How we collect, use, share and protect personal data across every Fininvo product and our mobile apps.
July 2, 2026
August 1, 2026
5.0
We never sell your personal data, and we never use it to train AI models.
This document is published by Fininvo, a trade name of Prashbi Global Services Pvt. Ltd., a company incorporated under the laws of India (CIN: U52100KA2020PTC133490), with its registered office at Tholons Tower, 346 HIG, 17th Cross Rd, Dollars Colony, R.M.V. 2nd Stage, Bengaluru, Karnataka 560094, India. References to "Fininvo", "we", "us", or "our" in this document refer to Prashbi Global Services Pvt. Ltd..
Prashbi Global Services Pvt. Ltd.is committed to protecting your privacy. We adhere to India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, as well as the GDPR and CCPA where they apply. This policy explains what personal data we process, why, who we share it with, and the rights available to you.
Before or at the time we ask for your consent, we give you a clear, plain-language notice. Consistent with the DPDP Rules, 2025, that notice is presented on its own and includes:
For your account and billing data, our marketing website, job seeker accounts on Fininvo Jobs, and security telemetry, we decide the purposes and means of processing. This policy is the primary document for that processing.
For the business, HR, payroll and candidate data your organisation manages inside the products, your organisation is the controller and we process on its instructions under the Data Processing Agreement. Direct your questions about that data to your employer or the account administrator first.
Providing and maintaining the products you subscribe to.
For Jobs and Recruit, processing applications and connecting seekers with employers.
Detecting threats, preventing unauthorised access and duplicate or fraudulent activity.
Analysing aggregated, anonymised usage to improve features.
Service updates, security alerts, support, and marketing with your consent.
Meeting tax, accounting and regulatory requirements and enforcing our terms.
We do not sell personal data. We disclose it only to the following categories of recipients, and only for the purposes described:
Cloud hosting, payments, email delivery, messaging and analytics providers, each bound by a data processing agreement and listed with entity, purpose and location on the Sub-processors page.
Employers you apply to on Jobs, integrations and third-party services your organisation connects, and recipients you choose to share documents with.
Auditors, accountants, insurers and lawyers under confidentiality, where reasonably necessary.
Courts, regulators and law enforcement where required by law or valid legal process; to enforce our agreements; or to protect the rights, safety and property of Fininvo, our users or the public. Where lawful, we notify affected customers before disclosing their data.
A buyer or successor in a merger, acquisition, financing or sale of assets, provided the recipient is bound to honour this policy for previously collected data. We notify you of any such transfer and of any choices you have.
The current sub-processor list is at fininvo.com/subprocessors, with a 30 day advance change notice mechanism.
We process personal data on these grounds:
Necessary to provide the service or, under DPDP, certain legitimate uses.
Marketing, optional cookies, and other processing where consent is required.
Tax, accounting and regulatory compliance.
Security, fraud prevention and product improvement (GDPR).
You can withdraw consent at any time, with the same ease as you gave it, without affecting processing already carried out.
Your profile (name, contact, resume, experience, education, skills) is shared with the employer for the specific role you applied to. We do not share your data with companies you have not applied to.
Employers may use candidate data only to evaluate that candidate for that role, must protect it with industry-standard safeguards, and must not disclose a candidate's job-seeking activity to their current employer.
We do not display fabricated match percentages, and we do not sell seeker profiles for advertising.
Records shared with an employer are thereafter also governed by that employer's own privacy practices.
The Fininvo HR and Payroll employee app and the Fininvo Jobs Seeker app process personal data as follows:
The apps request permissions such as notifications, camera and location only for features you use. You can grant or deny each permission, and change it later in device settings.
Push notifications can be disabled at any time. We process an install identifier and basic crash and usage analytics to keep the apps reliable.
At first launch the app shows this Privacy Policy and the Terms of Service, and records your acknowledgement.
App-store data-handling disclosures are kept consistent with this policy. Google Sign-In, where used, shares only your name, email and profile picture.
No solely automated decisions with legal effect. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Hiring decisions on Jobs and Recruit are always made by the employer, not by our systems.
No fabricated scoring. We do not generate or display fabricated match percentages or opaque candidate scores.
No AI training on your data. We do not use Customer Data or your personal data to train generalised artificial intelligence or machine-learning models. If we ever introduce an optional AI feature that processes your data differently, we will describe it, update this policy, and where required obtain consent before enabling it.
