Privacy policy

Basis is your personal CFO on WhatsApp. It’s an AI service run by Hashlabs India Pvt Ltd. This policy explains what personal data we collect when you use Basis, why we use it, where we keep it, how long we keep it, and the rights you have over it. It follows India’s Digital Personal Data Protection Act, 2023 (the DPDP Act) and the rules made under it.

Who we are

Hashlabs India Pvt Ltd (“Hashlabs”, “we”, “us”) runs Basis and decides how your personal data is used. Under the DPDP Act, we are the Data Fiduciary.

• Registered office: D-16/13 SF, Ardee City, Gurgaon 122011, Haryana, India

• CIN: U72900HR2022FTC104771

• WhatsApp: +91 98107 08044

• Email: support@basismoney.in

• Website: basismoney.in

How you agree to this policy

There’s no sign-up form. You start using Basis by sending it a message on WhatsApp. By messaging Basis, you agree to this privacy policy and to our Terms of use, and you consent to us using your personal data as this policy describes. You can withdraw your consent at any time (see “Your rights”).

What we collect, why, and how long we keep it

We collect only what you share with Basis and what WhatsApp passes to us when you message Basis. We don’t buy data about you from anyone.

Your WhatsApp details

• Examples: Your phone number, the name on your WhatsApp profile, and the account identifiers WhatsApp gives us

• Why we use it: To know who you are, keep your conversation together and reply to you

• How long we keep it: While your account is active

What you tell us about yourself

• Examples: The name you’d like Basis to use; your age, city, family, work, income range, goals and preferences

• Why we use it: To give you help that fits your situation

• How long we keep it: While your account is active

Your conversation

• Examples: The messages you send Basis and the replies it sends, with their times and delivery status (sent, delivered, read)

• Why we use it: To understand what you need, answer you, and keep a record of what Basis told you

• How long we keep it: While your account is active

Documents and images you send

• Examples: Statements, payslips, policy documents, screenshots, and what Basis reads from them, such as your mutual fund holdings

• Why we use it: To read and explain your money, for example your portfolio’s costs and returns

• How long we keep it: While your account is active

Service records

• Examples: Which AI model answered, when, and how much processing it used

• Why we use it: To run Basis reliably, find and fix mistakes, and keep the records we’re required to keep

• How long we keep it: While your account is active

Security and system logs

• Examples: Message and account ids, errors and outcomes. Never the text of your messages

• Why we use it: To keep Basis secure and working, and to meet Indian cybersecurity rules

• How long we keep it: Up to 400 days

If you tell Basis about other people, such as your spouse’s income or a parent’s pension, please share only what you have the right to share.

What Basis never needs

Basis never asks for, and never needs, your OTPs, PINs, CVVs, card numbers, Aadhaar number, or the passwords to your bank, UPI, email or apps. Please don’t send them.

• If you type one anyway: Basis automatically looks for OTPs, card numbers and Aadhaar numbers in the messages you type, and removes them before your message is stored or read by the AI.

• Photos and documents: this check works on text you type. It can’t remove numbers shown inside a photo or a document, so please don’t send pictures of your cards or Aadhaar.

• Locked statements: some statements come protected by a password. When you send one, Basis asks for its password. Reply with just the password: it goes straight to the program that opens the file, and is never stored or shown to the AI. After three wrong attempts, Basis discards the file.

How Basis uses AI

Basis is an AI. AI models read your messages, and the documents and images you send, so that Basis can understand and answer you. Figures about your money, such as returns and costs, are calculated by our own software, not estimated by the AI.

A small team at Hashlabs that runs Basis may look at conversations to fix problems, improve how Basis answers, or handle a request you’ve made. Their access is limited to what that work needs, and it is logged.

Where your data is kept

Your data is stored and processed in India, on Google Cloud in Mumbai (the asia-south1 region). Backup copies also stay in India.

It is encrypted in transit and at rest, kept on a private network, and kept separate from Hashlabs’ other products.

Who we share it with

We share your data only with the providers we need to run Basis, and only for that purpose.

• Meta (WhatsApp): Carries messages between you and Basis through Meta’s WhatsApp Business Platform. Meta handles your messages under its own terms and privacy policy, which we don’t control

• Google Cloud: Hosts Basis and runs the AI models that process your messages, in India, as our service provider

We may also share data when the law requires it, for example with a court, regulator or government authority acting under law.

We don’t sell your personal data, and we don’t use it for advertising.

How long we keep your data

• While your account is active, we keep your data so Basis can remember you and your money.

• When you ask us to erase it, we delete your data within 30 days. Copies in our backups, which exist only to recover from failures, expire on their own within a further 30 days.

• What we must keep: we keep some records for longer only where the law requires it, such as security logs, records a regulator requires us to retain, and records needed to deal with a legal claim or dispute. We keep them only for as long as the law requires, use them only for that purpose, and then delete them.

Your rights

Under the DPDP Act, you have the right to:

• Access: get a summary of the personal data we hold about you, what we do with it, and who we have shared it with.

• Correct, complete and update: fix anything that’s wrong, fill in anything missing, or bring it up to date.

• Erase: ask us to delete your personal data.

• Withdraw consent: stop us using your personal data. It’s as easy as giving consent: just tell us. Withdrawing doesn’t affect what we did before, and after it Basis can no longer help you.

• Nominate: name someone to exercise these rights for you if you die or become unable to do so.

• Grievance redressal: complain to us about how we handle your data, and get an answer.

How to use your rights

• On WhatsApp (easiest): send Basis a message, for example “Delete my data” or “What do you know about me?”

• By email: write to support@basismoney.in.

A request sent from the WhatsApp number on your account confirms who you are. If you email us, we may ask you to confirm the request from that number.

We’ll acknowledge your request within 2 working days and resolve it within 30 days. If you’re not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

Basis is only for people aged 18 or over. We don’t knowingly collect data from anyone under 18. If we learn that we have, we’ll delete it.

Security and breaches

We protect your data with encryption, a private network, access limited to the people who need it, and logs of who accessed what. No system is perfectly secure. If a breach affects your personal data, we’ll tell you and the Data Protection Board of India as the law requires.

Our website

Our website, basismoney.in, is hosted by Framer. It has no forms and sets no cookies. It uses Framer’s built-in analytics, which counts visits without cookies. Every button on the site opens a WhatsApp chat with Basis.

Changes to this policy

If we change this policy, we’ll update the version and date at the top and publish it on basismoney.in. If a change matters to how we use your data, we’ll tell you on WhatsApp before it takes effect.

Contact and grievances

For any question or complaint about your data, message Basis on WhatsApp at +91 98107 08044 or email support@basismoney.in.

Hashlabs India Pvt Ltd, D-16/13 SF, Ardee City, Gurgaon 122011, Haryana, India.