Privacy Policy | Profinity Mutual Fund

Last updated: 6 October 2026

Profinity Mutual Fund Distribution Private Limited (“Profinity”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect when you visit silver-hawk-397751.hostingersite.com, use the Profinity Mutual Funds mobile app, invest through us or get in touch with us, and how we use, share, store and protect it.

This policy is published in line with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023, and the applicable regulations and circulars of SEBI and AMFI. By using our website, app or services, or by sharing your information with us, you agree to the practices described here.

1. Who we are

Profinity is an AMFI-registered mutual fund distributor (ARN-76921, EUIN: E027659; CIN: U67190UP2009PTC037944) with its registered office at 127/T/25, Vinobha Nagar, Kidwai Nagar, Kanpur, Uttar Pradesh – 208014, India. For the purposes of data protection law, Profinity is the “Data Fiduciary” responsible for the personal information described in this policy.

This policy applies to our website, our mobile app, our offices, and our communication with you by phone, email, SMS and WhatsApp. It does not apply to websites or apps run by AMCs, Registrars, transaction platforms or other third parties, which have their own privacy policies.

2. Information we collect

a) Information you give us

Enquiries: your name, mobile number, email address, the product or topic you are interested in and your message, when you fill in our contact form, call us, email us, visit our office or message us on WhatsApp.
Identity and KYC: name, father’s or spouse’s name, date of birth, gender, PAN, Aadhaar (only where you choose Aadhaar-based eKYC), proof of address, photograph, signature, in-person or video verification records, and your CKYC number.
Profile and compliance details: address, mobile number and email address, occupation, income range, source of funds, politically exposed person (PEP) status, tax residency and FATCA/CRS declarations, and investor category (resident, NRI, HUF, minor, etc.).
Bank details: bank account number, IFSC, account type, cancelled cheque or bank statement, and details needed to register auto-debit mandates (NACH, e-mandate or UPI AutoPay).
Nominee, guardian and joint holder details: names, dates of birth, relationship, contact details and identity details of nominees, guardians of minors and joint holders.
Investment details: your SIPs, lump sum investments, redemptions, switches, STPs and SWPs, folio numbers, holdings, and any financial goals or risk preferences you choose to share with us.

b) Information we receive from others

To verify your details and service your investments, we may receive information about you from KYC Registration Agencies (KRAs), the Central KYC Registry, Registrar and Transfer Agents (such as CAMS and KFin Technologies), AMCs, BSE StAR MF and other transaction platforms, and banks or payment providers (for example, to confirm a payment or mandate status).

c) Information collected automatically

Device and usage data: IP address, browser and device type, operating system, app version, pages or screens viewed, links clicked, and the date and time of your visit.
Logs and diagnostics: login times, error and crash reports, which help us keep the app working and secure.
Cookies and similar technologies (see section 11).

Financial information, bank details, passwords, and identity or biometric information are treated as sensitive personal data under Indian law. We collect them only when they are needed to provide our services or required by law, and we handle them with extra care.

3. Why we collect it, and on what basis

We process your personal information on the basis of:

Your consent, which you give when you submit a form, register on our app, sign an account opening form or otherwise share your information with us for a stated purpose; and
Legitimate uses permitted by law, including where we must process information to comply with SEBI, AMFI, KYC, anti-money laundering, tax or other legal requirements, or to respond to an order of a court or authority.

We collect only the information that is reasonably necessary for these purposes.

4. How we use your information

To respond to your enquiries, call you back and provide customer support.
To verify your identity, complete or update your KYC, and open and maintain your investor account.
To submit and track your purchase, SIP, redemption, switch and other transactions with AMCs, Registrars and transaction platforms.
To register and manage bank mandates for SIPs and to reconcile payments.
To show your portfolio, goals and reports in our app, and to send you account statements, transaction confirmations, SIP reminders and service alerts.
To share information on mutual fund schemes, new fund offers, market updates and investor-awareness content. You can opt out of promotional communication at any time.
To meet our obligations under SEBI regulations, AMFI guidelines, the Prevention of Money Laundering Act, 2002, the Income-tax Act, 1961 and other applicable laws, including record keeping, due diligence and reporting.
To detect and prevent fraud, misuse and security incidents, and to resolve disputes and complaints.
To understand how our website and app are used and to improve them. Wherever possible we use aggregated or de-identified data for this.

