Privacy Policy & Data Ethics

Digital Arthalaya operates as an independent financial education and IPO information platform headquartered in Pandharpur, Maharashtra. We respect your fundamental right to privacy and ensure all digital operations strictly adhere to the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and statutory guidelines issued by Indian regulatory authorities.

This Privacy Policy sets out the institutional basis on which any personal data you voluntarily provide to us—or that is generated through your interaction with our educational portal—is processed, safeguarded, and retained.

We adhere to the statutory principle of data minimisation. We only process personal data that you choose to provide voluntarily when contacting our editorial team, submitting feedback, or seeking technical support:

• Contact Coordinates: Name, email address, phone number, or social media handles when you initiate direct communication with our editorial or support desk.
• Inquiry & Support Telemetry: Subject lines, message text, feedback submissions, and error logs you share with us regarding website functionality.
• Aggregated Technical Signals: Non-personally identifiable technical telemetry (e.g. browser type, device resolution, operating system, and general region) generated automatically during web browsing.

Every item of data processed by Digital Arthalaya serves an explicit, lawful purpose under the DPDP Act, 2023. Specifically, we utilize your voluntary submissions to:

• Respond promptly to reader questions, corrections, editorial inquiries, and platform feedback.
• Provide transparent procedural guidance regarding paperless Demat account onboarding workflows via official partner platforms.
• Audit platform security, prevent unauthorized automated scraping, mitigate DDoS threats, and ensure continuous website availability.
• Comply with statutory Indian legal and regulatory disclosures whenever mandated by competent judicial or law enforcement authorities.

To continuously optimize the reading experience, article load speeds, and layout accessibility across mobile devices, we employ institutional measurement tools including Google Analytics:

• Aggregated Interaction Data: We monitor overall traffic volume, popular IPO articles, dwell time, and device categories. This data is strictly aggregated and anonymized.
• Functional Cookies: Cookies are tiny text files placed on your browser to remember UI preferences (such as dark/light themes and screen sizes) and facilitate fast page caching.
• User Choice & Opt-Out: You retain complete autonomy to accept, block, or delete cookies via your browser settings at any time without restricting your access to our educational content.

We do not use tracking pixels or invasive behavioral spyware. We do not build commercial advertising profiles on our readership.

Digital Arthalaya operates as a registered Referral Agent with Upstox (RKSV Securities India Pvt. Ltd.), a SEBI-registered stockbroker (SEBI Registration No. INZ000315837).

When you click our official referral links (e.g. https://upstox.com/open-account/?f=OEXD) to open a paperless Demat and trading account:

• External Platform Redirection: You navigate directly to Upstox's 256-bit encrypted, SEBI-compliant onboarding server. All subsequent KYC steps (PAN entry, Aadhaar e-Sign, bank verification) occur strictly on Upstox infrastructure.
• Zero Demat Credential Handling: Digital Arthalaya never receives, views, or stores your Demat passwords, trading transactions, bank account numbers, or investment portfolio balances.
• Broker Privacy Governance: All onboarding data is governed exclusively by Upstox's independent, SEBI-supervised privacy policy and security protocols.

We maintain personal data only for the precise duration necessary to satisfy the stated operational purpose or legal requirements:

• Support Correspondence: Reader inquiries and feedback emails are retained for a maximum of 12 months following full resolution, after which they are permanently and securely purged.
• Aggregated Analytics: Web metrics stored in Google Analytics follow standard retention windows and are automatically deleted upon expiration.
• Technical Safeguards: Our servers enforce TLS 1.3 encryption in transit, strict HTTP headers (HSTS), hardened DNS configurations, and least-privilege administrative access controls.

As a Data Principal under Indian law, you possess enforceable statutory rights regarding any personal data we process. You are entitled to exercise the following rights without charge:

• Right to Access: You may request a summary of personal data held about you and confirmation of whether your data has been processed.
• Right to Correction & Erasure: You have the right to demand correction of inaccurate personal records or total erasure of your historical inquiry records.
• Right to Grievance Redressal: You may lodge a formal grievance regarding data processing directly with our designated Grievance Officer.
• Right to Nominate: You may designate an individual who, in the event of your death or incapacity, may exercise these rights on your behalf.

To submit any statutory DPDP request, please email our grievance desk at support@digitalarthalaya.in. All verifiable requests are resolved within a statutory window of 30 days.

Pursuant to the provisions of the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, Digital Arthalaya has designated a dedicated Grievance Officer:

Should your grievance remain unaddressed beyond 30 days, you reserve the right under Indian law to escalate your complaint to the Data Protection Board of India.