Privacy Policy

Last updated: May 1, 2025

1. Introduction

SOSM Services Pvt. Ltd. ("SOSM," "we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information about you when you use the School of Stock Market platform ("Platform"). This policy is aligned with the Digital Personal Data Protection Act 2023 (DPDPA) and the Information Technology Act 2000.

2. Data We Collect

Identity Data: Full name, PAN number, Aadhaar number (masked), date of birth, photograph for KYC.

Contact Data: Email address, mobile number, mailing address.

Financial Data: Income details, investment portfolio data, bank account information (for transaction facilitation only), tax-related information.

Usage Data: Log files, IP addresses, browser type, pages visited, time spent on platform, device information.

Communication Data: Messages sent to advisors or support team, feedback, survey responses.

3. How We Use Your Data

We use your data to:

  • Provide and improve the SOSM platform and services
  • Facilitate connections with SEBI-registered advisors
  • Complete KYC and regulatory compliance requirements
  • Process transactions through regulated financial partners
  • Communicate important platform updates and regulatory notices
  • Provide customer support and resolve disputes
  • Analyze platform usage for improvements (using anonymized data)
  • Comply with applicable laws, SEBI regulations, and RBI guidelines

4. Third-Party Sharing

We share your data only in limited circumstances:

SEBI-Registered Advisors: With your explicit consent, we share relevant financial information with advisors you engage through the platform.

AMFI-Registered Partners: For mutual fund transactions, we share KYC and transaction data with our registered distribution partners.

Regulatory Authorities: We may share data with SEBI, RBI, or other regulatory bodies when legally required.

Technology Partners: Cloud infrastructure providers (with appropriate data processing agreements) who process data only as instructed.

We do not sell your personal data to any third party for commercial purposes.

5. Your Rights Under DPDPA 2023

Under the Digital Personal Data Protection Act 2023, you have the right to:

  • Access — Request a summary of your personal data we hold
  • Correction — Request correction of inaccurate or incomplete data
  • Erasure — Request deletion of your personal data (subject to legal retention requirements)
  • Grievance — File a complaint with our Grievance Officer or the Data Protection Board
  • Nomination — Nominate someone to exercise your rights in the event of your death or incapacity

To exercise any right, contact: info@schoolofstockmarket.com

6. Data Security

We protect your data using AES-256-GCM encryption at rest, TLS 1.3 for data in transit, multi-factor authentication, role-based access controls, and regular security audits. We follow SEBI's cybersecurity framework guidelines. In the event of a data breach, we will notify affected users and the appropriate authorities in accordance with applicable law.

7. Cookies

We use essential cookies for platform functionality, session management, and security. We also use analytics cookies (anonymized) to understand how users interact with our platform. You can manage cookie preferences through your browser settings. Disabling essential cookies may impair platform functionality.

8. Data Retention

We retain your data for as long as necessary to provide the platform service and as required by law. KYC data is retained for a minimum of 5 years as per SEBI/RBI regulations. Transaction records are retained for 7 years. Upon account closure, non-mandatory data is deleted within 30 days.

9. Contact Us

Data Protection Officer: info@schoolofstockmarket.com
Grievance Officer: info@schoolofstockmarket.com
Address: SOSM Services Pvt. Ltd., Mumbai, Maharashtra – 400001