Privacy Policy

Website: www.startupmandi.in
Effective Date: October 29, 2025
Last Updated: October 29, 2025

1. Introduction

Welcome to StartupMandi / startupmandi.in (“we,” “us,” “our,” or “Company”) (Legal Name: StartupMandi Consulting Services). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.startupmandi.in and use our services.

By accessing or using our website and services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

This Privacy Policy complies with the Digital Personal Data Protection Act (DPDP Act), 2023 of India and other applicable data protection laws.

2. Information We Collect

We collect several types of information from and about users of our services, including:

2.1 Personal Information

Personal information is data that can be used to identify you individually. We may collect the following personal information:

Name
Email address
Phone number
Business name and details
Address (business and residential)
PAN, Aadhaar, GST numbers (for legal compliance and registrations)
Bank account details (for payment processing)
Government ID documents (for verification purposes)
Business plans, financial projections, and pitch decks (uploaded voluntarily)

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing behavior:

IP address
Browser type and version
Device type and operating system
Pages visited and time spent
Referring website addresses
Cookies and similar tracking technologies

2.3 Third-Party Information

We may receive information about you from third parties such as:

Payment processors
Government databases (for scheme verification)
Social media platforms (if you connect your account)
Incubators, accelerators, and investors (with your consent)

2.4 How Our Website / App Uses Google User Data

When you sign up or log in to StartupMandi using Google Sign-In, we securely access your basic Google account information, including your name, email address, and profile photo. This data is used to:

Create and personalize your StartupMandi account
Streamline the login and registration experience
Display your profile information within our platform

We do not share, sell, or disclose your Google user data to third parties without your explicit consent. Your information is used solely to improve your experience and provide core website functionality. You can manage or revoke access to your Google account data at any time via your Google Account settings.

StartupMandi is committed to protecting your privacy and complies fully with Google API Services User Data Policy, including the Limited Use requirements. For more details, please refer to our full Privacy Policy or contact support@startupmandi.in.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide Our Services

Create and manage your account
Process transactions and payments
Provide legal registration services (Company Incorporation, MSME, DPIIT)
Match you with relevant government schemes, grants, and investors
Generate business documents (pitch decks, financial models)
Facilitate connections with mentors, investors, and partners
Deliver our 6-month incubation program

3.2 To Improve Our Services

Analyze usage patterns and preferences
Develop new features and functionalities
Enhance AI matching algorithms
Conduct research and analytics

3.3 To Communicate With You

Send service-related notifications and updates
Respond to your inquiries and support requests
Send marketing communications (with your consent)
Provide important policy or service changes

3.4 For Legal and Compliance Purposes

Comply with legal obligations and regulations
Verify your identity for KYC (Know Your Customer) requirements
Prevent fraud, unauthorized activities, and security threats
Enforce our Terms of Service and other agreements

4. Legal Basis for Processing (Under DPDP Act, 2023)

We process your personal data based on the following lawful grounds:

Consent: You have given explicit consent for processing your data for specific purposes
Contract Performance: Processing is necessary to fulfill our contractual obligations to you
Legal Obligation: Processing is required to comply with Indian laws and regulations
Legitimate Interests: Processing is necessary for our legitimate business interests, provided they do not override your rights

5. How We Share Your Information

We process your personal data based on the following lawful grounds:

5.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our platform:

Cloud hosting providers (AWS, Azure, Google Cloud)
Payment processors (Razorpay, Stripe)
Email and SMS service providers
Analytics and marketing platforms
Legal and compliance service providers

5.2 Business Partners

With your consent, we may share your information with:

Incubators and accelerators
Angel investors and venture capital firms
Government agencies (for scheme applications)
Banks and financial institutions
Marketing and digital service partners

5.3 Legal Requirements

We may disclose your information if required by law or in response to:

Court orders, subpoenas, or legal processes
Government or regulatory requests
Protection of our rights, property, or safety
Investigation of fraud or security issues

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorizedaccess, disclosure, alteration, or destruction:

Encryption: Data transmission using SSL/TLS encryption
Secure Storage: Encrypted databases and secure cloud infrastructure
Access Controls: Limited access to personal data on a need-to-know basis
Regular Audits: Periodic security assessments and penetration testing
Employee Training: Staff training on data protection and security practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect yourinformation, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longerretention period is required or permitted by law.