We do not sell, rent or trade your personal information to anyone, and we do not share it with third parties for their own marketing.

5. Calls, SMS, email and WhatsApp

When you share your mobile number or email address with us, you authorise Profinity to contact you by phone call, SMS, email and WhatsApp about your enquiry, your account and your investments. This consent applies even if your number is registered on the National Do Not Call (DND) registry, to the extent permitted by the regulations of the Telecom Regulatory Authority of India (TRAI).

You can stop promotional messages at any time by replying “STOP”, using the unsubscribe link in our emails, or writing to info@profinitygroup.com. We will continue to send service messages that are essential to your account, such as transaction confirmations and regulatory communication.

As required by SEBI, AMCs and Registrars send transaction confirmations and statements directly to the mobile number and email address registered in your folio. Please make sure these belong to you or your immediate family.

6. Who we share it with

We share your information only to the extent needed for the purposes above, or where the law requires it:

Asset Management Companies (AMCs) whose schemes you invest in, and their Registrar and Transfer Agents such as CAMS and KFin Technologies.
Transaction platforms such as BSE StAR MF and the MF Central / MF Utilities platforms, through which transactions are processed.
KYC Registration Agencies, the Central KYC Registry and UIDAI-authorised agencies, for KYC verification and updates.
Banks, NPCI and payment service providers, for payments, mandates and redemption credits.
Technology and service providers who help us run our website and app, host data, send emails, SMS and WhatsApp messages, and provide customer support. They may use your information only to perform services for us, under confidentiality and security obligations.
Professional advisers such as auditors and lawyers, under a duty of confidentiality.
Regulators and authorities, such as SEBI, AMFI, the Financial Intelligence Unit (FIU-IND), income-tax authorities, law-enforcement agencies and courts, when required by law or legal process.
A successor business, if Profinity is involved in a merger, acquisition or transfer of business, in which case your information will remain protected under this policy.

7. Where your information is stored

Your information is primarily stored and processed in India. Some of our service providers, such as email, cloud hosting or analytics providers, may store or process data on servers outside India. Where this happens, we transfer data only as permitted under Indian law and require the provider to protect it with security standards comparable to those described in this policy.

8. How long we keep it

Investors: we keep your KYC and transaction records for as long as you have a relationship with us, and afterwards for the period required by law. This includes the record-keeping rules under the Prevention of Money Laundering Act and SEBI and AMFI requirements, which currently require certain records to be kept for several years after the relationship ends.
Enquiries: if you contact us but do not invest, we keep your details only as long as needed to respond and follow up, and delete them when they are no longer needed or when you ask us to.
Technical logs are kept for a limited period for security and troubleshooting.

When information is no longer needed, we delete it or anonymise it so that it can no longer identify you.

9. How we protect it

We follow reasonable security practices and procedures to protect your information from unauthorised access, misuse, alteration or loss, including:

encrypted (HTTPS/TLS) connections for our website and app;
access controls so that only authorised staff who need the information to do their job can see it;
confidentiality obligations for our employees and service providers;
secure, regulated platforms (such as BSE StAR MF) for processing transactions; and
regular review of our systems, software updates and backups.

No method of transmission over the internet or of electronic storage is completely secure, so while we work hard to protect your information we cannot guarantee absolute security.

