This Privacy Policy was last updated on January 1, 2026. We may update this policy periodically — please review it regularly.
✓ DPDP Act 2023 Compliant
✓ ISO 27001 Ready Security
✓ End-to-End Encryption
SECTION 1
Information We Collect
We may collect personal, professional, technical, and business-related information necessary to provide our services. This includes data you provide directly and data automatically collected through your use of the platform.
SECTION 2
Personal Information
Name, email address, phone number, company details, and designation. This information helps us identify you, communicate effectively, and provide personalized services.
SECTION 3
Startup Information
Business metrics, fundraising data, revenue information, and operational details. This data is essential for evaluating startups and matching them with relevant investors.
SECTION 4
Investor Information
Investment preferences, portfolio information, and professional credentials. This helps us provide relevant investment opportunities and verify investor authenticity.
SECTION 5
Technical Information
IP address, browser type, device information, and usage analytics. This helps us improve platform performance, troubleshoot issues, and enhance security.
SECTION 6
Cookies
We use cookies to improve user experience, remember preferences, and analyze platform functionality. You can control cookie settings through your browser preferences.
SECTION 7
Purpose of Collection
Information is collected to provide services, improve functionality, facilitate platform operations, enable investor-startup matching, and comply with legal obligations.
SECTION 8
AI Processing
Data may be processed using AI systems to generate startup intelligence, analyze market signals, assess risks, and provide platform insights. AI processing is anonymized where possible.
SECTION 9
Legal Basis
Data processing occurs under user consent, contractual necessity, legitimate business interests, and legal compliance requirements as defined under the DPDP Act 2023.
SECTION 10
Data Sharing
We may share information with authorized service providers, business partners, and third parties who assist in platform operations, subject to strict confidentiality agreements.
SECTION 11
Investor-Startup Matching
Certain information may be shared to facilitate relevant investment opportunities. Startups control what data is visible to investors through privacy settings.
SECTION 12
Data Security
Industry-standard security measures are implemented to protect data, including encryption, access controls, regular security audits, and employee training on data protection.
SECTION 13
Encryption
Sensitive information may be protected through TLS encryption in transit and AES-256 encryption at rest. Passwords are hashed and never stored in plain text.
SECTION 14
Access Controls
Only authorized personnel with legitimate business needs may access user information. Access is logged, audited, and revoked upon role changes or termination.
SECTION 15
Data Retention
Personal data is retained only as long as necessary for legitimate business purposes or as required by law. Inactive accounts may be anonymized after a defined period.
SECTION 16
User Rights
Users may request access, correction, or deletion of personal data, subject to legal and operational limitations. Requests should be submitted to our Grievance Officer.
SECTION 17
Consent Withdrawal
Users may withdraw consent for data processing at any time, subject to legal and operational requirements. Withdrawal may affect your ability to use certain platform features.
SECTION 18
Cross-Border Transfers
Data may be processed in jurisdictions permitted under applicable laws. We ensure adequate safeguards are in place for any cross-border data transfers.
SECTION 19
Children's Privacy
Services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If discovered, such data will be promptly deleted.
SECTION 20
Third-Party Links
AVENOR is not responsible for privacy practices of external websites linked from our platform. Users should review third-party privacy policies independently.
SECTION 21
Security Incidents
In the event of a data breach, reasonable steps will be taken as required by law, including notifying affected users and relevant authorities within prescribed timelines.
SECTION 22
Government Requests
Information may be disclosed where required by law, court order, or government authority under the provisions of applicable Indian legislation.
SECTION 23
Business Transfers
Data may be transferred during mergers, acquisitions, or corporate restructuring. Users will be notified of any such transfer and given choices where required by law.
SECTION 24
Analytics Services
Usage data may be collected through analytics tools for performance improvement, feature optimization, and understanding user behavior. This data is aggregated where possible.
SECTION 25
Marketing Communications
Users may opt out of promotional communications at any time via email preferences or by clicking "unsubscribe" in our emails. Service-related communications are mandatory.
SECTION 26
Data Accuracy
Users are responsible for maintaining accurate information. Inaccurate data may affect service quality. Please update your information promptly when it changes.
SECTION 27
Changes to Privacy Policy
This Privacy Policy may be updated periodically. Users will be notified of material changes via email or platform notification. Continued use constitutes acceptance of updates.
SECTION 28
Grievance Officer
In accordance with Indian regulations, users may contact the designated Grievance Officer for privacy-related concerns at
grievance@avenor.sbs. The officer will acknowledge complaints within 24 hours.
SECTION 29
DPDP Act Compliance
AVENOR follows applicable provisions of the Digital Personal Data Protection Act, 2023, including requirements for consent, data collection limitation, purpose specification, and data subject rights.
SECTION 30
Contact Information
For privacy-related concerns, data requests, or questions about this policy, please contact our Privacy Team.