Privacy Policy
Last updated: January 7, 2025
Introduction
At Skara Financial ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
Information We Collect
Personal Information
We may collect the following types of personal information:
- Name and contact information (email address, phone number)
- Business information (business name, type, location)
- Financial information (loan amounts, project costs, revenue projections)
- Payment information (processed securely through third-party payment gateways)
- Account credentials (username, password - stored securely using encryption)
Automatically Collected Information
When you visit our website, we may automatically collect:
- IP address and browser type
- Device information and operating system
- Pages visited and time spent on pages
- Referring website addresses
- Cookies and similar tracking technologies
How We Use Your Information
We use the collected information for the following purposes:
- To provide, maintain, and improve our services
- To process your transactions and send related information
- To generate project reports and CMA reports as requested
- To send you technical notices, updates, and support messages
- To respond to your comments, questions, and requests
- To monitor and analyze usage patterns and trends
- To detect, prevent, and address technical issues
- To comply with legal obligations
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and conducting our business. These include:
- Payment Processors: Razorpay (India) - for processing payments securely. They handle payment information according to their privacy policy and PCI-DSS compliance standards.
- Hosting Providers: Our hosting service providers store and process your data on secure servers. We ensure they maintain appropriate security measures.
- Email Service Providers: For sending transactional and service-related emails.
- Legal Requirements: We may disclose information if required by law, court order, or in response to valid requests by public authorities, including tax authorities and law enforcement agencies in India.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.
- With Your Consent: We may share information with your explicit consent for specific purposes.
All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify. We do not allow them to use your information for their own purposes.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data in transit (HTTPS/TLS) and at rest
- Secure authentication and access controls with password hashing
- Regular security assessments and updates
- Limited access to personal information on a need-to-know basis
- Secure session management with HTTP-only and secure cookies
- CSRF protection for all forms
- Rate limiting to prevent abuse
- Regular backups and disaster recovery procedures
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
Data Breach Notification
In the unlikely event of a data breach that compromises your personal information, we will:
- Notify affected users via email within 72 hours of discovering the breach
- Report the breach to relevant authorities as required by Indian law
- Take immediate steps to contain and remediate the breach
- Provide guidance on steps you can take to protect yourself
Data Retention
We retain your personal information in accordance with the following retention periods:
- Active Accounts: We retain your data while your account is active and for 1 year after your last activity or account deletion.
- Inactive Accounts: Accounts with no activity for more than 1 year will be automatically deleted or anonymized.
- Payment Records: Financial transaction records are retained for 7 years as required by Indian law for tax and audit purposes.
- Deleted Accounts: Upon account deletion, personal information is deleted or anonymized within 30 days, except for payment records which are retained for legal compliance.
- Legal Requirements: We may retain certain information longer if required by law, court order, or regulatory authority.
After the retention period expires, your data will be permanently deleted from our systems. You can request early deletion of your data by contacting us at support@skarafinancial.com.
Your Rights
You have the following rights regarding your personal information:
- Right to Access: You can request access to your personal information. You can also export your data in JSON format through your account settings.
- Right to Correction: You can update or correct your personal information through your account settings at any time.
- Right to Deletion: You can request deletion of your personal information by deleting your account. We will delete your data within 30 days, except where retention is required by law.
- Right to Data Portability: You can request a copy of your data in a structured, machine-readable format (JSON). Use the data export feature in your profile settings.
- Right to Object: You can object to processing of your personal information for certain purposes, such as marketing communications.
- Right to Withdraw Consent: You can withdraw your consent for data processing at any time, though this may affect your ability to use certain features.
- Right to Opt-out: You can opt-out of marketing communications at any time by unsubscribing from emails or contacting us.
To exercise these rights, you can:
- Use the data export feature in your account profile settings
- Delete your account through your profile settings
- Contact us at support@skarafinancial.com for assistance
We will respond to your requests within 30 days. If you are not satisfied with our response, you have the right to file a complaint with the relevant data protection authority in India.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us provide and improve our services.
Types of Cookies We Use
- Essential Cookies: These cookies are necessary for the website to function properly. They include session cookies for authentication, CSRF protection cookies for security, and cookies that remember your login status. These cannot be disabled as they are essential for the service to work.
- Functional Cookies: These cookies remember your preferences and settings (such as language preferences) to provide a personalized experience.
- Analytics Cookies: Currently, we do not use analytics cookies. If we add analytics services in the future, we will update this policy and provide you with the option to opt-out.
Cookie Management
You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, if you disable essential cookies, you may not be able to access certain features of our service, including logging in and creating reports.
For more detailed information about our cookie usage, please visit our Cookie Policy page.
Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
- Email: support@skarafinancial.com
- Data Protection Inquiries: privacy@skarafinancial.com
- Address: Nehru Place, Delhi, India
We are committed to addressing your privacy concerns promptly and will respond to your inquiries within 30 days.