Privacy
Privacy Policy
This page explains what we collect, why we collect it, who we share it with, and the choices you have. ShunyaTax Dealflow is operated by ShunyaTax Global, India.
What we collect
- Account data. Your name, email, role (seeker or investor), and password (stored hashed, never in plain text).
- Listing and interest content. What you post (requirements, descriptions, amounts) and any interest you express on another party's listing.
- Accreditation & KYC. Documents and information required to verify that an investor is accredited under applicable Indian regulations, collected only when you ask to engage with deals.
- Operational logs. IP address, user agent, and request timestamps — kept for security, rate-limiting, and audit.
Why we collect it
- To run the brokered marketplace — match listings to investors and hand off introductions.
- To meet our legal and regulatory obligations (KYC, anti-money- laundering, tax reporting on closed transactions).
- To secure the platform — detecting abuse, brute-force login attempts, and fraudulent listings.
- To improve the product — anonymised analytics on how people browse, search, and convert.
Who sees what
- Seeker identity is hidden from investors on listings until ShunyaTax brokers the introduction. Investors see a brokered placeholder, not seeker names, emails, or phone numbers.
- Investor identity is hidden from seekers until an introduction is formally made. Interests appear as brokered engagements on the seeker's dashboard until that point.
- ShunyaTax staff see enough to broker the introduction and support closing — subject to internal access controls and audit.
Third parties
We use service providers for hosting, email delivery, KYC verification, and payment processing. Each receives only the data needed to perform its function and is bound by contract to use it only for us. We do not sell or rent personal data.
How long we keep it
Account data is retained while your account is active. Closed-deal records are retained as required by tax and KYC rules. You can request deletion of data we are not legally required to keep — see "Your rights" below.
Security
We use TLS in transit, salted password hashes, short-lived access tokens, and server-side session controls. No system is perfectly secure; we will notify affected users of material incidents in line with applicable law.
Your rights
You can ask us to correct inaccurate data, delete data we no longer need, or export a copy. Contact privacy@shunyatax.com — we'll respond within 30 days.
Changes
We'll notify registered users of material changes to this policy. The date at the bottom reflects when it was last updated.
Version 2026-04 · Effective April 2026. For legal enquiries, reach us at legal@shunyatax.com.