Privacy Policy

Last updated: October 23, 2026

1. Introduction

SocialCoffee DigiTech Pvt Ltd, operating as InvestSights ("we", "us", "our") operates the website investsights.in (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

InvestSights is an analytical platform that provides AI-powered investment research tools, market data, and educational content for the Indian stock market. We are NOT a SEBI-registered Research Analyst (RA) or Investment Adviser (IA). We do not provide personalized investment advice, buy/sell recommendations, or portfolio management services.

By using our Platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register or use our Platform, we may collect:

Account Information: Name, email address, profile picture (via Google OAuth)
Authentication Data: Session tokens, login timestamps, IP addresses
Payment Information: Paid subscriptions are not currently available during early access, and we do not collect payment details. If paid plans are introduced, payments may be processed by authorized third-party payment providers such as Razorpay or Stripe. InvestSights does not directly store complete card numbers, CVV information or online-banking credentials. The available payment methods and applicable billing terms will be displayed before a user completes any paid transaction.
Communication Data: Support queries, feedback, and correspondence

2.2 Usage Information

Platform Activity: Stocks viewed, research queries, watchlist/portfolio data, screener usage, alerts configured
Device Information: Browser type, operating system, device identifiers
Log Data: Access times, pages viewed, referring URLs, API usage patterns
Cookies: Session cookies for authentication, preference cookies for user experience

2.3 Financial Data You Provide

Portfolio Holdings: Stock symbols, quantities, entry prices you voluntarily enter
Watchlists: Stocks you choose to track
Financial Plans: Goals, risk profiles, and planning inputs you provide

Note: We do NOT access your demat account, trading account, or bank account. All portfolio data is self-reported by you.

3. How We Use Your Information

Provide Services: Deliver analytical tools, AI research, market data, and educational content
Personalization: Customize your experience based on watchlist/portfolio preferences
Communication: Send service updates, alerts you configured, and important notices
Analytics: Improve our Platform's performance, features, and user experience
Security: Detect fraud, prevent abuse, and protect our Platform
Payment Processing: Not applicable during early access — no paid subscriptions are available and no billing is performed. If paid plans are introduced, this would cover subscription management and billing
Legal Compliance: Comply with applicable laws, regulations, and legal processes

We do NOT use your data to provide personalized investment recommendations, execute trades on your behalf, or share your portfolio data with third parties for commercial purposes.

4. Data Sharing and Disclosure

We do NOT sell your personal information. We may share data with:

Service Providers: Cloud hosting (Google Cloud Platform), email services, and analytics providers who assist in operating our Platform. If paid plans are introduced, this may include authorized payment providers such as Razorpay or Stripe.
AI Services: Google Gemini API for generating analytical content. Queries are processed without personally identifiable information.
Legal Requirements: When required by law, regulation, legal process, or governmental request, including requests from SEBI, stock exchanges (NSE/BSE), or other regulatory authorities
Business Transfers: In connection with a merger, acquisition, or sale of assets

5. AI Assistant Connectors (MCP)

You can connect InvestSights to an AI assistant (for example Claude, Perplexity, Grok or Cursor) through our Model Context Protocol (MCP) connector. This section explains what happens to your data when you do.

