Privacy Policy

Velixa Capital ("the Company", "we", "us") is a loan, tax, accounting and property consulting business operating from India. We respect your privacy and are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and any other applicable laws of India. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we retain it, and the rights you have over it.

We collect personal data that you voluntarily provide when you engage us — including your name, mobile number, email address, PAN, city, employment type, monthly income, loan amount required, business details, and any documents you share (bank statements, ITR, GST returns, KYC proofs). We also collect non-personal usage data automatically when you visit our website — IP address, browser type, device type, pages visited and time spent — through cookies and similar technologies (see Section 7).

We use your personal data solely for legitimate business purposes: to respond to your enquiry, diagnose your loan or finance eligibility, match you with a suitable lender or service partner, prepare and submit applications, coordinate with credit managers, deliver tax/accounting/property advisory services, comply with regulatory obligations, and communicate with you about your engagement. We do not use your data for any unrelated commercial purpose without your explicit consent.

We share your personal data only with parties necessary to deliver the service you requested — partner banks, NBFCs, credit bureaus (only when you authorise a CIBIL pull), independent qualified professionals (CAs, advocates, tax practitioners), and software vendors whose products we facilitate. We never sell, rent or trade your personal data. Sharing is governed by written agreements requiring the recipient to protect your data to standards at least equivalent to ours.

Your personal data is stored on secure cloud infrastructure with strict access controls. Personally identifiable information (PII) such as your name, mobile, email and PAN is AES-256-GCM encrypted at the application layer before being written to the database. Access is restricted to authorised personnel on a need-to-know basis, logged, and reviewed periodically. Despite our best efforts, no system can be guaranteed 100% secure — we will notify you and the relevant authorities of any material data breach in accordance with the DPDP Act.

Under the DPDP Act, you have the right to: (a) access and obtain a copy of your personal data we hold; (b) request correction or completion of inaccurate or incomplete data; (c) request erasure of your personal data, except where retention is required by law or for legitimate business purposes; (d) nominate another individual to exercise your rights in the event of death or incapacity; and (e) grievance redressal. To exercise any of these rights, email the Grievance Officer (see Section 11) — we will respond within the timelines prescribed under the DPDP Act.

We use cookies and similar technologies to operate the website, remember your preferences, analyse traffic, and improve our services. We use three categories: essential (required for the site to function), analytics (to understand usage), and functional (to remember preferences). You can manage your cookie preferences through your browser settings or our cookie banner. See our separate Cookie Policy for full details.

Our website may contain links to third-party websites — partner banks, government portals, software vendors, affiliate products. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit. Clicking external links is at your own discretion.

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from children under 18. If you believe a minor has provided us with personal data, please contact our Grievance Officer — we will promptly delete such data upon verification.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or for other operational reasons. The "Last updated" date at the top of this page indicates when the policy was last revised. Material changes will be notified through our website or by email (where we have your email address). Continued use of our services after a change constitutes acceptance of the updated policy.

Under the DPDP Act, 2023, Velixa Capital has appointed a Grievance Officer to address any concerns or complaints regarding your personal data. You may contact the Grievance Officer using the details below. We acknowledge receipt of every complaint within 48 hours and resolve genuine grievances within the timeframes prescribed under the DPDP Act.