Privacy Policy

Last updated: 28 July 2026 · Applies to the SharkIT.in website and the SharkIT Android & iOS apps.

SharkIT.in ("SharkIT", "we", "us") operates a funding marketplace that connects Indian founders and MSMEs with investors, HNIs and lenders. This policy explains what we collect, why, who we share it with, and the choices you have — including how to delete your account.

The short version. We collect only what the marketplace needs to work: your account details, your company profile and the business information you choose to publish, and basic usage data. We do not sell your personal data, and we do not run advertising networks in the app.

1. Who we are

SharkIT.in is operated from Gujarat, India. For any privacy question, data request or grievance, contact our Grievance Officer at admin@sharkit.in. We respond to verified requests within 30 days.

2. Information we collect

Category	What it includes	Why we collect it
Account	Name, email address, password (stored only as a salted hash), phone number, city, role (founder / investor / HNI), profile photo, LinkedIn URL	To create and secure your account, verify your email by OTP, and show your identity to counterparties
Company & financial	Company name, sector, stage, CIN / GSTIN, revenue, MRR, EBITDA, burn rate, funding history, founder bios, uploaded financial documents	To build your public listing, compute the AI investment score, and let investors evaluate your round. Founders choose what to publish.
Verification	GST OTP-ownership result, MCA (AOC-4 / XBRL) filing data pulled from government records for the CIN you supply	To award verified badges and display audited financials investors can trust
Content	Funding posts, comments, chat messages, term sheets, poll votes, media you upload	To operate the feed, messaging and deal flow
Payments	Subscription and token-purchase records, Razorpay order and payment IDs	To process and reconcile payments. Card, UPI and bank details are entered on Razorpay's systems and are never received or stored by SharkIT.
Technical	IP address, device and browser type, app version, log and error data, push notification token	Security, abuse and rate-limit protection, crash diagnosis, and notifications

If you sign in with Google, we receive your name, email address and profile picture from Google — nothing else. We do not access your Google contacts, Drive or other Google data.

We do not knowingly collect data from anyone under 18. SharkIT is intended for adult founders and investors.

3. How we use your information

To operate the marketplace — publish listings, match investors to deals, enable chat and term sheets.
To generate AI analysis (investment scores, peer comparison, market and pitch insights, deal digests).
To verify businesses against government records and display trust badges.
To process subscriptions, tokens and boosts.
To send transactional email and in-app or push notifications about your account and deals.
To keep the platform secure, prevent fraud and abuse, and comply with Indian law.

We do not use your personal data for third-party advertising, and we do not sell it.

4. Who we share it with

We share data only with service providers who process it on our behalf, under contract, for the purposes above:

Neon — managed PostgreSQL database hosting.
Railway and Cloudflare — application hosting, CDN and DDoS protection.
Anthropic (Claude) — AI analysis of the business information in your listing. Prompts are not used to train the provider's models.
Surepass — GST OTP ownership checks and MCA document retrieval from government sources.
Razorpay — payment processing (PCI-DSS compliant; handles all card and UPI data directly).
SendGrid (Twilio) — transactional email delivery.
Cloudflare R2 — storage of images and documents you upload.
Replicate — optional AI pitch-video generation, when you request it.
Google Firebase — push notification delivery.

Other users. Anything you publish — your company listing, funding post, public profile and poll activity — is visible to other signed-in users. Chat messages and term sheets are visible to the participants of that conversation. Your email address is never shown on your public profile.

We may also disclose information where required by law, court order or a lawful government request, or to protect the rights and safety of our users and the platform. If SharkIT is involved in a merger or acquisition, data may transfer to the successor entity under this policy.

5. Where data is stored

Data is stored on servers operated by our providers, including facilities in the Asia-Pacific region and, for some providers, outside India. Where data crosses borders, it is protected by our providers' contractual and security safeguards.

6. How long we keep it

We keep your account data while your account is active. After you delete your account we remove personal data within 30 days, except records we must retain longer for legal, tax or accounting reasons (for example payment records, typically up to 8 years as required by Indian law). Anonymised, aggregate statistics that cannot identify you may be retained.

7. Security

Passwords are stored only as bcrypt hashes — never in plain text.
All traffic is encrypted in transit over HTTPS/TLS.
Access is authenticated with short-lived JSON Web Tokens and refresh tokens.
Email ownership is confirmed by a one-time password at sign-up.
Rate limiting and server-side authorisation checks protect against abuse.

No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority of a breach affecting you as required by law.

8. Your rights and choices

Access and correct — view and edit your profile, company details and preferences in the app at any time.
Delete — delete your account and associated data (see section 9).
Withdraw publication — mark a funding round CLOSED, or remove posts and uploaded documents.
Notifications — turn push notifications off in your device settings; transactional emails about your account remain necessary while the account exists.
Complain — write to admin@sharkit.in. You may also approach the relevant Indian data protection authority.

9. Deleting your account and data

How to delete your SharkIT account

In the app: open Profile → Settings → Delete account and confirm. Your account is deactivated immediately.

By email: send a request from your registered email address to admin@sharkit.in with the subject "Delete my SharkIT account". We verify the request and action it within 30 days.

What is deleted: your profile, company listing and financial KPIs, funding posts, comments, chat messages, poll votes, uploaded media and documents, saved searches and pipeline entries. What is retained: payment and invoice records required by tax law, and anonymised aggregate counts that cannot identify you.

Deleting some of your data without closing your SharkIT account

You do not have to delete your SharkIT account to have data removed. You can remove most items yourself, and you can ask us to delete the rest.

Remove it yourself, in the app:

Waves posts and comments — use the delete control on your own item.
Funding rounds — use the Close, Mark funded or Delete control on your own round (in the feed or on the round's detail page).
Comments on funding rounds — use the delete control on your own comment.
Uploaded financial documents — Profile → your company → remove the file.
Company financial KPIs — Profile → Edit company → clear the fields and save.
Profile details — Profile → Edit, to clear your photo, phone, city, bio or LinkedIn.

Or ask us to delete specific data: tap Profile → Privacy & Safety → Request my data, or write from your registered email address to admin@sharkit.in with the subject "Data request", naming the data you want removed. We verify the request and action it within 30 days, and confirm by email. Your account stays open.

What we may keep: payment and invoice records we are required to retain under Indian tax law, records needed to resolve an open dispute or an accepted term sheet, and anonymised aggregate counts that cannot identify you. Everything else named in your request is deleted.

10. Changes to this policy

We may update this policy as the product evolves. Material changes will be notified in the app or by email, and the "last updated" date above will change. Continuing to use SharkIT after an update means you accept the revised policy.

11. Contact

Grievance Officer — SharkIT.in
Email: admin@sharkit.in
Gujarat, India