Privacy Policy
Property documents are personal and sensitive. This policy explains what we collect, why, who processes it on our behalf, how long we keep it, and your rights.
1. Who is responsible
FinLex Global Advisory, 353B-354A, Vipin Garden Extn, West Delhi, India 110059, is the data fiduciary (data controller) for personal data processed through finlexglobaladvisory.com and our services. Contact: advisory@finlexglobaladvisory.com.
2. What we collect
- Contact details — your name, email address, phone number and country of residence.
- Property and transaction details — location, type, project, survey numbers, builder or seller name, consideration and your answers to our risk questions.
- Documents you upload — deeds, agreements, revenue records, approvals, Powers of Attorney and similar papers. These often contain personal data of other people (sellers, heirs, witnesses); you confirm you are entitled to share them with us.
- Payment information — handled by Razorpay. We receive confirmation of payment and a transaction reference; we never receive or store full card details.
- Technical data — basic server logs (IP address, browser, pages requested) kept for security and troubleshooting.
3. Why we use it
We process personal data on the basis of your consent and to perform the service you ordered: to analyse your documents and deliver your dossier, process payment, communicate with you about your order, provide the 30-day credit, answer enquiries, keep accounting records required by law, and protect the service against fraud and misuse. We do not sell personal data and do not use your documents for marketing.
4. Automated analysis
The Diagnostic is produced automatically. Your documents are sent to our AI service provider, Anthropic, whose Claude models read them and draft the findings; our own scoring engine then calculates the FinLex Property Safety Index. The dossier is not individually reviewed by an advocate. The analysis informs your decisions but does not itself make any decision with legal effect about you. You may ask us questions about how a finding was reached.
5. Who processes it on our behalf
| Provider | Purpose | Location |
|---|---|---|
| Render | Hosting of the order system, documents and dossiers | Singapore |
| Anthropic | AI reading and analysis of uploaded documents, under commercial terms that do not permit it to use your data to train its models | United States |
| Razorpay | Payment processing | India |
| Hostinger | Sending order and dossier emails | Hostinger data centres (account region) |
| Hostinger | Hosting of this website | Hostinger data centres (account region) |
We may also disclose personal data where required by law or to protect our legal rights.
6. International transfers
Some providers process data outside India and outside your own country. We use providers that apply appropriate contractual and technical safeguards, and transfers are made in accordance with the Digital Personal Data Protection Act, 2023 and, for clients in the UK or EU, the UK GDPR and EU GDPR.
7. How long we keep it
- Uploaded documents and dossiers: 3 years from delivery, so we can answer questions and support a later title search, unless you ask us to delete them sooner.
- Order and payment records: 8 years, as required for accounting and tax purposes.
- Server logs: up to 90 days.
- De-identified findings: when a dossier is delivered we keep a separate record of its findings only — city, property type, project and builder name, RERA number, price band, score and which risk factors were found — with no name, contact details, address, unit or survey number, and no documents. We use it to improve our analysis and to publish aggregate statistics about projects and builders. It does not identify you and is kept indefinitely.
8. Security
Data is encrypted in transit (TLS), documents are stored privately and are accessible only to our systems and authorised staff, and access to our operations console is password-protected. No system is perfectly secure; if a breach affecting your data occurs we will notify you and the authorities as the law requires.
9. Your rights
Subject to applicable law, you may ask to access the personal data we hold about you, correct or update it, erase it, withdraw your consent (which will not affect processing already carried out), and nominate another person to exercise your rights in the event of death or incapacity. If you are in the UK or EU you also have rights to restrict or object to processing and to data portability, and you may complain to your data protection authority. Write to advisory@finlexglobaladvisory.com; we respond within 30 days.
10. Cookies
This website uses the cookies and local storage needed for it to work — for example, keeping your order reference while you complete payment, remembering your cookie choice, and, if you arrived through a partner’s link, remembering that partner’s code in your browser for up to 60 days so the referral can be credited (no other information is stored with it). With your consent, we also use basic visit statistics (Jetpack Stats) to understand how the site is used. Statistics are not loaded until you accept them in the cookie banner, and you can change your choice at any time using “Cookie preferences” in the footer. Web fonts are served by Google Fonts, which receives your IP address when the page loads. Full details are in our Cookie Policy.
11. Children
Our services are not intended for anyone under 18, and we do not knowingly collect their data except where it appears in documents supplied by an adult client.
12. Grievances and contact
Grievance officer: Grievance Officer, FinLex Global Advisory, 353B-354A, Vipin Garden Extn, West Delhi, India 110059 · advisory@finlexglobaladvisory.com. If you are not satisfied with our response, you may approach the Data Protection Board of India.