Privacy policy.
- Yogeshwar VashishthaSEBI RA · INH000027168
This is a small practice with a small appetite for data. This page lists what is collected, why, where it lives and who else touches it — as the system actually works today.
- Your account details, what you enter in the planner, your consent records, your learning progress and your email preferences.
- No payment card or bank details: payments are handled by the payment provider, and this site never sees or stores them.
- Essential only: the session cookies that keep you signed in.
- A database hosted in Mumbai, India.
- Sold, rented or traded. Shared only with the service providers listed below, or where the law requires.
- Access, correction, erasure, grievance redressal and nomination — write to the contact email.
Who is responsible for your data
Yogeshwar Vashishtha, an individual and a SEBI Registered Research Analyst (Reg. No. INH000027168), decides why and how personal data is processed on this site. In the language of India’s Digital Personal Data Protection Act, 2023, he is the data fiduciary and you are the data principal. There is no company behind the site, and privacy questions go to him directly at contact@yogeshwarvashishtha.in.
What is collected
Only what the services need. Specifically:
| Data | When | What it contains |
|---|---|---|
| Account details | When you create an account | Your name, email address and phone number; the service you were interested in, if you chose one; and your password, which is stored only in hashed form by the authentication provider and is never readable by him. |
| Planner submissions | When you use the Financial Freedom Planner | Your name, age, email address and phone number, and the financial figures you enter — such as income, expenses, savings and expected growth. |
| Consent records | At signup and at enrollment | That you accepted the Terms of Service and, for research services, the MITC — each with the date and time of acceptance. |
| Membership and enrollment | When you enroll | Which service you hold, its period and its status. No card or bank details are collected or stored by this site. |
| Learning progress | As you use the member portal | Which recordings you have started or completed, so you can pick up where you left off. |
| Email preferences | At signup, and whenever you change them | Whether you have opted in to promotional email, and any unsubscribe. |
| Correspondence | When you write, call or message | Whatever you choose to send him by email, phone or WhatsApp, in those services' own systems. |
| Technical logs | Whenever a page is requested | The hosting provider's standard server logs — IP address, browser type, the page requested and the time — used to keep the site running and secure. |
If you subscribe to a research service, SEBI requires him to complete know-your-client (KYC) verification. Any KYC information is collected from you directly — not through this website — and kept as a regulatory record.
Why it is used
- To provide the service you asked for — creating your account, confirming your enrollment, activating your access, showing you the right sessions, recordings and research, and remembering your progress.
- To contact you about your enrollment. When you create an account or submit the planner, he may call, message or email you about the service you showed interest in. That is what the phone number is for.
- To work out and show you your planner result. The figures you enter drive that calculation and are saved with your submission.
- To meet regulatory obligations — as a SEBI Registered Research Analyst he must keep records of research reports, of who the research clients are and of the consents they gave.
- To send service messages — sign-in links, password resets, schedule changes and notices about your membership or subscription.
- To send promotional email — only if you opted in. See section 06.
- To keep the site secure and to investigate misuse, such as shared logins or redistributed research.
The basis for all of this is your consent, given when you submit a form or create an account, together with the uses the law permits without consent — such as complying with a legal or regulatory obligation. Your data is not used for automated decisions about you, and it is not used to build advertising profiles.
Cookies and tracking
No advertising trackers. No third-party analytics. Essential cookies only.
The only cookies this site sets are the ones that keep you signed in — your authentication session. They are essential, which is why there is no cookie banner asking you to choose.
There are no advertising pixels, no social-media trackers and no third-party analytics scripts on this site at present, and the fonts are served from the site itself. If analytics is ever added, this page will say so first and the last-updated date will change.
Two things are outside the site’s control. Live sessions run on Zoom, and recorded videos are embedded from an unlisted video host; when you join a session or play a video, that provider may set its own cookies and collect data under its own privacy policy.