Account Information: Retained for the duration of your account and up to 7 years after account closure for legal compliance
Transaction Records: Retained for 7 years as per Indian tax and accounting regulations
Marketing Data: Retained until you withdraw consent
Cookies and Analytics: Typically retained for 12-24 months

You may request deletion of your data at any time, subject to legal and contractual obligations.

8. Your Rights Under DPDP Act, 2023

As a user, you have the following rights regarding your personal data:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you.

8.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data, subject to legal and contractual obligations.

8.4 Right to Withdraw Consent

You may withdraw your consent for data processing at any time, where processing is based on consent.

8.5 Right to Nominate

You have the right to nominate another individual to exercise your rights in case of death or incapacity.

8.6 Right to Grievance Redressal

You have the right to file a complaint with our Data Protection Officer or the Data Protection Board of India.

To exercise your rights, please contact us at:

Email: ceo@startupmandi.in
Phone: +91-8906059086
Address: Raiganj, West Bengal, India

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website.

9.1 Types of Cookies We Use

Essential Cookies: Required for website functionality
Performance Cookies: Help us understand how visitors interact with our site
Functional Cookies: Remember your preferences and settings
Marketing Cookies: Track your browsing behavior for targeted advertising

9.2 Managing Cookies

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our website.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these externalsites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. Ifyou are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries outside India. We ensure that such transfers comply withapplicable data protection laws and that adequate safeguards are in place.

13. Marketing Communications

We may send you marketing communications about our services, offers, and updates. You can opt out of marketing communicationsat any time by:

Clicking the “unsubscribe” link in our emails
Contacting us at ceo@startupmandi.in
Updating your communication preferences in your account settings

Please note that you cannot opt out of service-related communications (e.g., account verification, transaction confirmations).

14. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection practices and ensure compliance with applicablelaws.

Data Protection Officer:

Name: Nitesh Roy
Email: ceo@startupmandi.in
Phone: +91-8906059086
Address: Raiganj, West Bengal, India

15. Grievance Redressal

If you have any concerns, complaints, or grievances regarding this Privacy Policy or our data practices, please contact our Grievance Officer:

Grievance Officer:

Name: Nitesh Roy
Email: ceo@startupmandi.in
Phone: +91-8906059086
Address: Raiganj, West Bengal, India

We will acknowledge your complaint within 72 hours and resolve it within 30 days.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or businessoperations. We will notify you of any material changes by:

Posting the updated Privacy Policy on our website
Sending you an email notification (if you have an account)
Displaying a prominent notice on our website

The “Last Updated” date at the top of this Privacy Policy indicates when it was last revised. Your continued use of our services afterany changes constitutes your acceptance of the updated Privacy Policy.

17. Consent

By using our website and services, you consent to the collection, use, and sharing of your information as described in this PrivacyPolicy. If you do not agree with this Privacy Policy, please discontinue use of our services.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

StartupMandi Consulting Services

Website: www.startupmandi.in
Email: ceo@startupmandi.in
Phone: +91-8906059086
Address: Raiganj, West Bengal, India

Business Hours: Monday to Friday, 10:00 AM – 6:00 PM IST

Fore more, visit our Contact Us page

19. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India. Any disputes arising from this Privacy Policy shall be subject to the exclusivejurisdiction of the courts in Raiganj, West Bengal, India.

20. Acknowledgment

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Document Version: 1.0
Effective Date: October 29, 2025
Last Updated: October 29, 2025