Stay safe: Profinity will never ask for your passwords, OTPs, UPI PIN, card details or net-banking credentials by phone, email, SMS or WhatsApp, and will never ask you to pay money into a personal bank account. Mutual fund investments are always paid directly to the AMC or the transaction platform. If you receive a suspicious message claiming to be from Profinity, please report it to us immediately.

10. Data breaches

If a personal data breach occurs that affects your information, we will take prompt steps to contain it, and will inform you and the relevant authorities, including the Data Protection Board of India and CERT-In, as required by law.

11. Cookies and third-party services

Cookies are small text files stored on your device. Our website uses:

Essential cookies that keep the website secure, load pages quickly (caching) and make forms work;
Preference cookies that remember choices you make on the site; and
Analytics cookies, where used, that help us understand how visitors use the site so we can improve it.

Some pages include content or links from third parties, such as YouTube videos, Google Maps, Google Fonts, WhatsApp, Google Play and the Apple App Store. These services may set their own cookies and collect information under their own privacy policies, which we encourage you to read. You can block or delete cookies in your browser settings, although some parts of the site may then not work as intended.

12. Mobile app permissions

Our app asks for device permissions only when a feature needs them, for example:

Camera and photos/files to capture or upload KYC documents, your photograph, signature or a cancelled cheque, and to save reports and statements you download;
Notifications to send SIP reminders, transaction updates and alerts;
SMS (where supported) only to read one-time passwords automatically for login or verification; and
Location (where required) only to meet regulatory requirements during video or in-person verification.

You can turn these permissions off at any time in your device settings. Some features may not work without them.

13. Your rights

Subject to applicable law, you have the right to:

Access: ask for a summary of the personal information we hold about you and how we use it, and the identities of those we have shared it with;
Correction: ask us to correct, complete or update information that is inaccurate or incomplete. Some changes, such as to your KYC, bank or nominee details, must follow the process set by the KRA, AMC or Registrar, and we will help you with it;
Erasure: ask us to delete your information, where we are not required by law to keep it;
Withdraw consent: withdraw consent you have given us, as easily as you gave it;
Nominate: nominate another person to exercise these rights on your behalf in the event of your death or incapacity; and
Grievance redressal: raise a complaint with our Grievance Officer (section 18), and if you are not satisfied, with the Data Protection Board of India.

To use any of these rights, write to info@profinitygroup.com. We may need to verify your identity before acting on your request. Withdrawing consent or asking for deletion may mean we can no longer provide some services, such as processing new transactions. It does not affect units already held in your name with the AMC, or processing that took place before you withdrew consent.

14. Your responsibilities

Please give us information that is true, complete and current, and tell us when it changes.
When you share details of another person, such as a nominee, joint holder or guardian, you confirm that you have their consent to do so and have told them about this policy.
Keep your app login, PIN and OTPs confidential, and log out on shared devices.

15. Children

Our website and app are meant for adults. Investments for minors can be made only through a parent or legal guardian, as required by SEBI and AMFI rules, and we process a minor’s information only with the verifiable consent of the parent or guardian. We do not knowingly track the behaviour of children or show them targeted advertising.

16. Links to other websites

Our website, app and messages may contain links to AMC websites, regulators, video platforms and other third-party sites. We are not responsible for the privacy practices or content of those sites, so please read their privacy policies before sharing information with them.

17. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services or in the law. The latest version will always be available on this page, with the date it was last updated shown at the top. If we make significant changes, we will let you know through our website, app or by email.

18. Contact and Grievance Officer

If you have any question, request or complaint about your personal information or this policy, please contact our Grievance Officer:

Grievance Officer
Profinity Mutual Fund Distribution Private Limited
127/T/25, Vinobha Nagar, Kidwai Nagar, Kanpur, Uttar Pradesh – 208014
Email: info@profinitygroup.com
Phone: +91 8795 789 789
Hours: Monday to Friday, 10:00 AM to 6:30 PM

We will acknowledge your request promptly and aim to resolve it within 30 days. Please also read our Terms and Conditions.