Privacy Policy

This Privacy Policy applies to GreyOak Capital Intelligence Private Limited, operating under the brand name GreyOak. It explains how GreyOak may collect, process, store, disclose and protect personal data when users visit the website, create an account, subscribe to a plan, use market dashboards, submit portfolio or watchlist inputs, interact with AskGreyOak, complete GCQ assessments, contact support or otherwise use GreyOak services.

GreyOak is a capital intelligence and market analytics platform. The Platform may provide access to products and workflows such as Compass, Horizon, Seeker, AskGreyOak, Portfolio Audit, Market Pulse, Sector Analysis, GCQ, research content, educational material, portfolio-risk context and decision-support infrastructure.

GreyOak does not provide guaranteed outcomes, personal investment recommendations, assured-return services, portfolio management, brokerage execution, legal advice or tax advice.

This Privacy Policy is designed to help users understand what data may be collected, why it may be used, how it may be protected and how users may contact GreyOak regarding privacy concerns.

To make this Privacy Policy easier to understand, the following terms have the meanings set out below. These definitions apply throughout this Privacy Policy unless the context requires otherwise.

Personal Data refers to any information that can identify an individual, either directly or indirectly. This may include your name, email address, mobile number, account details, billing information, IP address, device information, browser information, usage logs, support communications, subscription details, cookies, online identifiers and any other information associated with your GreyOak account or activity on the Platform.

User means any individual who visits the GreyOak website, creates an account, purchases a subscription, uses any GreyOak product or service, contacts our support team, submits information through our Platform or otherwise interacts with GreyOak.

Platform refers collectively to all GreyOak websites, web applications, dashboards, research tools, analytics modules, market intelligence products, reports, AI-assisted features, subscription services, support channels and any other products or services operated or provided by GreyOak.

Processing means any operation performed on personal data, whether by automated or manual means. This includes collecting, recording, organizing, storing, updating, retrieving, using, analysing, combining, transmitting, sharing, anonymising, restricting, archiving, deleting or otherwise handling personal data.

Consent means a clear, informed, specific and voluntary action by a user that authorizes GreyOak to collect, use or process personal data for a particular purpose where such consent is required under applicable law. Users may withdraw consent where permitted by law, although doing so may affect the availability of certain products or services.

Account Information means the information provided when creating or managing a GreyOak account, including your name, email address, mobile number, login method, authentication details, profile details, subscription status, communication preferences and other account-related information.

Portfolio Inputs include any investment-related information voluntarily submitted by a user, such as portfolio holdings, stock symbols, quantities, average purchase prices, allocation details, sector exposure, watchlists, investment preferences, uploaded portfolio files and other market-related information used to generate analytics, reports and product outputs.

Watchlist Data means any list of securities, financial instruments, sectors or other market assets that a user chooses to save, monitor or track within the Platform for research, alerts or analytical purposes.

AskGreyOak refers to GreyOak's AI-assisted conversational platform that processes user questions, prompts, product context, market information and platform outputs to generate explanations, educational insights, research assistance and decision-support information.

GCQ refers to GreyOak Capital Quotient and related behavioural assessment tools that may analyse questionnaire responses, behavioural preferences, investment habits and capital decision patterns to generate educational insights and self-assessment outputs.

Product Outputs refer to reports, dashboards, portfolio analysis, market insights, risk assessments, charts, visualisations, probability scores, historical analysis, AI-generated explanations, quantitative models and other information generated by the Platform in response to user requests or product workflows.

Service Provider means any trusted third-party organization or technology partner engaged by GreyOak to support the operation of the Platform. This may include providers of cloud hosting, payment processing, infrastructure, authentication, analytics, communication services, cybersecurity, customer support, email delivery, performance monitoring, data storage and other business services.

Subscription means any paid or free plan offered by GreyOak that provides access to one or more products, dashboards, research tools, analytics modules or other Platform features for a specified period and subject to the applicable Terms and Conditions.

Cookies and Similar Technologies refer to cookies, pixels, local storage, analytics tags and similar technologies that help GreyOak remember user preferences, secure accounts, improve website performance, analyse usage and enhance the overall user experience.

Third-Party Services means websites, applications, software providers, payment gateways, cloud infrastructure providers, market-data vendors, analytics providers or other external organizations that integrate with or support the operation of GreyOak but are not owned or directly controlled by GreyOak.

Aggregated Data means information that has been combined with data from multiple users in a way that does not identify any individual user and is used for statistical analysis, benchmarking, research, reporting or product improvement.

