Privacy Policy

Last updated: March 2026

Background

Stormbreaker Technologies Private Limited ("Us", "We", "Our", "Company") is committed towards safeguarding the privacy of information shared by a User ("You" or "Your" or "Yours") when using our proprietary platform named https://cloud.stormfinance.ai ("Platform") and availing associated services ("Services") that may be provided by the Company to You from time to time, and being transparent about the privacy practices employed by the Company. This privacy policy ("Privacy Policy" or "Policy") governs the collection, use, storage, required disclosure, transfer and processing of Your personal information by Us in connection with Your availing of the Services offered by the Company, as well as Your interaction with and usage of the Platform.

Kindly note that any capitalised terms (words with the first letter of such word capitalised) used but not expressly defined in the Policy shall be ascribed the same meaning as ascribed to such capitalised terms in the Terms of Use ("Terms") of the Platform and Services, such Terms being accessible via the URL stormfinance.ai/terms-of-use.

We may collect and process certain personal information disclosed by You at the time of registering and creating your user account/profile on the Platform, or at any time thereafter. By confirming Your acceptance to this Policy, You agree to grant Your informed and valid consent to Us for the collection, usage, storage, required disclosure, transfer and processing of all such information furnished by You in the manner outlined in the Policy and governed simultaneously by the Terms of Use, EULA, Customer Engagement Agreement ("CEA", as defined under the Terms) and Applicable Laws.

The Company reserves the exclusive and discretionary right to, in any way that it deems fit, amend, expand, restrict, withhold or alter in any manner the Policy and the Terms, as well as any other agreement or document uploaded on the Platform, governing Your usage of the Platform and Services, at any point in time.

General Terms

The Policy, along with the Terms and CEA, and Applicable Law, govern Your usage of the Platform and Services. The Policy has been published in accordance with the applicable laws, rules, regulations of India, including but not limited to the Information Technology Act, 2000, Digital Personal Data Protection Act 2023, Digital Personal Data Protection Rules 2025 and various rules and regulations framed thereunder ("Applicable Law" or "Applicable Laws"). The Policy is subject to amendments, modifications from time to time in accordance with any revision or modification in the existing laws or the enforcement of any new enactment. Your continued usage of the Platform and availing of any Services shall constitute Your unconditional acceptance of any and all updated provisions of the Policy. We use your information in an anonymized and aggregated manner and analyze your usage data to train our AI models for our deployed agents and improve our services.

In order to use the Platform and Services, You must be competent under Applicable Law to give valid consent to and enter into legally binding contracts. By Your voluntary and continued usage of the Platform and availing of any Services, You hereby covenant, represent and warrant that You are:

Aware of, acknowledge, understand and confirm your acceptance to be bound by the Terms, Privacy Policy and CEA during your usage of the Platform and availing of any Services;
You are competent under Applicable Laws to give valid consent to and enter into legally binding contracts on behalf of your organization;
Ensuring that Your usage of the Platform and availing of the Services shall not contravene the Terms, Privacy Policy, CEA as well as any Applicable Law in force;
Providing material, updated, accurate and latest information to the Company that shall be requested of you from time to time in order for the Company to continue providing the Services;
Ensuring that Your usage of the Platform and availing of the Services shall not endanger or harm or attempt to endanger or harm the Company's proprietary rights, Intellectual Property, the Platform, the Services etc.;
Ensuring that upon discovery of any actual or attempted usage of the Platform and/or the Services by any individual contrary to these Terms, You shall promptly notify the Data Protection Officer/Company's Grievance Redressal Officer.

We are committed to protecting the security of Your personal information and safeguarding Your privacy. The Policy shall address, elaborate upon and clarify regarding the following subjects:

The information We collect and how We use Your information;
User Consent for Processing;
How We retain and store Your information;
Your rights as a User;
Cross-border transfers;
Details of the Company's Grievance Redressal Officer

Information Collected by Us and Use Cases

As a result of Your usage of the Platform as well as the Services, the Company may collect personal information from You, in accordance with the provisions of the Policy, Terms, CEA and Applicable Law. Certain additional information generated as a result of Your usage of the Platform, such as login timings, any access of the Platform through a third-party account operated by You, may also be collected for security reasons. An exhaustive description of the information that may be collected from You and allied Use cases of Your information has been provided below for Your information, in order to facilitate Your provision of free, specific, valid, informed, unconditional, unambiguous and verifiable consent in accordance with Applicable Law and the provisions of the Policy, Terms and CEA.

Further, in the event You choose not to provide any or all of the information provided below (or alternatively, withdraw Your consent to allow Us to continue using any information that You had provided to Us earlier, or seek erasure of such information), We may be unable to offer/continue to offer Our Services to you, including creating or maintaining Your user account, providing opportunities to avail any Service etc. and may potentially have to discontinue/deactivate Your registered user account on the Platform. Alternatively, if under such circumstances, We are able to continue providing Services, the scope of Services and/or extent of Services may be adversely affected or reduced, and We may be able to provide only a significantly reduced scope of Services or usage of the Platform and its functionalities. The decision regarding discontinuation/reduction of Our Services/ Platform and deactivation of Your user account (if required) shall be solely taken at Our discretion and based upon Our evaluation of the relevant circumstances.

DISCLAIMER:

You hereby affirm and agree that You have read and understood the Policy and shall, at all times, agree to comply with the Policy in relation to Your use of the Platform and Services. Further, You agree and understand that Your voluntary use of the Platform and Services, read along with any express consents provided by You, shall constitute your actual, free, specific, valid, informed, unconditional, unambiguous and verifiable consent to the collection, use, storage, required disclosure, transfer, recording, organisation, structuring, adaptation, retrieval, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction or otherwise processing of Your personal information voluntarily provided by You. Such processing of personal information shall be for the purposes which are stipulated below. Further, this consent provided by You shall continue to be valid and applicable, unless and till such time that we receive a written request withdrawing such consent, in the manner stipulated in the Policy.

User Consent for Processing

Subject to Applicable Law, the Policy, the Terms and CEA, prior to undertaking any processing of Your personal information, the Company shall provide a consent statement and Privacy Notice along with a request for Your free, specific, informed, unconditional and unambiguous consent for processing your personal information in connection with the Services.

The Privacy Notice shall generally contain the following particulars:

Specific personal information to be provided by you (in accordance with the Privacy Policy, Terms and subject to Applicable Law);
Specific purpose(s) for collection of Your personal information;
Details of the Data Protection Officer/Company Grievance Redressal Officer as well other grievance redressal mechanisms available under Applicable Law; and
Any other material information deemed necessary for obtaining Your consent for processing Your personal information.

The Company shall not undertake any processing of Your personal information prior to obtaining Your actual, free, specific, valid, informed, unconditional, unambiguous and verifiable consent. You may exercise your rights, as provided under Applicable Law, with respect to the processing of Your personal information, including withdrawing Your consent for processing of Your personal information, at any time. Upon your exercise of your right to withdraw consent, the Company shall, within a reasonable timeframe, cease the processing of Your personal information. However, the Company may retain any such personal information for such purposes as permitted under Applicable Law.

Information We Collect and How We Use Your Information

We collect the following personal information:

Name
Official email address
Phone number

All such information is utilized for purposes of account creation on the Platform and two factor authentication.

Other Use Cases of Information Provided by a User

In accordance with Applicable Law and as per the provisions of the Policy, Terms and CEA, We may also use, at Our sole discretion, depending upon a detailed evaluation of the case/circumstance, the various categories of personal information listed above, where the same is deemed necessary for one or more of the following purposes:

To comply with the Company's legal obligations in accordance with Applicable Law;
For carrying out the Company's valid internal business purposes listed below:
- To communicate with You, such as to respond to and/or follow-up on Your grievances, complaints, requests, inquiries, issues or feedback, and to provide customer service;
- To improve services and User experience provided through the Platform;
- For marketing and promotional purposes;
- To provide ancillary services related to any of the above;
- To conduct research and analytics in order to enhance and improve the functionality of the Platform and scope of Our Services to Users; and
- To assist in internal investigations, voluntary probes, assessment of complaints, claims or allegations, audits, or to substantiate legal claims, and for any legal/judicial/administrative/regulatory associated proceedings where any disclosure or usage of such personal information is required.

Your Rights

In accordance with Applicable Law and in order to ensure the security and privacy of the information You voluntarily provide to the Company, We aim to provide you transparent information regarding certain discretionary rights which You may exercise. We shall, at all times, facilitate and ensure that You are aware of Your rights as a User, and Your choice to exercise the same through sending a written request to the Data Protection Officer/Company's Grievance Redressal Officer of Your decision to exercise Your rights, and ensure that the Company facilitates the exercise of such right within reasonable timelines thereafter, which shall be communicated to You by the Company.

As a User, You possess the following rights:

Access and review the processing practices of the Company with respect to the voluntary personal information provided by You, with details regarding all recipients of such personal information and a description of the personal information shared;
Withdrawing voluntary consent provided by You at any stage of the processing of Your personal information by Us, including a complete withdrawal of consent by You for any processing. However, please note that this may impact our ability to provide Services, subscription packages, continuation of your registered account on the Platform, and additional, affiliated services to You that may have been provided to You based on the continuation of Your consent;
If and when relevant, seek information about the identities of any third parties with whom such personal information has been shared by Us (for the various specific purposes mentioned in this Policy) and the specific description of the personal information which has been shared;
Request for correction, completion, updating, erasure or deletion of the personal information provided by You to Us;
Request for information and raising of grievances regarding the Policy, Terms or any other specific grievance concerning any Service by intimating the Grievance Redressal Officer;
Request for complete deletion of Your user account, along with all personal information associated with Your account. We shall employ reasonable operational and technical measures, safeguards to ensure that Your account and associated personal information is destroyed within a reasonable timeframe of receiving your request to do so, and no copies of such information are present with Us, except to the extent permitted or required by Applicable Law;
Nominate another individual that may, on Your behalf, subject to Applicable Law, exercise Your rights only in the specified circumstances provided under Applicable Law.

In some cases, if We are not allowed to process Your information, We may (at our sole discretion) need to terminate the Services We provide to You, which may also result in the deletion of Your account by Us.

Your Duties

Along with Your rights, in addition to any such obligations as encapsulated under Applicable Law, the Terms, CEA, You have the following duties, and non-adherence to the same shall impact Our ability to provide continued usage of the Platform and Services.

As a User, You have the following duties:

Ensuring that Your usage of the Platform and availing the Services shall not contravene the Terms, Privacy Policy, CEA as well as any Applicable Law in force;
Providing material, updated, accurate and latest information to the Company that shall be requested of You from time to time in order for the Company to continue providing the Services and access to the Platform;
Ensuring that Your usage of the Platform and availing of Services shall in no way attempt to endanger or harm or attempt to endanger or harm the Company's Intellectual Property, including the Platform;
Ensuring that You, at all times, under no circumstances, upload or distribute or share or transmit or make available in any form any User Content in violation of the Terms, Policy, CEA and Applicable Law;
Accept, unconditionally and wholly, any and all security safeguards and rules, regulations that shall be published by the Company on the Platform or otherwise communicated by the Company to You;
Ensure that You do not impersonate any other person while providing your personal information to Us at any time;
Ensure that You do not suppress any material information while providing any personal information to us for the purposes mentioned herein, or present any false or untrue information to Us at any time;
Ensure that You do not present any false or frivolous grievance or complaint against Us to any authority at any time;
Ensure that You furnish only such information to Us, that is verifiably authentic, including when exercising the right to correct or erase such information as provided herein.

Our Security Practices

In accordance with Applicable Law, We have implemented and shall continue to maintain security standards, technical and organizational measures (equivalent to and such as ISO 27001), to ensure that the security of information that You provide to Us is maintained, and that We are in a position to effectively observe the privacy standards mentioned in this Policy and mandated under Applicable Law from time to time.

We adhere to industry-standard practices to safeguard personal data and regularly review and update Our security protocols to mitigate risks and prevent data breaches. Moreover, access to Your personal information is carefully managed within the Company and shared only on a need-to-know basis. However, it is important for You to understand that no method of transmission over the internet or electronic storage is completely secure. While We strive to protect Your personal data, We cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur.

