Last updated 28 September 2026
01Who this policy covers
Mindstack Technologies Pvt. Ltd. ("Mindstack", "we", "us") builds and operates MaxWealth, CommissionIQ, SIP Doctor and Studio, and runs this website at maxwealth.money. This policy explains how personal data is handled in two settings.
- On this website, where we decide what is collected and why. For this data Mindstack is the data fiduciary under the Digital Personal Data Protection Act, 2023.
- Inside the platform, where a distributor, adviser or wealth firm (our client) uses our software to serve its own investors. The client decides what investor data is collected and why, and Mindstack processes it on the client's instructions as its data processor.
It is written to meet the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023.
02What we collect on this website
Browsing the site does not require you to give us any personal details. We collect data in these cases:
- When you request a demo: your name, work email, phone number, firm name if you give one, the product you are interested in, your AUM range, your message, and the page you came from.
- When you book a call: scheduling is handled by Calendly, which collects the details you enter under its own privacy policy and shares the booking with us.
- Analytics: in production we use Google Analytics to count visits and see which pages are read. It records the pages you view, your device and browser, your approximate location from your IP address and the site that referred you, and it sets cookies to do so.
- The firm name you type into the home page preview is kept in your browser tab's session storage so the preview can use it. It is not sent to us and is cleared when you close the tab.
03What the platform processes
Our clients use the platform to onboard investors and run their practice, so it holds the data those workflows need:
- Investor identity and KYC details such as name, PAN, date of birth, address, contact details, tax status and FATCA declarations.
- Bank account, mandate and nominee details needed to place and settle mutual fund transactions.
- Holdings, transactions, SIPs, goals and reports, including data received from BSE StAR MF, registrars such as CAMS and KFintech, and fund houses.
- Details of the client's own staff and sub-brokers who log in, and records of what each user did.
- Technical logs such as IP address, device and time of access, kept for security and troubleshooting.
Investors who want to know what their distributor holds about them should contact that distributor first, since it controls the data. We will help the distributor answer.
04Why we use it
Website data is used to answer your enquiry, arrange and run a demo, send a quote, and follow up about the product you asked about. Analytics data tells us which pages are useful so we can improve the site.
Platform data is used only to provide the service our client signed up for: onboarding, order placement, reporting, reminders, support and keeping the system secure. Using investor data for our own marketing, or selling it, is something we never do.
Where the law requires consent we ask for it, and you can withdraw it at any time by writing to us. Withdrawal does not affect processing that already happened.
07Where it is stored
Platform data is stored on servers in India. Demo requests reach our team by email through a delivery provider, and Google Analytics data is processed by Google; both may handle data outside India under their own safeguards.
08How we protect it
Data moves between your browser and our servers over encrypted connections. Each client's data sits in its own database, access inside a client's workspace depends on the user's role, and our own staff reach production systems only when a support or operations task needs it.
Even with these controls a breach remains possible. If one affects your personal data, we will inform the affected clients, the Data Protection Board of India and you as the law requires.
09How long we keep it
Demo requests and related emails are kept for up to 24 months after our last contact with you, then deleted, unless you become a client.
Platform data is kept for as long as the client's agreement runs and for any further period the client's regulatory record-keeping requires. When an agreement ends, the client can export its data, after which we delete it within the period set out in that agreement.
10Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- ask for a summary of the personal data we hold about you and how it is used
- ask us to correct, complete or update it
- ask us to erase it, where it is no longer needed and the law does not require us to keep it
- withdraw consent you gave earlier
- nominate someone to exercise these rights if you die or become unable to
- raise a grievance with us, and then with the Data Protection Board of India
For website data, write to enquiries@mindstack.in. For data held in a distributor's workspace, ask that distributor, and we will support them in responding.
11Children
This website is meant for businesses and is not directed at anyone under 18. The platform can hold folios opened for minors, which our clients manage on the instructions of the minor's guardian.
12Grievance Officer
Questions or complaints about personal data can go to the Grievance Officer, Mindstack Technologies Pvt. Ltd., at enquiries@mindstack.in, or by post to Anantha Arcade, Bajpe Main Rd, Marakada, Kavoor, Mangalore, Karnataka 575015, India.
We respond within one business day and aim to resolve every grievance within 30 days.
13Changes to this policy
When this policy changes, the date at the top of the page changes with it. Clients get notice of material changes in advance. How we treat the platform itself is also covered by our terms of use.