Privacy Policy
Last updated: 3 September 2026
This Privacy Policy ("Policy") describes how NextGenOS Financial Services Private Limited ("us", "we", "our" or "Company") collects, processes, uses, stores and protects personal data when you visit, access, use or register on taru.money ("Website", "Platform" or "Service") and use the products, services and features made available through it.
We may update this Policy from time to time to reflect changes in our practices, services or applicable laws. Where required by applicable law, we will provide appropriate notice of material changes. The updated Policy will be published on the Website with the revised "Last Updated" date. You are advised to review this Policy periodically.
This Policy explains how we process personal data in connection with the Website and our services. Where processing of personal data is based on consent, such consent will be obtained in accordance with applicable law. Your use of the Website or Platform remains subject to the applicable Terms of Use and other terms governing the relevant services.
taru.money is operated by NextGenOS Financial Services Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at A-1304 Romell Diva Jamuna Bldg, Chincholi Bunder, Malad West, Mumbai – 400064, Maharashtra, India.
1. What User Information We Collect
- Contact information: We may collect your name, email address, mobile number, date of birth, residential address, city, state, country, IP address and identification and KYC-related information and documents, as may be required for providing our services, complying with applicable laws and regulations, and facilitating transactions or services through our platform.
- Demographic information: We may collect demographic and profile information provided by you, including information relating to age, occupation, preferences and other information voluntarily provided by you, where reasonably necessary for providing or improving our services and features.
- Other information: If you use our website, we may collect information about your IP address and the browser you're using. We might look at what site you came from, duration of time spent on our website, pages accessed or what site you visit when you leave us. We might also collect the type of mobile device you are using, or the version of the operating system your computer or device is running.
How we collect information
- We collect information directly from you: We collect information directly from you when you register on our website. We also collect information if you post a comment on our websites or ask us a question through phone or email.
- We collect information from you passively: We use tracking tools like Google Analytics, Google Webmaster, browser cookies and web beacons for collecting information about your usage of our website.
- We get information about you from third parties: For example, if you use an integrated social media feature on our websites. The third-party social media site will give us certain information about you. This could include your name and email address.
- Transaction and Financial Service Information: We may collect information relating to transactions and financial products or services accessed through the website, including transaction details, payment-related information, bank or account details where required, investment or product-related information, application details, KYC information, nominee or beneficiary information, correspondence and records relating to such transactions or services.
- Cookies and Similar Technologies: We use cookies, pixels, and similar technologies to enhance user experience, analyse website traffic, and personalize content. You may choose to disable cookies through your browser settings; however, certain features of the website may not function properly.
2. Use of Your Personal Information
We may process your personal data for the following specified purposes, as applicable to the services or features used by you:
- a) to create and manage your account and provide access to our website, platform, financial education, financial planning, portfolio tracking and other services;
- b) to process applications, requests and transactions relating to financial products and services made available through our platform;
- c) to carry out KYC, identity verification, fraud prevention, risk management and other verification or compliance processes;
- d) to communicate with you regarding your account, applications, transactions, services, requests, complaints and other matters relating to your use of the platform;
- e) to provide, maintain, secure and improve our website, platform, products, services and features;
- f) to analyse usage, preferences and interactions with our platform for improving user experience and service performance;
- g) to send promotional or marketing communications regarding our products, services, educational programmes and relevant third-party products or services, subject to applicable law and your preferences;
- h) to comply with applicable legal, regulatory and contractual obligations and to respond to lawful requests from competent authorities;
- i) to detect, prevent and investigate fraud, unauthorised activity, security incidents and other unlawful or prohibited activities; and
- j) for any other purpose expressly communicated to you at the time of collection or otherwise permitted under applicable law.
- k) Purpose Limitation and Data Minimisation: We collect and process personal data only to the extent reasonably necessary for the specified purposes for which such data is processed and in accordance with applicable law.
3. Security and Data Storing
- Security is very important to us. All security procedures are in place to protect the confidentiality, integrity and availability of Your User Information. We maintain strict physical, electronic, and administrative safeguards to protect Your User Information including your personal information from unauthorized or inappropriate access.
- We follow generally accepted standards to collect, store and protect personal data. We retain personal data for as long as it is needed to provide the services you have requested, and thereafter for legal and service purposes. These may include retention periods mandated by legal, contractual, or similar obligations; for resolving, preserving, enforcing or defending our legal and contractual rights; or as needed to maintain adequate and accurate business and financial records or to manage how you access, update, or delete your data, etc.
- We take reasonable security measures to protect personal data and other information against unauthorised access, disclosure, alteration, loss or destruction. However, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure. Accordingly, while we take reasonable measures to protect your personal data, we cannot guarantee absolute security. In the event of a personal data breach, we will take such steps as may be required under applicable law.
4. Sharing of Information with Third Parties
- Service Providers and Processors: We may share personal data with third-party service providers, vendors, technology providers, cloud service providers, payment service providers, communication service providers, KYC and verification providers, professional advisers and other service providers who process or otherwise handle personal data on our behalf for providing, securing and administering our services, subject to applicable law and appropriate contractual or other safeguards.
- Business Partners and Regulated/Service Partners: We may share relevant personal data with our business partners, financial institutions, product manufacturers, distributors, aggregators, intermediaries and other third parties through whom financial products or related services are made available, where necessary to provide or facilitate such products or services, comply with applicable legal or regulatory requirements, or otherwise as permitted by applicable law. Where such third parties independently process personal data for providing their respective products or services or for complying with their own legal or regulatory obligations, such processing may also be governed by their respective privacy policies and applicable laws.
- We may share information if we think we have to in order to comply with the law or to protect ourselves: We will share information to respond to a court order or subpoena. We may also share it if a government agency or investigatory body requests. Or, we might also share information when we are investigating potential fraud.
- We may share information with any successor to all or part of our business: We may share information in connection with a merger, acquisition, restructuring, sale of assets, or business transfer, subject to confidentiality protections.
- Payment Processing: All payments on the website are processed through third-party payment gateway providers. We do not store your complete debit/credit card details, net banking credentials, or UPI information. Such data is collected and processed directly by the payment gateway in accordance with their respective privacy policies.
4.1 International Data Transfers
Your personal data may be processed or stored outside India by our service providers or other permitted third parties. Any such transfer or processing shall be undertaken in accordance with applicable data protection laws, including any restrictions or requirements applicable to the transfer of personal data outside India.
5. Email Opt-Out
You may opt out of receiving promotional or marketing communications from us by using the unsubscribe mechanism provided in the relevant communication or by contacting us through the contact details provided in this Policy. Withdrawal or opting out of marketing communications will not affect transactional, service-related, security or legally required communications.
6. User Rights
Subject to applicable law, you may have the right to:
- a) access information about the personal data processed by us;
- b) request correction or updating of inaccurate or incomplete personal data;
- c) request erasure of personal data where permitted under applicable law;
- d) withdraw consent where processing is based on consent;
- e) avail grievance redressal in relation to the processing of your personal data; and
- f) exercise any other rights available to you under applicable data protection laws.
- g) nominate another individual to exercise your rights in accordance with applicable law in the event of your death or incapacity.
Requests may be made through the contact details provided in this Policy. We may take reasonable steps to verify your identity before processing such requests.
6.1 Children's Privacy
Where our services or educational features are intended to be accessed by children, we shall process children's personal data only in accordance with applicable law. Where required, we shall obtain verifiable consent from the parent or lawful guardian before processing such personal data and shall implement appropriate measures prescribed under applicable law for verifying such consent. We shall not undertake processing of children's personal data in a manner prohibited under applicable law, including prohibited tracking, behavioural monitoring or targeted advertising activities.
7. Third-Party Sites
If you click on one of the links to third-party websites, you may be taken to websites we do not control. This policy does not apply to the privacy practices of those websites. Read the privacy policy of other websites carefully. We are not responsible for these third-party sites.
8. Grievance Officer
In accordance with the provisions of the Digital Personal Data Protection Act, 2023 and the rules made thereunder, the name and contact details of the Grievance Officer are provided below:
- Name: Akshay Kumar
- Designation: Grievance Officer
- Company: NextGenOS Financial Services Private Limited
- Address: A-1304 Romell Diva Jamuna Bldg, Chincholi Bunder, Malad West, Mumbai – 400064, Maharashtra, India
- Email: taru@taru.money
- Phone: +91 8779695364
9. Updates to This Policy
This Privacy Policy was last updated on 3 September 2026. From time to time, we may change our privacy practices. We will notify you of any changes to this policy as required by law. We will also post an updated copy on our website. Please check our site periodically for updates.
10. Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India. Subject to applicable law, the courts at Mumbai, Maharashtra shall have jurisdiction over matters arising out of or in connection with this Privacy Policy.