Privacy Policy & Regulatory Framework

InvestRoutine strictly adheres to regulatory principles established by the Reserve Bank of India (RBI):

• •Not a Bank or NBFC: We are an independent educational utility. We are NOT an RBI-regulated commercial bank, Non-Banking Financial Company (NBFC), Payment Aggregator (PA), or peer-to-peer (P2P) lending platform.
• •Zero Digital Lending / No Credit Brokering: In compliance with the RBI Digital Lending Guidelines (2022), we do NOT act as a Lending Service Provider (LSP), Digital Lending App (DLA), loan originator, or credit underwriter. We do not access borrower smartphone storage, contacts, or SMS logs.
• •Statutory Formula Standardization: All loan EMI schedules are computed using the standard reducing-balance amortization equation established under standard banking norms. Fixed deposit calculations reflect RBI-mandated quarterly compounding.
• •Public Regulatory Benchmarks: All published reference rates (such as the RBI Repo Rate at 6.50% or scheduled bank FD ranges) are informational benchmarks sourced directly from public releases of the Reserve Bank of India and commercial bank schedules.

We utilize browser standard LocalStorage strictly for functional client-side user experience enhancements. We do not use persistent identifiers to track users across unrelated websites.

To keep our 50+ financial calculators 100% free forever for all Indian families without requiring subscriptions, we display contextual advertisements and monitor aggregate site performance:

• •Google Analytics 4 (GA4): Collects aggregated, non-personally identifiable traffic metrics. IP anonymization is strictly enabled by default.
• •Google AdSense / Certified Ad Partners: Third-party ad vendors use cookies to serve contextual advertisements. You can opt out of personalized ad targeting at any time via Google Ads Settings or aboutads.info.

We implement industry-standard cybersecurity protections to ensure platform integrity:

• Transport Layer Security (TLS 1.3): All network transmissions are protected with 256-bit encryption and strict HSTS headers.
• Content Security Policy (CSP): Comprehensive HTTP security headers prevent cross-site scripting (XSS), clickjacking, and unauthorized third-party script injection.
• Static Edge Infrastructure: Static assets are distributed across enterprise edge CDN nodes with zero vulnerable user databases.

In full compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA), you hold the following statutory rights as a Data Principal:

In accordance with Section 9 of the Digital Personal Data Protection Act, 2023, we do not undertake behavioral tracking or targeted advertising directed toward individuals under the age of 18. If a parent or guardian believes a minor has submitted personal contact information to our support desk, please contact us for immediate deletion.

Our guides and calculators link to official Indian government and regulatory portals (including the Income Tax Department, Reserve Bank of India, SEBI, EPFO, and MoSPI) for statutory verification. We encourage users to review the independent privacy policies of these statutory bodies.

In compliance with the Information Technology Act, 2000, the IT Rules, 2021, and the DPDP Act, 2023, the particulars of our designated Grievance Redressal Officer are published below: