Privacy Policy

Last updated: 24 August 2026

FINWEL is a personal finance platform operated by Aadidaivam International Private Limited, ("ADI"). Through FINWEL, you can prepare and file your income tax returns with review and certification by a Chartered Accountant, invest in mutual funds through an AMFI-registered distributor (ARN-192326), and invest in overseas stocks, mutual funds, and ETFs through our tie-up with a Global Access Provider authorised by the International Financial Services Centres Authority (IFSCA). You can also maintain your KYC and investment records, book consultations with a Chartered Accountant, and use financial planning tools for insurance, borrowing, fixed income, and retirement.

To do any of this, we necessarily handle information about you that is personal, financial and, in places, sensitive. This Policy explains what we collect, why we collect it, who we share it with, how long we keep it, how we protect it, and what you can require us to do with it.

1. Who this applies to

This Policy applies to every natural or legal person who visits finwel.adiint.com or any FINWEL website, mobile application or extension of it; who creates a FINWEL account; who uploads documents, books a consultation, purchases a plan, or transacts through FINWEL; or who otherwise corresponds with us in connection with the platform. It applies to users accessing or using FINWEL within India as well as from outside India, including resident individuals and non-resident Indians (NRIs).

An account is required to file an income tax return, upload documents, complete KYC, communicate with a Chartered Accountant, place mutual fund transactions, and invest in global stocks, mutual funds, and Exchange-Traded Funds (ETFs).

By accessing or using FINWEL, you acknowledge that you have read and understood this Privacy Policy. Where processing requires your consent under applicable law, we will obtain such consent for the specific purpose concerned. Your use of FINWEL does not constitute blanket consent to all processing activities.

2. What FINWEL does, and what it does not

This is important from a privacy perspective, as it defines the scope and limits of how we collect, use, and process your personal data.

FINWEL is a technology platform that enables users to prepare and file income tax returns, invest in mutual funds, and access global stocks and ETFs. Returns prepared on FINWEL are reviewed and certified by a practising Chartered Accountant before filing.

Aadidaivam International Private Limited (ADI), which operates FINWEL is an AMFI-registered mutual fund distributor (ARN-192326) and offers execution-only, non-discretionary distribution.

ADI, which operates FINWEL, acts as a referral partner of a Global Access Provider authorised by IFSCA and provides execution only, non-discretionary distribution services.

We do not sell, rent or trade your personal data. We do not share it for third-party advertising.

3. The information we collect

Not all of this applies to every user. What we hold depends on which parts of FINWEL you actually use.

Your account. Name, email address, mobile number, date of birth, gender, address and your saved preferences. Your password is stored only as a cryptographic hash, so nobody at FINWEL can read it. If you sign in with Google, we get your name, email address and a profile identifier from Google, and nothing else.

Your tax details. PAN, Aadhaar, residential status, assessment year, each head of income and its break-up, the deductions and exemptions you claim, the bank account your refund goes to, and the computation that comes out of it. If you bring in your AIS or TIS, those figures too.

What you upload. Form 16, Form 26AS, AIS and TIS downloads, salary slips, interest and dividend statements, capital gains statements from your broker or registrar, rent receipts, home loan certificates, investment proofs, insurance documents, and anything else you attach to a filing or send to your Chartered Accountant.

Your KYC and investment onboarding. If you transact in mutual funds, the industry's onboarding standards require a specific set of fields, and we collect them: PAN, your KYC status and which KRA completed it, bank account number, IFSC and account type, holding mode and holding type, your CDSL or NSDL depository details, nominee details, occupation, gross annual income band, source of funds, whether you are a politically exposed person, place and country of birth, citizenship and tax residency, and the FATCA and CRS declarations.

Your payments. Plans and consultations you buy, order references, amounts, dates, GST particulars and invoices, plus your mutual fund orders, folios, holdings and watchlist. Payments run through payment gateway. Your card number, CVV, UPI PIN and net-banking credentials are typed on payment gateway screen, not ours. We never see them. What comes back to us is the amount, the status and a payment reference.

Your conversations. Messages with the Chartered Accountant working on your filing, support requests, booking requests and the notes you write about what you want to discuss, and any email or phone correspondence with us. Consultation calls involve screen sharing. We do not record them unless we tell you beforehand and you agree.

Technical information. IP address, device and browser, operating system, which pages you opened, which features you used, how long a session lasted, sign-in events, and error and security logs. If you use a passkey, the check happens on your own device. Your fingerprint and face data never reach us.

