated by Richie or its authorized partners.

2. Categories of Data We Collect

We collect various types of information to provide personalized financial services and ensure regulatory compliance. This includes, but is not limited to:

a. Personally Identifiable Information (PII)

  • Full name, gender, date of birth, contact number, and email address

  • Government-issued identification (e.g., PAN, Aadhaar) for regulatory compliance and KYC verification

  • Residential address, marital status, occupation, and details of dependents

b. Financial and Investment Data

  • Income and expense details, bank account balances, and bank statements

  • Investment portfolios including mutual funds, equities, bonds, fixed deposits (FDs), Public Provident Fund (PPF), etc.

  • Loan obligations, EMI schedules, and credit score information

  • Insurance policy details (life, health, general insurance)

  • Defined financial goals such as retirement planning, education funding, and real estate investments

c. Usage Data and Technical Metadata

  • Device and browser metadata, IP address, device identifiers, and operating system version

  • Session activities, in-app interactions, clickstream data, and feature usage analytics

  • Time stamps, geolocation data (if permission is granted), and application error logs

d. Behavioral Insights (Auto-Derived)

  • Analysis of spending patterns, saving habits, and investment behaviors

  • AI-generated financial personas and risk tolerance profiles

3. Legal Basis for Data Collection

Data collection and processing are justified on one or more of the following legal bases:

  • Fulfillment of contractual obligations to the user

  • Legitimate interest in improving our services

  • Compliance with legal obligations NBFC

  • Consent voluntarily provided by the user (with opt-out rights)

  • Protection of user and company rights in case of fraudulent use

4. Purpose of Data Processing

Your data is used strictly for:

  • Generating personalized financial plans, investment advice, and risk management strategies using AI and ML algorithms

  • Tracking goal progress and issuing real-time alerts (overspending, market events, rebalancing recommendations)

  • Executing investment instructions through licensed intermediaries, where applicable

  • Identity verification, fraud detection, compliance checks, audit logs

  • Performing analytics, A/B testing, product development, and feature enhancement

  • Marketing and communication (with clear opt-out mechanisms)

  • Fulfilling legal requests from enforcement and regulatory bodies

5. Data Sharing and Disclosure

We adhere to the principle of minimal disclosure. Data may be shared only under the following circumstances:

a. Regulatory and Legal Disclosures:

  • Disclosures mandated by courts, regulators, or law enforcement

  • Compliance with SEBI, RBI, Income Tax Act, AML/KYC laws

b. Authorized Third-Party Service Providers:

  • Cloud infrastructure (e.g., AWS, GCP)

  • KYC and identity verification agencies

  • Payment processors, custodian banks, or brokerage firms

  • Data analytics and behavioral insight tools (bound by NDAs)

c. Corporate Transactions:

  • Mergers, acquisitions, or restructuring may involve data transfer

  • In such cases, data remains protected under binding commitments

We do not sell your personal data under any circumstances.

6. Data Localization and International Transfers

All personal and financial data is stored within India-based servers, in compliance with
RBI’s data localization norms. In exceptional cases of international integrations, safeguards
such as Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) are
employed.

7. Data Retention Policy

We retain your data only for:

  • The duration of your relationship with Richie

  • Legal, regulatory, and audit requirements

  • Resolution of disputes, fraud prevention, and contractual enforcement

Inactive or terminated accounts are securely archived or deleted in accordance with applicable data retention laws.

8. Data Security and Controls

We maintain a high standard of data protection through:

  • End-to-end encryption (AES-256/SHA-512 protocols)

  • Role-based access control (RBAC) and two-factor authentication

  • Regular vulnerability assessments, penetration tests, and audits

  • 24×7 monitoring of infrastructure for threat detection

Despite these efforts, no digital transmission is 100% secure. Users are urged to maintain confidentiality of login credentials and report any suspicious activity.

9. User Rights and Control Over Data

You have the right to:

  • Access the data we hold about you

  • Rectify inaccurate or incomplete data

  • Erase your data (“Right to be Forgotten”) where legally permissible

  • Restrict or object to certain processing activities

  • Withdraw consent at any time for non-essential communications

  • Data Portability: Request transfer of your data to another service provider

Requests can be submitted via [Insert Data Rights Request Form URL or Email].

10. Use of Cookies and Similar Technologies

Richie uses cookies, web beacons, and similar technologies for:

  • Session management and fraud prevention

  • User experience customization

  • Analytics and advertising

You may control cookie preferences in your browser or app settings. Note: Disabling certain cookies may affect functionality.

11. Children’s Data

Richie does not knowingly collect data from individuals under 18. Any such data inadvertently collected will be deleted upon detection. Users acting on behalf of minors must ensure they possess legal authority to do so.

12. Third-Party Websites & Integrations

Our platform may contain links to external sites. Richie does not control, endorse, or guarantee the privacy practices of such third parties. Users are advised to review those sites’ privacy policies independently.

13. AI & Algorithmic Disclaimer

Richie uses Large Language Models (LLMs) and machine learning algorithms to offer financial insights. These tools are:

  • Educational and informational in nature

  • Not a substitute for certified financial advice

  • Subject to limitations and biases inherent in AI technologies

Users must exercise their own judgment and are encouraged to consult qualified professionals before making financial decisions.

14. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Updates will be notified through:

  • Email notifications (where provided)

  • Prominent in-app banners

  • Updated version on our official website

Your continued use of Richie post any updates implies acceptance of the revised terms.

15. Contact Information

For any queries, complaints, data access requests, or clarifications, please reach out to:

hey@richie-ai.com

+91 81085 77091