Anonymised Data means information that has been processed so that it can no longer reasonably identify a specific individual. GreyOak may use anonymised data for research, product development, analytics, performance monitoring and educational purposes.

Unless otherwise stated, words used in the singular include the plural, and words used in the plural include the singular where the context requires. References to “including” or “includes” mean “including without limitation.”

The information GreyOak collects depends on how a user interacts with the Platform. We aim to collect information that is reasonably required for product access, security, billing, support, analytics and user-requested workflows.

GreyOak may collect Account Information, such as name, email address, mobile number, login method, account settings, subscription status and user preferences. This helps us create accounts, authenticate users, manage product access and communicate important service information.

GreyOak may collect Subscription and Billing Information, such as selected plan, invoice details, payment status, transaction reference, tax metadata, renewal status, refund history and billing support communication. This helps us process subscriptions, issue invoices, manage access and respond to billing queries.

GreyOak may collect Product Usage Information, such as pages visited, dashboards opened, filters used, report generation activity, clicks, search queries, feature usage and workflow activity. This helps us improve product design, troubleshoot issues, understand feature demand and secure the Platform.

GreyOak may collect Portfolio and Watchlist Inputs, such as holdings, stock symbols, quantities, allocation values, sector exposure, watchlists, uploaded files or self-entered investment context. This helps us generate Portfolio Audit, Stress Test, watchlist, exposure and other user-requested analytical outputs.

GreyOak may collect AskGreyOak Interactions, such as prompts, questions, product-context requests, responses, feedback, conversation metadata and safety logs. This helps us provide explanations, improve answer quality, detect misuse and maintain service reliability.

GreyOak may collect GCQ and Behaviour Inputs, such as questionnaire responses, behavioural preferences, risk-style indicators and capital decision-pattern outputs. This helps us create educational capital-behaviour insights and support self-awareness workflows.

GreyOak may collect Support and Communication Data, such as emails, forms, chats, attachments, feedback, complaint records and support history. This helps us answer queries, resolve complaints, maintain records and improve support quality.

GreyOak may collect Device and Technical Information, such as IP address, browser type, operating system, device information, cookies, log data, crash reports and performance metrics. This helps us operate, secure, debug and improve the website, dashboards and user experience. GreyOak may collect Security and Fraud-Prevention Data, such as login attempts, suspicious activity logs, abuse signals, access timestamps and device or session identifiers. This helps us protect users, prevent unauthorized access and maintain platform integrity.

GreyOak does not ask users to submit unnecessary sensitive personal information. Users should avoid entering passwords, OTPs, banking credentials, private keys, full payment credentials, medical information or confidential third-party data into GreyOak forms, dashboards or AI-assisted prompts.

GreyOak may allow users to submit, upload or enter portfolio holdings, watchlists, allocation details, sector exposure, investment preferences, benchmark choices or market-related inputs. These inputs are used to generate user-requested outputs such as Portfolio Audit, Stress Test, exposure views, concentration analysis, sector comparison, watchlist context, benchmark comparison and product explanations.

We understand that portfolio information can be sensitive because it reflects a user's capital decisions, market exposure and personal investment behaviour. GreyOak treats such information as product data and uses it only for relevant service, support, product-quality, security and compliance purposes described in this Privacy Policy.

Portfolio and watchlist inputs may be used to generate user-requested analytics, display portfolio-risk context, explain diversification or concentration, support portfolio-related dashboards, improve product reliability, troubleshoot technical issues, detect misuse and create aggregated or anonymised product-quality insights.

Portfolio data is not used to provide guaranteed outcomes or personal investment advice. GreyOak does not execute trades, place orders, manage money, act as a broker or make investment decisions on behalf of users.

Users should avoid uploading information that is not required for the intended workflow. Where possible, users should review uploads and remove unnecessary personal identifiers before submission.

Aggregated or anonymised portfolio patterns may be used for product-quality analysis, research, benchmarking, model monitoring or educational insights, provided such use is not intended to publicly identify a specific user.

Important: GreyOak analytics are decision-support outputs. Users remain responsible for their own investment decisions, suitability assessment, position sizing, tax treatment, risk controls and trading actions.

AskGreyOak may process user questions, prompts, product-output context, conversation metadata and feedback to generate explanations. GCQ may process questionnaire responses and behavioural inputs to create educational capital-behaviour insights. These features are designed to help users understand data, market context, platform outputs and decision patterns more clearly.

AskGreyOak, AI-assisted features and GCQ interactions may be used to answer user questions, explain GreyOak product outputs, provide educational market context, improve response quality, debug product issues, detect misuse, prevent abuse, support user queries and improve platform workflows.

Users should not enter unnecessary sensitive personal details, passwords, OTPs, bank credentials, private keys, full payment information, confidential third-party information, medical information or any information they do not want processed by a digital service.

AI-assisted explanations may occasionally be incomplete, inaccurate, outdated or unsuitable for a user's specific situation. Important decisions should be verified using independent research, official sources, professional advice where appropriate and the user's own risk standards.

GreyOak may monitor AI-assisted interactions for safety, abuse prevention, product improvement and service reliability.

GreyOak may use personal data and user-submitted information for service, product, security, billing, support and legal purposes.

GreyOak may use information to create, authenticate and manage user accounts. We may use information to provide access to dashboards, reports, analytics products and support channels. We may use information to generate user-requested outputs such as Compass context, Horizon scenarios, Seeker workflows, Sector Analysis, Portfolio Audit, Stress Test, GCQ results and AskGreyOak explanations.

GreyOak may use information to process subscriptions, invoices, plan changes, renewals, refunds and payment-related support. We may use information to send service messages, account notices, product updates, security alerts and support responses.

GreyOak may use information to improve dashboard usability, product reliability, model interpretation, support quality and user experience. We may use information to monitor platform performance, troubleshoot errors and prevent downtime.

GreyOak may use information to detect fraud, abuse, unauthorized access, scraping, bot activity, policy violations or security threats. We may use information to maintain records needed for accounting, tax, legal, compliance and dispute-resolution purposes.

GreyOak may use information to respond to user requests, complaints, grievances and support tickets. We may also use information to comply with applicable laws, contractual obligations, audits, dispute resolution and lawful requests.

GreyOak may use de-identified, aggregated or anonymised data for analytics, product research, benchmarking, performance monitoring, educational insights and model-quality review, provided such use is not intended to identify a specific user.

GreyOak processes personal data where there is a valid reason to do so under applicable law. Depending on the context, this may include user consent, performance of a contract, providing requested services, compliance with legal obligations, fraud prevention, platform security, support response, billing support, grievance handling and legitimate business purposes where permitted by law.

Where GreyOak relies on consent, users may have the right to withdraw consent where applicable. Withdrawal of consent may affect GreyOak's ability to provide certain products, dashboards, alerts, analytics, AI-assisted outputs or support services.

Withdrawal of consent does not affect processing already completed before withdrawal. It also does not prevent GreyOak from retaining information where required for legal, tax, accounting, security, fraud-prevention, dispute-resolution or regulatory purposes.

GreyOak aims to process personal data in a manner that is fair, reasonable, secure and proportionate to the purpose for which the information is collected.

GreyOak may collect and process subscription-related information when users purchase a plan, renew access, request invoices, change plans, cancel subscriptions or raise billing queries.

Subscription and billing information may include selected plan, billing cycle, invoice details, GST or tax information, payment status, payment reference number, renewal status, refund history, subscription expiry date and billing support communication.

Payments may be processed through authorized third-party payment gateways or payment service providers. GreyOak does not intend to store complete debit card, credit card, UPI credentials, banking passwords or full payment authentication information on its own systems.

Payment providers may collect and process payment information according to their own terms and privacy policies. Users should review the relevant payment provider's terms during checkout.

GreyOak may use billing data to process subscriptions, issue invoices, manage product access, verify successful payments, support refunds or cancellations, prevent payment abuse, detect fraudulent transactions and comply with tax and accounting obligations.

If payment fails, is reversed, is disputed or appears suspicious, GreyOak may suspend or restrict account access until the issue is resolved.

GreyOak may use cookies, pixels, local storage, analytics tags and similar technologies to operate the website, remember preferences, improve performance, understand product usage, secure sessions and measure the effectiveness of content or product flows.

Essential cookies may be used for login, authentication, security, session continuity and basic website functionality.

Preference cookies may be used to remember user settings, display preferences and dashboard configuration where enabled.

Analytics cookies may be used to understand traffic, product usage, feature demand, drop-offs and performance issues.

Support or communication tools may be used to manage contact forms, support chat, help requests and user feedback.

Payment or checkout tools may be used to support subscription payments, transaction verification and billing workflows.

