Last updated: April 2026 | Effective: April 2026
Invedge Assets Private Limited ("Rabbit Invest", "we", "us") is an AMFI-Registered Mutual Fund Distributor (ARN-300766) and the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This Privacy Policy explains how we collect, use, protect, and process your personal data when you access or use the Rabbit Invest platform — including rabbitinvest.world, dashboard.rabbitinvest.com, and partners.rabbitinvest.com.
This policy applies to investors, registered Mutual Fund Distributors (MFDs), and any person who accesses our platform or services. It applies to processing of personal data within and outside India where connected to services offered to users in India under Section 3 of the DPDP Act, 2023.
Identity & KYC data: Name, PAN, Aadhaar (masked), date of birth, photograph, signature.
Contact data: Email address, mobile number, residential address.
Financial data: Bank account details, investment history, portfolio holdings, SIP mandates, transaction records.
Usage data: Log data, device information, IP addresses, pages visited, features used.
Distributor data: ARN, EUIN, brokerage details, client mapping records.
Regulatory compliance: SEBI, AMFI, PMLA, and KYC norms require us to collect and verify identity and financial information before facilitating any mutual fund transactions.
Service delivery: To operate the distributor portal, client dashboard, and mobile applications — including portfolio tracking, transaction execution, commission reporting, and client communications.
Fraud prevention & security: To detect, prevent, and respond to fraud, misuse, and security incidents.
Communication: To send transaction confirmations, regulatory notices, platform updates, and support communications.
We process personal data on the following bases: (a) your free, informed, specific, and unambiguous consent; (b) performance of a contract to which you are a party; (c) compliance with a legal obligation applicable to us under Indian law; and (d) legitimate interests pursued by us, provided your fundamental rights are not overridden.
We do not sell your personal data. We share data only with: (a) SEBI-registered RTAs and AMCs for transaction processing; (b) BSE/NSE platforms for order execution; (c) KYC Registration Agencies (KRAs) for identity verification; (d) cloud infrastructure providers operating under data processing agreements; and (e) regulatory or law enforcement authorities where required by applicable law.
Registered MFD partners who access client data through the Rabbit Invest platform are bound by a Data Processing Agreement and are independently responsible for their data obligations as Data Fiduciaries under applicable law.
Under the DPDP Act, 2023, you have the right to: access a summary of your personal data we process; correct inaccurate or incomplete data; withdraw consent at any time (without affecting prior lawful processing); request erasure of data no longer necessary for the original purpose; and nominate a representative to exercise rights on your behalf.
To exercise any right, email helpdesk@rabbitinvest.com with subject line "Data Rights Request". We will respond within 72 hours.
We retain personal data for as long as required to deliver our services and comply with applicable law. KYC and transaction records are retained for a minimum of 5 years after the end of the client relationship in accordance with PMLA requirements. Usage data is retained for 12 months.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration — including encryption in transit and at rest, access controls, and regular security reviews. In the event of a personal data breach, we will notify the Data Protection Board within 72 hours of becoming aware of it.
Our services are not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our platform, contact us immediately at helpdesk@rabbitinvest.com.
We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be notified to registered users at least 7 days before they take effect. Continued use of the platform after notice constitutes acceptance.
Data Fiduciary: Invedge Assets Private Limited
Address: 68/2 Janpath, New Delhi – 110001
Email: helpdesk@rabbitinvest.com
Grievance Officer: Saksham Malik, Director
For complaints not resolved by us, you may approach the Data Protection Board of India once it is constituted, or SEBI SCORES for investment-related grievances at scores.sebi.gov.in.