Sign-in: You connect by signing in to your InvestSights account and approving the assistant, or by creating a personal connector key. If you sign in with Google, Google shares your name, email address, profile picture and Google account identifier with us; we never receive your Google password. We store each personal key (in hashed form) so that you can revoke it; access granted through sign-in is not recorded separately for each assistant. When an assistant starts signing in, we may record the time, the web address it asks us to return to (without any parameters attached to it), the identifier the assistant sends, which AI app it is (worked out from that address and the app name sent with the request), whether that address was accepted, the result, and, once you are signed in, your user ID; we do not keep your browser details.
What the assistant sends us: For each request, the assistant sends only the name of the tool it wants to use and that tool's inputs (for example a stock symbol, a fund name or a question). We do not receive your conversation with the assistant.
What we record for each request: your user ID, the tool name, the stock symbol if one was given (or the list of stock symbols, for tools that compare stocks or review a portfolio), which AI app sent the request (worked out from the app name it sends), the time of the request, whether it succeeded, how long it took, the IP address it came from, whether the assistant connected through sign-in or a personal key, and, if the request failed, a short error note. That note gives an error type and reference, the names of the inputs involved, or the limit that was reached; it never contains the values you sent. When a request fails, our server logs also keep the technical error details, which may include the inputs of that request, so that we can find and fix the fault.
Free-text questions: Some tools take a free-text question as an input. That question may be stored, without your name or email address, together with the generated answer, so that repeat questions can be answered faster and so that we can check answer quality.
Why we record it: To operate the connector, keep it secure and prevent abuse, apply rate limits, investigate problems you report to us, and produce aggregate usage statistics.
Where the results go: Tool results are returned to the AI assistant you chose. How that assistant handles them is governed by its provider's own terms and privacy policy.
No sale, no model training: We do not sell this data. We do not use it, your prompts or your tool calls to train or fine-tune any AI model.
AI processors: Some answers are written by AI models run by our service providers: Google (Gemini, through Vertex AI or the Gemini API), Microsoft Azure AI services and, as a fallback for some features, Perplexity. Some research tools also look up public web pages through a web-search service. These providers receive the tool's inputs and the market data needed to write the answer, not your name, email address or account details.
Revoking access: From Connected apps in your account (investsights.in/account/connected-apps) you can revoke personal keys one at a time. Disconnecting sign-in access signs out every assistant connected through sign-in at once, and also signs you out of the InvestSights mobile app if you use it.
How long we keep it: We keep these records while your account is active. They are not deleted automatically; you can ask us to delete them at any time by writing to support@investsights.in.

5A. Spreadsheet and Document Add-ins (Google and Microsoft)

Our add-ins for Google Sheets and Google Docs, and for Microsoft Excel and Microsoft Word, bring InvestSights data into your spreadsheets and documents. This section explains what they access and what we keep.

What the add-on accesses in Google: Only the spreadsheet or document you are using it in, and only when you use a formula or the sidebar. In Sheets it reads the stock symbols and field names you pass to an InvestSights formula and writes the results back to that sheet; when you connect a spreadsheet it adds a hidden sheet and a named range (IS_REFRESH) holding a refresh marker. In Docs it inserts the tables you ask for at your cursor. It cannot open your other files.
What the add-in accesses in Microsoft Excel and Word: Only the workbook or document you are using it in, and only when you use a formula or the task pane. In Excel it reads the stock symbols and field names you pass to an InvestSights formula and returns the results to those cells; when you use the task pane it can write a snapshot formula or a header row into the selected cell, and when you ask for a research report it adds a worksheet with the report. In Word it inserts the tables and reports you ask for at your cursor.
What it sends us: The stock symbols, field names and options in your formula or sidebar request, together with your add-on key. When you connect a Google spreadsheet, it also sends that spreadsheet's identifier and title. It does not send us the contents of your spreadsheet or document, and we receive no other data from your Google or Microsoft account through the add-ins. As with every request to our servers, our hosting provider's request logs record the IP address and the app name sent with each request.
Sign-in: You connect the add-on by signing in to your InvestSights account and approving it, in the same way as an AI assistant (section 5). The add-on then keeps an add-on key in your Google account's storage for that add-on. When you connect a spreadsheet, a separate key for that spreadsheet is stored inside it, so that formulas work for people you share it with. Their formula requests then use your InvestSights account and count against your add-on allowance. The Microsoft add-in keeps its key in the add-in's own storage on your device and never writes a key into a workbook or document, so each person who opens a shared file signs in themselves. If the sign-in window cannot be used, you can instead create a one-time connection code on Connected apps; we store it in hashed form, and it expires after 10 minutes or once used.
What we record: Each key (in hashed form), when it was created and last used, and for spreadsheet keys the spreadsheet's identifier and name; and, for each day, how many requests, stock look-ups and research reports your account made through the add-on; and, for each research report charged to your weekly allowance, the stock and the week. Apart from research reports, we do not keep a record of which stocks you looked up. When a request fails, our server logs may keep the technical error details, which may include that request's inputs, so that we can find and fix the fault.
Google user data we receive: When you sign in with Google, your name, email address, profile picture and Google account identifier. When you connect a Google spreadsheet, that spreadsheet's identifier and title. We use this data only to sign you in, show your account in the add-on, link your spreadsheets and documents to your InvestSights account, and send you account emails and any alerts or newsletters you turn on.
Who we share Google user data with: We do not sell Google user data, and we share, transfer or disclose it only to: (1) service providers that store or process it for us, solely to operate InvestSights and under contracts that limit their use to that purpose: Google Cloud Platform (hosting), Supabase (database), Cloudflare (network delivery and security), and Microsoft Azure Communication Services (sending account emails to your email address); (2) authorities, when the law, a court order or a regulator requires it; and (3) a buyer or successor if InvestSights is merged or sold, who must keep the commitments in this policy. We do not share Google user data with advertisers, data brokers or AI model providers, and we do not send it to the AI models that write reports and answers.
Limited Use: InvestSights's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this information, use it for advertising, or use it to train or fine-tune any AI model.
Revoking access: Choose Disconnect in the add-on sidebar or task pane, or revoke individual sign-ins and spreadsheets from Connected apps in your account. Disconnecting all AI apps there (section 5) also disconnects the add-ins. You can remove an add-in itself from your Google or Microsoft account at any time.
How long we keep it: As in section 5: while your account is active, or until you ask us to delete it by writing to support@investsights.in.