Your global investments. If you invest in global stocks, mutual funds or Exchange-Traded Funds (ETFs), we may collect your identity and tax details, bank and remittance information, FATCA/CRS and LRS declarations, client identifiers, order and trade details, holdings, transaction values, dividends, statements and related tax records received from our Global Access Provider and other intermediaries.

Where else it comes from. Most of what we hold, you gave us. Some of it reaches us from the Chartered Accountant firm working on your filing, from KRAs and registrars when we verify your KYC status, from fund houses and their registrars in relation to your folios, from payment gateway, and from government portals when you choose to import your own records.

4. Why we collect it

Every item in Section 3 is used for the purposes below, and for nothing else.

  • To create, authenticate and secure your account, including sign-in, password reset, email and mobile verification, and detection of unauthorised access.
  • To prepare, compute, review and file your income tax return, including making it available to the Chartered Accountant who reviews and certifies it, generating your computation, and producing your PDF and Excel downloads.
  • To facilitate mutual fund transactions as an AMFI-registered distributor, including completing onboarding, transmitting orders, and maintaining your folio, order and holding records.
  • To complete and maintain KYC and the declarations required under FATCA, CRS and applicable anti-money-laundering norms.
  • To process payments for plans and consultations, issue invoices and receipts, and maintain the GST and accounting records the law requires.
  • To schedule and deliver consultations with a Chartered Accountant and to send meeting confirmations and links.
  • To provide support, respond to your questions, and investigate and resolve complaints.
  • To comply with legal, tax and regulatory obligations, including record retention, responding to lawful demands from tax, regulatory, judicial and law-enforcement authorities, and cooperating with audits.
  • To operate, maintain, secure and improve the platform, including diagnostics, capacity planning, fraud and abuse prevention, and fixing defects.
  • To send you service communications filing deadlines, document requests, order confirmations, alerts about your account, and changes to this Policy or our Terms.
  • To send you marketing communications about FINWEL's own services, where you have opted in, and only until you opt out.
  • To facilitate investments in global stocks, mutual funds and ETFs including onboarding, transmitting orders, maintaining transaction and holding records, and supporting related regulatory and reporting requirements.

We do not use your tax data, uploaded documents or transaction history for advertising, for profiling unrelated to the services you have asked for, or to train third-party artificial intelligence models.

5. Consent and Withdrawal of Consent

Where processing is based on your consent, such consent will be sought for a specified purpose in accordance with applicable law.

You may withdraw consent for future processing through the mechanism made available on FINWEL or by contacting us.

Withdrawal of consent:

  • will not affect processing lawfully undertaken before withdrawal;
  • may not require deletion of information that must be retained under law;
  • will not prevent processing permitted without consent under applicable law; and
  • may make it impossible for FINWEL or the relevant service provider to continue providing a Service where the information is necessary for that Service.

We endeavour to make withdrawal of consent reasonably accessible and comparable to the mechanism through which consent was provided.

6. PAN, Aadhaar and other sensitive identifiers

These receive additional care.

PAN is collected because the Income-tax Act requires it on your return and because it is the primary identifier for KYC in the securities market. Itis used only for those purposes.

Aadhaar is collected because Aadhaar--PAN linkage and Aadhaar-based e-verification are part of the income tax filing process, and because Aadhaar may serve as proof of identity or address for KYC.; where an alternative is available under law you may use it instead. Once saved, your Aadhaar number is displayed to you in masked form (as XXXX XXXX 1234) and is stored in encrypted form.

FINWEL is not an Authentication User Agency or a KYC User Agency. We do not run Aadhaar biometric authentication, and we do not collect or store biometric data of any kind. Your Aadhaar number does not go to anyone outside the tax filing or KYC purpose you gave it for, unless the law compels us.

Passport may be collected where required for identity verification, overseas investment onboarding, KYC, tax residency, FATCA/CRS compliance or other regulatory requirements applicable to global investments. Passport details are used only for these purposes and are stored securely.

Bank and demat details are used to route your refund, register your mandate and credit units to the right account. Nothing else.

Security of your credentials. FINWEL will never request your net-banking password, broker password, UPI PIN, CVV or similar confidential credentials through email, chat, telephone or any other communication channel. You should never disclose such information to anyone claiming to act on behalf of FINWEL. Any suspicious request should be reported to us promptly.

7. Who else sees it

The Chartered Accountant on your filing. They can see your filing and the documents attached to it, because they cannot certify a return they cannot read. Chartered Accountants carry their own duty of confidentiality under the Chartered Accountants Act, 1949 and the ICAI Code of Ethics, and breaking it is professional misconduct with consequences for their licence. Access is limited to the professional handling your matter, not the firm at large.

Our own people. Support and administrative staff, where their role requires it, under role-based access. Not everyone at ADI International can open your file.

Tax and government authorities. Your return is filed with the Income Tax Department. Beyond that, we hand over information when a statute, a court, a tribunal, a regulator or a law enforcement agency lawfully requires us to.

The mutual fund industry. Fund houses, their registrars, KRAs, the exchange platforms that carry mutual fund orders, and the depositories to the extent your onboarding and your transactions need it.

Companies that process data for us, under contracts that tie them to our purposes and our security standards: our cloud hosting and database provider, payment gateway, our transactional email provider, and our authentication infrastructure. They work to our instructions and cannot use your data for their own ends.

Our auditors and lawyers, where a matter requires it, under confidentiality.

A buyer or successor, if ADI International is ever merged, acquired or restructured. Your data would move with the business, the recipient would be held to protections no weaker than these, and we would tell you.

We do not disclose your personal data to any other category of recipient except where such disclosure is necessary for a specified purpose, authorised by you, required for providing a Service, or required or permitted under applicable law

8. Cookies and similar technologies

FINWEL uses cookies and local browser storage that are strictly necessary for the platform to work to keep you signed in, to maintain your session securely, to remember your preferences such as theme, and to protect against cross-site request forgery and automated abuse. These cannot be disabled without breaking the service.

Where we use analytics cookies to understand how the platform is used and where it fails, we do so on an aggregated basis. You may control cookies through your browser settings; blocking strictly necessary cookies will prevent you from signing in.

We do not use advertising cookies and we do not permit third-party advertising trackers on FINWEL

9. How long we keep it

We keep your information for as long as your account is active and thereafter only for as long as a lawful purpose requires.

In practice: Filing records, computations, and supporting documents are retained for the periods required under applicable income-tax laws, including the Income-tax Act, 2025 and, where applicable, the transitional provisions of the Income-tax Act, 1961, as well as the record-keeping obligations applicable to the Chartered Accountant who reviewed the return.

KYC records and mutual fund transaction records are retained for the periods prescribed under applicable anti-money-laundering and securities-market record-keeping norms.

Payment, invoice and GST records are retained for the periods required under the Central Goods and Services Tax Act, 2017 and the Companies Act,2013.

Account and technical logs are retained for a shorter operational period, sufficient for security investigation and dispute resolution.

When a retention period ends and no other lawful purpose applies, we erase the data or irreversibly anonymise it. Anonymised, non-identifying data may be retained for statistical purposes. If you close your account, we will erase what we are not required to keep, and retain the balance in restricted-access storage until its statutory period expires.

10. How we protect it

Encryption in transit and at rest, with sensitive identifiers encrypted at the field level. Access controls that scope every filing, document and record to the account it belongs to. Role-based permissions, so a Chartered Accountant sees the matters assigned to them and no others. Passwords stored as encrypted hashes, with OTP verification and passkeys available. Logging of access and sign-in activity. Contractual security obligations on every provider we use, reviewed periodically.

Your responsibilities. You are responsible for maintaining the confidentiality and security of your account credentials. Use a strong, unique password, sign out when using shared devices, and notify us immediately if you suspect any unauthorised access to your account.

11. Your rights

Subject to applicable law and the commencement of the relevant statutory provisions, you may have the right to obtain information regarding your personal data being processed by us, request correction, completion or updating of inaccurate or incomplete personal data, request erasure where legally permissible, withdraw consent where processing is based on consent, raise a grievance and nominate another individual to exercise your rights in the event of death or incapacity.

11. Changes to this Policy

We may update this Policy as our services, service providers, data processors or applicable laws change. The "Last updated" date at the top reflects the current version. Where a change is material such as the introduction of a new processing purpose, a new category of recipient, or a significant change to our data-retention practices we will provide appropriate notice.

12. Grievance redressal

If you are dissatisfied with how we have handled your personal data, contact our Grievance Officer:

Grievance cell

Email: legal@adi.international

Phone: +91 95377 72558

Availability: Monday to Saturday, 10:00 a.m. to 7:00 p.m. IST

We will acknowledge your grievance promptly and respond within the timelines prescribed under applicable law.