Security tools may be used to detect suspicious activity, bot behaviour, unauthorized access and technical abuse.

Marketing or measurement tools may be used to measure campaign performance, referral traffic, content engagement and product awareness where permitted.

GreyOak may use analytics platforms, performance-monitoring tools, support tools, email tools or marketing pixels depending on product and business needs. The specific tools used may change from time to time.

Users can manage cookies through browser settings. Some product features may not work correctly if essential cookies or storage functions are disabled.

GreyOak may share limited information only where reasonably necessary to operate, protect, improve or legally manage the Platform.

GreyOak may share information with cloud hosting, database, infrastructure and security providers. We may share information with payment gateways, billing tools, invoice processors and tax-support systems. We may share information with email, customer-support, notification and communication service providers.

GreyOak may share information with analytics, product-quality and performance-monitoring tools. We may share information with professional advisers such as legal, accounting, audit, compliance and cybersecurity consultants.

GreyOak may share information with regulators, courts, law-enforcement authorities or government bodies where required by applicable law or lawful process.

GreyOak may share information with successor entities in connection with a merger, acquisition, restructuring, investment, financing or sale of business assets, subject to appropriate safeguards.

GreyOak does not authorize service providers to use user personal data for their own independent marketing unless the user has separately agreed with that provider or unless permitted by applicable law.

Service providers are expected to process information only for the purposes for which they are engaged and to apply reasonable confidentiality, security and data-protection practices.

GreyOak may also disclose information where it believes in good faith that disclosure is necessary to protect user safety, prevent fraud, enforce terms, respond to legal claims, investigate abuse or protect the rights, property or security of GreyOak, users or the public.

GreyOak may use technology providers, infrastructure services or support systems that process information in India or other jurisdictions. Where personal data is transferred or processed outside India, GreyOak aims to apply reasonable contractual, technical and organizational safeguards consistent with applicable law.

Users accessing GreyOak from outside India acknowledge that their information may be transferred to, stored in or processed in India and other jurisdictions where GreyOak or its service providers operate.

Some third-party tools, such as cloud, analytics, payment, communication, authentication or security providers, may have their own privacy terms. Users should review those terms where the provider directly interacts with them, such as during payment or checkout flows.

Cross-border processing may be necessary for hosting, security, analytics, support, payment verification, email delivery, performance monitoring and product reliability.

GreyOak retains personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain accounts, generate requested outputs, resolve support issues, meet legal or tax obligations, secure the Platform, prevent fraud and enforce agreements.

Account records may be maintained while the account is active and for a reasonable period afterward for support, security and legal purposes.

Subscription and billing records may be retained as required for tax, accounting, invoice, audit and payment-dispute purposes.

Support records may be retained to resolve complaints, improve support quality and maintain service history.

Security logs may be retained to investigate misuse, unauthorized access, scraping, bot activity or platform abuse.

Portfolio and watchlist inputs may be retained while required for user workflows, account history, support, product-quality purposes or legal needs, unless deleted or anonymised in accordance with applicable law and platform policy.

AskGreyOak and GCQ interactions may be retained as needed for service delivery, safety, quality improvement, troubleshooting and abuse prevention.

Aggregated or anonymised data may be retained for product analytics, benchmarking, research and model-quality review where it does not identify a specific user.

When personal data is no longer required, GreyOak will delete, anonymise, archive or restrict it in accordance with internal retention practices and applicable law.

Certain information may continue to be retained even after account deletion where required for legal, tax, security, fraud-prevention, dispute-resolution or regulatory purposes.

GreyOak uses reasonable technical and organizational measures to protect personal data and platform integrity.

These measures may include access controls, authentication systems, role-based internal access, encryption in transit where appropriate, secure hosting practices, logging, monitoring, backup practices, internal confidentiality restrictions, security review processes, abuse detection, bot prevention, scraping prevention, fraud monitoring and payment-security controls through authorized payment partners.

No digital platform can guarantee absolute security. Users also play an important role in keeping their account safe.

Users should avoid sharing passwords, OTPs or account access.

Users should use strong and unique passwords where password-based login is enabled.

Users should log out from shared devices, keep devices and browsers updated and contact GreyOak promptly if unauthorized access is suspected.

Users should also avoid uploading unnecessary personal or sensitive details into dashboards, portfolio uploads or AI-assisted prompts.

Security notice: GreyOak will never ask users to share passwords, OTPs, full payment credentials, private banking credentials or private keys through support conversations.

