Privacy Policy

Introduction

Welcome to InvestoFarms, operated by InvestoFarms Partners Private Limited ("InvestoFarms," "we," "us," or "our"). We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application (collectively, the "Services").

1. Information We Collect

We collect various types of information in connection with the services we provide, including:

• Personal Information: Full name, date of birth, gender, email address, phone number, postal address, and profile photo.
• Identity Documents (KYC): Government-issued ID type and number (Aadhaar, PAN card), scanned document images, and residential address — collected to comply with Indian financial regulations.
• Financial & Banking Information: Bank account details (account number, IFSC code, account holder name), UPI ID, and payment transaction records processed via Razorpay.
• Investment Records: Details of farm projects you invest in, plot sizes, investment costs, and payout history.
• Photos & Files: Profile pictures and KYC document uploads, stored securely in Cloudflare R2 with signed access URLs.
• Device Identifiers: A random app-instance ID (UUID) generated on first launch — no hardware identifiers (IMEI, serial number, etc.) are collected. Firebase Cloud Messaging (FCM) token for push notification delivery.
• Usage Information: Notification delivery and read status, farm alert history, and general interaction data to improve app stability.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our investment and farm management services.
• Facilitate agricultural investments and process payouts to your bank account.
• Complete KYC verification as required by Indian financial regulations.
• Process payments securely through Razorpay.
• Send push notifications about investment updates, farm alerts, and important account information.
• Improve, personalize, and expand our services.
• Communicate with you, including for customer service, support, and informational updates.
• Detect and prevent fraud and other illegal activities.

3. Sharing Your Information

We may share your information with third parties in the following circumstances:

• Razorpay: Payment processing only — your payment details are shared with Razorpay to process investment transactions and payouts.
• Firebase Cloud Messaging (Google): Push notification delivery only — your FCM token is used to deliver notifications about investment updates and farm alerts.
• Cloudflare R2: Secure file storage — profile photos and KYC documents are stored encrypted on Cloudflare's infrastructure.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition.

4. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information:

• All network communication is encrypted via HTTPS/TLS.
• Sensitive credentials are stored in the device keychain with biometric protection.
• Personally identifiable information (PII) is sanitized from application logs.
• KYC documents are stored with signed, time-limited access URLs — not publicly accessible.
• Server-side encryption at rest for database storage.

While we have taken reasonable steps to secure your personal information, please be aware that no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

5. Your Data Protection Rights

You have the following rights regarding your personal information:

• Access: View all your personal data in the Profile screen within the app.
• Rectification: Edit and correct your personal details via the Edit Profile feature.
• Erasure: Request complete deletion of your account and all associated data — see our Data Deletion page for details.
• Consent Management: Toggle data collection consent on or off at any time in the app's Settings screen.
• Restrict Processing: The right to request that we restrict the processing of your personal information, under certain conditions.
• Data Portability: The right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

6. Consent

Our mobile application displays a prominent data collection disclosure before first use after authentication. This disclosure details all categories of data we collect and requires your affirmative consent before proceeding.

• Consent version is tracked; re-consent is required when the policy changes.
• You can revoke consent at any time in the app's Settings screen.
• Revoking consent will redirect you to the disclosure screen on your next app session.

7. Data Deletion

You can delete your account and all associated data through:

• In-App: Settings > Delete Account
• Email: Contact support@investofarms.com with your account deletion request
• Web Form: Visit our Data Deletion page to submit a request

Account deletion removes all personal data, investment records, KYC documents, and payment information from our systems. This action is irreversible.

8. Children's Privacy

Our Services are not intended for children under the age of 18. We do not knowingly collect or solicit personal information from children under 18. If we learn that we have collected personal information from a child under age 18, we will delete that information as quickly as possible.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app (via the consent re-acceptance flow) and update the "Last Updated" date below. We encourage you to review this policy periodically.

Last Updated: July 30, 2026