Request a copy of your data
Correct inaccurate data
Request data deletion
Export in a machine-readable format
Object to certain processing
Withdraw consent at any time
Nominate another to exercise rights (DPDP)
Complain to the Data Protection Board
Exercise your rights. Email privacy@fininvo.comor use the privacy controls in your account. We verify your identity, respond within 30 days, and do not discriminate against you for exercising a right. Where we act as processor for your employer's data, we will refer the request to your employer and support their response.
In compliance with the DPDP Act and the IT Act, you may contact our Grievance Officer for any concern about how your personal data is handled.
Grievance Officer
Office of the Grievance Officer, Prashbi Global Services Pvt. Ltd.
Email: grievance@fininvo.com
Tholons Tower, 346 HIG, 17th Cross Rd, Dollars Colony, R.M.V. 2nd Stage, Bengaluru, Karnataka 560094, India
We acknowledge complaints within 48 hours and aim to resolve them within 30 days (and in any case within the statutory 90 days). If you are not satisfied, you may approach the Data Protection Board of India.
We retain personal data only as long as needed for the stated purpose, then delete or anonymise it.
| Data Type | Retention Period |
|---|---|
| Active account data (ERP/HRMS/Payroll) | Duration of the account |
| Post-termination data | 30 days for export, then deleted (backups expire within the rotation cycle) |
| Financial and tax records | As required by law (typically 7 years) |
| Job seeker profile | While the account is active; deleted within 30 days of account deletion |
| Applications shared with employers | Retained by the employer under their own policy |
| Security and fraud logs | Up to 1 year |
| Analytics (anonymised) | Retained in aggregate |
Data encrypted at rest
Encrypted in transit
Role-based, least privilege
Multi-factor authentication available
Certification in progress
Notification within 72 hours where required
The full security programme, including vulnerability management, incident response and business continuity, is described on the Security page.
Your data may be processed outside your jurisdiction. We protect cross-border transfers through:
EU-approved SCCs with processors
India, EU or US data centres where offered
Signed with all sub-processors
All cross-border transfers encrypted
Transfers of Indian data principals' data occur only to countries not restricted by the Central Government under the DPDP Act.
AGE RESTRICTION
The platform is a business product intended for organisations and professionals and is not directed to individuals under 18 years of age.
Under the DPDP Act, we do not process the personal data of children (under 18) without verifiable parental or guardian consent. Under COPPA (US) we do not knowingly collect data from children under 13, and under GDPR not from children under 16 where applicable.
If you believe a child has provided personal data to us, contact privacy@fininvo.com and we will delete it promptly.
As an Indian company (CIN: U52100KA2020PTC133490), we act as a Data Fiduciary and comply with the DPDP Act, 2023, the DPDP Rules, 2025 and the IT Act, 2000.
California residents have additional rights:
| Category | Collected | Sold / Shared |
|---|---|---|
| Identifiers (name, email, phone, IP address) | Yes | No |
| Commercial information (subscriptions, transactions) | Yes | No |
| Professional or employment information | Yes (HRMS, Payroll, Jobs, Recruit) | No |
| Education information | Yes (Jobs and Recruit profiles) | No |
| Internet or network activity (usage logs) | Yes | No |
| Financial information (salary, bank details you record) | Yes | No |
| Geolocation (coarse, from IP; precise only with app permission) | Limited | No |
| Sensitive personal information | Only as submitted by your organisation | No |
| Biometric information | Only where your employer enables biometric attendance | No |
| Inferences for profiling | No | No |
We honour the Global Privacy Control (GPC) browser signal as an opt-out of analytics cookies for that browser. Sources of the information are you, your organisation and your devices; purposes are described in Section 5; recipients in Section 6. Authorised agents may submit requests to privacy@fininvo.com with proof of authorisation.
When we make material changes to this policy, we give at least 30 days notice by email or in-product notice before the changes take effect, update the version number and dates shown at the top of this page, and, where the change requires it, refresh your consent (including re-presenting the in-app acknowledgement on mobile). Prior versions are available on request from privacy@fininvo.com.
Data Protection Officer
dpo@fininvo.comPrivacy Team
privacy@fininvo.comGrievance Officer
grievance@fininvo.comEU/UK Data Protection Contact
eu-rep@fininvo.comRegistered Office
Prashbi Global Services Pvt. Ltd.
Tholons Tower, 346 HIG, 17th Cross Rd, Dollars Colony,
R.M.V. 2nd Stage, Bengaluru, Karnataka 560094, India
CIN: U52100KA2020PTC133490