If GreyOak becomes aware of a personal data breach or security incident that is likely to affect users, GreyOak may take steps to investigate, contain and remediate the incident.

Where required by applicable law, GreyOak may notify affected users, relevant authorities or other required parties. The nature, timing and content of any notification may depend on the type of incident, the information affected, legal requirements and the steps needed to reduce harm.

Users should contact GreyOak immediately if they believe their account has been accessed without authorization or if they notice suspicious activity connected to their GreyOak account.

Subject to applicable law, users may have rights relating to their personal data. These may include the right to request access to personal data processed by GreyOak, request correction or updating of inaccurate information, request deletion or erasure where applicable, withdraw consent where processing is based on consent, raise privacy grievances or complaints through GreyOak's support process and request information about the processing of personal data where required by applicable law.

Users may also have nomination-related rights where applicable under Indian data-protection law.

To make a privacy request, users should contact GreyOak through the official support channel or email address listed in this Privacy Policy. Users should include their registered email or account identifier, the type of request and enough information for identity verification.

GreyOak may refuse, restrict or delay a request where permitted or required by law, including where information must be retained for legal, tax, security, fraud-prevention or dispute-resolution purposes.

GreyOak aims to respond to privacy requests within a reasonable period and in accordance with applicable law. Some requests may require verification before action is taken.

GreyOak may use automated systems, AI-assisted features, quantitative models, statistical tools, screening logic, historical analysis, pattern recognition or algorithmic workflows to generate analytics and platform outputs.

These systems may process user inputs, market data, portfolio information, watchlists, behavioural responses or product activity to generate dashboards, explanations, risk context, research workflows or educational insights.

Automated outputs are intended for information, education, analytics and decision support only.

They should not be interpreted as personalized investment advice, guaranteed predictions, assured returns, instructions to buy, sell or hold, suitability recommendations, portfolio management, brokerage execution, legal advice or tax advice.

Users remain responsible for reviewing outputs, verifying information, assessing suitability, applying risk controls and making their own decisions.

GreyOak may use aggregated, de-identified or anonymised output patterns to monitor model quality, improve product reliability, identify errors and enhance user experience.

GreyOak is intended for users who are legally capable of using financial-information products, creating accounts and entering subscriptions.

GreyOak does not knowingly collect personal data from children without appropriate consent where required by law.

Parents or guardians who believe that a child has provided personal data to GreyOak should contact GreyOak through the official support or contact channel so the issue can be reviewed.

Users who are not legally capable of entering into a binding agreement should not create an account, purchase a subscription or submit personal data to GreyOak without appropriate authorization.

GreyOak may send service-related messages such as account notices, login alerts, security alerts, subscription updates, invoice notices, payment notices, dashboard alerts, policy updates, product changes, support responses, grievance responses and maintenance notifications.

These messages are important for operating the Platform and may not always be optional.

GreyOak may also send product updates, educational content, market-intelligence notices, feature announcements or promotional messages where permitted by law and user preferences.

Users can opt out of non-essential marketing communications using the unsubscribe option, account preference controls or by contacting GreyOak support.

Opting out of marketing messages does not prevent GreyOak from sending essential service, security, billing, legal or account-related communications.

GreyOak may link to third-party websites, market-data sources, payment gateways, support tools, cloud services, analytics tools, educational content or external resources.

GreyOak is not responsible for the privacy practices, content, accuracy, security or policies of third-party websites or services that it does not control.

Users should review the privacy policy and terms of any third-party service before submitting information to it.

Third-party integrations may be added, changed or removed as GreyOak develops the Platform, improves reliability or updates service providers.

GreyOak may update this Privacy Policy from time to time to reflect product changes, legal requirements, technology changes, vendor changes, business updates or improvements in privacy practices.

Material updates may be communicated through the website, dashboard, email, account notice or other reasonable methods.

The updated version will show the latest effective date and last updated date.

Continued use of GreyOak after an updated Privacy Policy becomes effective means the user has read and accepted the updated Privacy Policy, subject to applicable law.

Users are encouraged to review this page periodically to stay informed about how GreyOak protects and processes personal data.

For privacy questions, correction requests, deletion requests, consent withdrawal, account-data concerns, subscription-related privacy queries or grievance support, users may contact GreyOak using the details below.

GreyOak may verify the identity of a person making a privacy request before acting on the request. This helps protect user accounts and prevent unauthorized access to personal data.

By using GreyOak, users acknowledge that they have read and understood this Privacy Policy.