How We Store and Retain Your Information

Your personal information, voluntarily furnished by You by consenting to the Privacy Notice, usage of the Platform, and availing of the Services shall be safeguarded and secured at all times in accordance with the Policy, Terms and Applicable Law as well as additional security standards, technical and organizational measures implemented by the Company from time to time.
Any access, processing, usage, storage, retention of your personal information shall be done strictly in accordance with this Privacy Policy, Terms, Applicable Law and Privacy Notice recording your consent.
Your personal information, at all times, shall be securely stored, retained, processed, accessed in accordance with the Company's industry standard security protocols and procedures and shall only be shared, transmitted or otherwise accessed strictly on a "need-to-know" basis and every reasonable effort shall be undertaken by the Company at all times to secure your personal information against any and all unauthorised access within or outside the Company, as well as against security events such as data breaches, hacks, cybersecurity attacks etc.
The Company will strictly control access to the information and will review such access control from time to time. We will retain and use Your personal information until (a) the purpose of processing such information is achieved, and when the purpose is achieved, such information will be removed from Our systems; or (b) You withdraw Your consent for the processing of such information in accordance with Your rights mentioned in the Policy.

Notwithstanding anything to the contrary herein, the Company may retain Your personal information for a longer period if such retention is required or permitted by Applicable Law. The Company shall, within a reasonable timeframe, inform You of the Company's decision of such retention along with purpose and timeframe of retention.

How We Disclose/Transfer Your Information

All personal information that We collect may be disclosed or transferred under the following circumstances, to the categories of entities identified below:

If and when relevant, Your information may be disclosed or transferred to our corporate affiliates, group companies, subsidiaries, or any future partners or entities, in connection with the usage of the Platform and provision of Services, only to the extent required;
Your information may be disclosed or transferred to third party vendors, service providers and other third-party entities engaged by the Company to provide services such as User registration, verification, and communication such as email, in-app or whatsapp etc;
Your information may be disclosed or transferred to payment service providers in order to process Your payments in connection with the usage of the Platform and availing of Services etc.;
Your information may be disclosed or transferred to dashboard and analytics vendors for the purposes of gathering analytics on the Platform and/or the Services. We use your information and analyze your usage data to train our AI models and improve our services;
Your information may be disclosed and transferred to respond to law enforcement requests or where required to be provided under Applicable Law, court orders, or government regulations.

Where We need to share Your personal information for any additional reasons other than the reasons mentioned above, We shall, within a reasonable advance timeframe, obtain Your written consent, detailing with such request for consent, the purposes of collection, types of information required along with other material facts as shall be necessary for You to enable You to provide actual, informed consent. This shall enable You to provide informed and actual consent and, if required, request for the exercise of Your rights as provided under the Policy, subject to the provisions of the Policy and Applicable Law.

Cross-Border Data Transfers

As the Platform is accessible and available to potential and actual Users which may not reside in the Indian subcontinent, the provision of the Platform and Services to Users not residing in the Indian subcontinent shall be governed in accordance with Applicable Law, the Policy, Terms and CEA. The use, storage, processing, retention, sharing and otherwise processing of personal information voluntarily provided by Users not residing in the Indian subcontinent shall be done strictly in accordance with Applicable Law and using sophisticated security and operational safeguards, technology such as encryption, data masking etc.

Amendments/Updates to the Policy

The Policy is subject to amendments, modifications from time to time in accordance with any revision or modification in the existing laws or the enforcement of any new enactment, such as the Digital Personal Data Protection Act, 2023, and rules and regulations framed thereunder. Further, the Policy may also be modified, amended from time to time at the sole discretion of the Company. While it is your responsibility to review the Policy periodically for any updates or changes, the Company shall make commercially reasonable efforts to periodically inform You of any periodic amendments to the Terms and Privacy Policy.

Company Grievance Redressal Officer

For any complaints or disputes or queries related to the Privacy Policy, as well as the Platform, Terms, Services, You must address Your concern or address Your query within 48 (forty-eight) hours of such concern or query arising via promptly emailing the Grievance Redressal Officer/ Data Protection Officer. We will assess and take appropriate action based on the Company's policies and discussions.

Contact Information: ReachUs@stormfinance.ai
Please add to the email subject: "Re Grievance Redressal Officer: [insert Your subject matter]"

‍