Privacy Policy

Who we are

Richlify is operated by Richlify LLP, a limited liability partnership registered in India under the Limited Liability Partnership Act 2008, LLPIN [LLPIN], with its registered office in Chennai, Tamil Nadu at [REGISTERED OFFICE ADDRESS]. Richlify LLP is the controller of personal data processed through this website.

We apply the rights and standards set out below to every user, wherever they are located. Where the law of your own country gives you anything further, that also applies.

What we collect, why, and for how long

Account details - email, sign-in identifier. Why we hold it: to create and secure your account. How long: while your account is open; deleted within 90 days of closure.

Saved plans - figures you enter and results. Why we hold it: so you can return to a plan. How long: while your account is open; deleted within 90 days of closure. A subscription ending deletes nothing.

Subscription records - plan, date, amount, invoice. Why we hold it: to operate your purchase and meet statutory record-keeping. How long: 8 years from the end of the financial year, as required of an LLP.

Usage data - pages viewed, calculators used, device, approximate location. Why we hold it: to see which tools are used and where people abandon them. How long: 14 months, then deleted or aggregated.

Support and grievance correspondence. Why we hold it: to answer you and record what was agreed. How long: 3 years from our last message.

What we deliberately do not collect

We do not ask for and do not store PAN, Aadhaar, Social Security numbers, passport or driving licence numbers, bank account numbers, or investment account credentials. No calculator on this site requires any of them. If a page ever appears to ask you for one, do not provide it and please report it to us.

We never receive or store full payment card numbers. Card details go directly to our payment provider.

Consent, and how to withdraw it

We rely on your consent for analytics and for advertising. That consent is requested through a banner that offers acceptance and refusal with equal prominence, with nothing pre-ticked and nothing bundled.

You can withdraw consent at any time at [CONSENT PREFERENCES LINK], which is as easy to use as the banner that requested it. Withdrawal does not affect processing already carried out, and does not affect the processing we must perform to run your account and subscription.

Advertising

Free-tier pages carry third-party advertising. Advertising partners may set cookies and process usage data to measure and personalise advertising. Paid subscribers are served no advertising and no advertising cookies are set for them.

[LIST every advertising and analytics partner by name, with a link to each one's own privacy policy. Naming them is required and is also the difference between a policy that reads as honest and one that reads as boilerplate.]

Children

Richlify is intended for adults and is not directed at anyone under 18. We do not knowingly process the personal data of a child.

We do not track, monitor or profile children, and we do not serve behaviourally targeted advertising to any user we know or reasonably believe to be under 18. [DESCRIBE the age declaration or age-gate mechanism actually implemented - this must be a real control, not only a sentence here.]

If you believe a child has provided us personal data, contact our Grievance Officer below and we will delete it.

Sharing

We share personal data only with: our authentication provider, our payment provider, our hosting and infrastructure providers, our analytics and advertising partners where you have consented, and professional advisers or authorities where we are legally required. We do not sell personal data.

[NAME each processor once selected, and state where each stores data.]

Where your data is held

[STATE the country in which data is stored, and disclose any cross-border transfer. DPDP permits transfers subject to government-prescribed conditions, and certain categories may be required to remain in India. This section must reflect your actual infrastructure, not an aspiration.]

Your rights

We apply a single standard to everyone. Rather than giving each user only the minimum their own country requires, we extend the full set of rights below to every Richlify user wherever they are.

Right of access - you may ask whether we hold personal data about you, obtain a copy of it, and receive information about how and why it is processed.

Right to rectification - you may ask us to correct data that is inaccurate, and to complete data that is incomplete.

Right to erasure - you may ask us to delete your personal data. Where we must retain something for a legal or accounting obligation, we will tell you what and why.

Right to restrict processing - you may ask us to pause processing while a dispute about accuracy or lawfulness is resolved.

Right to object - you may object to processing carried out on the basis of our legitimate interests, and to any processing for direct marketing, which we will stop on request.

Right to data portability - you may ask for the personal data you gave us in a structured, commonly used, machine-readable format, or ask us to send it directly to another provider where technically feasible.

Right to withdraw consent - where processing rests on your consent, you may withdraw it at any time at [CONSENT PREFERENCES LINK], as easily as you gave it. Withdrawal does not affect processing already carried out.

Right not to be subject to automated decision-making - we do not make decisions about you by automated means that produce legal or similarly significant effects.

Right to complain - you may complain to us at any time, and to your national data protection authority. Users in India may also escalate to the Data Protection Board of India.

To exercise any of these, write to [PRIVACY EMAIL]. We acknowledge within 24 hours and respond within one month at the latest, and sooner where the law requires it. We may ask for information to verify your identity before acting.

Erasure and notice

When personal data is no longer needed for the purpose it was collected for, or when you withdraw consent, we erase it. Where erasure is triggered by a retention period rather than by your request, we will notify you at least 48 hours beforehand so you can download or preserve anything you want to keep.

One limit is worth being clear about. If you ask us to delete everything but you have made a payment, we cannot delete the invoice - an LLP is required to preserve its books of account for 8 years and that obligation overrides a deletion request. In that case we delete your account, your saved plans, your usage history and your correspondence, and retain only the minimum financial record: the invoice and the payment reference. That record is locked to accounting use and is not used for anything else. We will tell you exactly what was kept and when it will be destroyed.

Security and breach notification

We use encryption in transit, access controls and reasonable technical and organisational measures appropriate to the data we hold. No system is perfectly secure and we do not claim otherwise.

If a personal data breach occurs, we will notify the Data Protection Board as required and will inform affected users within 72 hours, in plain language, describing what happened, what data was involved, what you can do, and how to reach us.

Grievance Officer

Name: [YOUR FULL NAME - a Designated Partner of the LLP. This must be a named individual resident in India; an email alias alone does not satisfy the requirement.]

Designation: Grievance Officer and Data Protection Contact

Email: [GRIEVANCE EMAIL - use a dedicated address, not general support]

Address: [REGISTERED OFFICE ADDRESS]

LLP: [LLP NAME] LLP - LLPIN [LLPIN]

We acknowledge grievances within 24 hours and aim to resolve them within 15 days. If you are not satisfied with the outcome, you may escalate to the Data Protection Board of India.

Changes

We will post any change here and update the date at the top. Where a change materially affects how we use your data, we will tell registered users by email before it takes effect rather than relying on you to re-read this page.