6. Data Storage and Security

Storage: Data is stored on Google Cloud Platform servers and Supabase (PostgreSQL) with encryption at rest and in transit
Encryption: All data transmitted between your browser and our servers uses TLS/SSL encryption (HTTPS)
Authentication: Session-based authentication with HttpOnly, Secure cookies. Passwords are hashed using bcrypt.
Access Controls: Administrative access is restricted and logged
Payment Security: No payment details are collected during early access. If paid plans are introduced, payment processing would be handled by PCI-DSS compliant third-party providers and InvestSights would not directly store complete card numbers, CVV information or online-banking credentials.

While we implement industry-standard security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Cookies and Tracking

We use the following types of cookies:

Essential Cookies: Required for authentication and Platform functionality (session cookies)
Preference Cookies: Remember your settings (theme, layout preferences)
Analytics Cookies: Help us understand how users interact with the Platform

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality.

8. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian laws, you have the right to:

Access: Request a copy of your personal data we hold
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your account and associated personal data
Portability: Request your data in a machine-readable format
Withdraw Consent: Withdraw consent for data processing at any time
Grievance Redressal: Lodge a complaint with the Data Protection Board of India

To exercise these rights, contact us at support@investsights.in

9. Data Retention

Active Accounts: Data is retained as long as your account is active
Deleted Accounts: Personal data is deleted within 90 days of account deletion, except where retention is required by law
Payment Records: No transaction records exist during early access. If paid plans are introduced, transaction records would be retained for 8 years as required under Indian tax and financial regulations
Anonymized Data: Aggregated, anonymized data may be retained indefinitely for analytical purposes

10. Third-Party Services

Our Platform integrates with third-party services including:

Google OAuth (authentication)
Google Gemini / Vertex AI (AI-powered analysis)
Financial Modeling Prep (market data)
Cloudflare (CDN and security)
Razorpay/Stripe (payment processing — only if paid plans are introduced)

Each third-party service has its own privacy policy. We encourage you to review their policies.

11. Children's Privacy

Our Platform is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through the Platform or via email. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries or to exercise your data rights:

Email: support@investsights.in
Website: https://investsights.in

SEBI Compliance Disclaimer

InvestSights is an analytical and educational platform. We are NOT registered with SEBI as a Research Analyst (RA) under SEBI (Research Analysts) Regulations, 2014 or as an Investment Adviser (IA) under SEBI (Investment Advisers) Regulations, 2013. The information provided on this Platform is for educational and analytical purposes only and should not be construed as investment advice. Users should consult a SEBI-registered investment adviser before making any investment decisions. Past performance is not indicative of future results. Investments in securities market are subject to market risks. Read all the related documents carefully before investing.

This is the complete text of the Privacy Policy. See also the Terms of Service and Privacy Policy.