Who processes it on his behalf
Your data is not sold, rented or traded. It is shared only with the service providers that run the site, each for its own narrow job:
| Provider | Role | What it handles |
|---|---|---|
| Supabase | Database & authentication | Accounts, planner submissions, consents, memberships and progress. The project is hosted in Mumbai, India. |
| Vercel | Website hosting | Serves the pages and keeps standard server logs of requests. |
| Brevo | Email delivery — once enabled | Your name and email address, to deliver service and promotional email. Not yet switched on; this entry is here so the page is accurate the day it is. |
| Zoom | Live sessions | The name you join with, and whatever you say or type in a session. Sessions may be recorded for the members' library. |
| YouTube / Vimeo | Video hosting | Recordings are hosted as unlisted videos. The host sees your device and playback data when you press play. |
Some of these providers process data on servers outside India. Beyond them, personal data is disclosed only where the law requires it — for example to SEBI, or under an order of a court or other authority.
Email you receive
Service email — sign-in, password resets and notices about a service you hold — comes with having an account.
Promotional email is sent only if you opted in, and every promotional email carries a one-click unsubscribe link. You can also opt out at any time at /unsubscribe, without signing in, or from your account settings in the member portal. Unsubscribing from promotional email does not affect service email. Research is never sent by promotional email; it is published in the members’ research library.
How long it is kept
- Regulatory records — research reports and their rationale, records of research clients, and consent records (Terms and MITC acceptances with their timestamps) — are kept for at least five years, as SEBI requires. An erasure request cannot shorten this.
- Account details and learning progress are kept for as long as your account exists. When you ask for your account to be closed, they are deleted or anonymised, except for anything in the first category.
- Planner submissions are kept until you ask for them to be deleted or they are no longer needed for following up with you, whichever is sooner.
- Email preferences — including the fact that you unsubscribed — are kept so that your choice continues to be honoured.
Security
Data travels over encrypted connections. The database enforces row-level security, so a signed-in member can read only their own records, and roles such as administrator cannot be claimed from a signup form — they are assigned only from the administrator console, which is limited to him and anyone he has expressly authorised. Passwords are stored hashed by the authentication provider.
No system is perfectly secure. If a personal data breach affecting you occurs, you and the Data Protection Board of India will be informed as the law requires.
Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access — ask for a summary of the personal data held about you, what is being done with it, and which processors it has been shared with.
- Correction — have inaccurate or incomplete data corrected, completed or updated. Most of it you can change yourself in your account.
- Erasure — have your data deleted once it is no longer needed for the purpose you gave it for, unless the law requires it to be kept (see section 07).
- Withdraw consent — at any time, as easily as you gave it. Withdrawal does not undo what was done before it, and may mean a service can no longer be provided.
- Grievance redressal — raise a privacy complaint with him and receive a response; if it is not resolved, you may complain to the Data Protection Board of India.
- Nominate — name another person to exercise these rights for you in the event of your death or incapacity.
To use any of these rights, write to contact@yogeshwarvashishtha.in from the email address on your account. He may ask for a detail or two to confirm that the request is really from you, and will respond within a reasonable time and within any period the law prescribes.
Children
This site and its services are not directed at anyone under 18, and an account can be created only by an adult.
One exception needs stating plainly: the Financial Freedom Planner accepts ages from 14, purely so that a younger person can see an illustration of how saving and compounding work. It is an illustration only, not advice and not an invitation to invest. If you are under 18, please use the planner with a parent or guardian, and have them enter their own contact details rather than yours. If you believe a child’s details have been submitted without a parent’s consent, write to contact@yogeshwarvashishtha.in and they will be deleted.
Changes to this policy
When the system changes — a new provider, a new kind of data, email delivery being switched on — this page is updated first, and the date at the top changes with it. Significant changes are also told to members directly.
Contact
For anything about your data — a question, a request or a complaint — contact Yogeshwar Vashishtha. He handles privacy requests himself.