Privacy Policy

1. Overview

GMAV Capital (hereinafter "GMAV Capital", "we", "our", or "us") is committed to protecting the privacy of founders, investors, and website visitors who interact with our website at gmav.io (the "Website") and through our advisory engagements.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we retain it, and what choices you have. By using our Website or engaging our services, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

When you contact us, submit an enquiry form, book a consultation, or enter into an advisory engagement, we may collect:

• Full name, designation, and company name
• Email address and phone number
• Business details: industry, stage of business, funding requirement, revenue figures
• Documents you voluntarily share: pitch decks, financial models, term sheets, cap tables
• Communications sent to us by email, phone, or any contact form

2.2 Information Collected Automatically

When you visit our Website, our servers and analytics tools may automatically collect:

• IP address and approximate geographic location (country, city)
• Browser type, version, and operating system
• Pages visited, time spent, referral source, and navigation paths
• Device type (desktop, mobile, tablet)
• Cookie identifiers and session data

2.3 Information from Third Parties

We may receive information about you from:

• Publicly available sources: LinkedIn, company registries, news publications
• Mutual connections or referrals who introduce founders or investors to us
• Event registrations or partner organisations where you have consented to data sharing

2.4 Sensitive Personal Data

In the course of advisory engagements, you may share sensitive business or financial information. We treat all such information as strictly confidential. We do not request or store government identification numbers, biometric data, medical information, or financial account credentials.

3. How We Use Your Information

We use personal information for the following purposes:

3.1 Service Delivery

• Responding to enquiries and scheduling consultations
• Providing fundraising advisory, investor outreach, and related services
• Preparing pitch materials, financial models, and investor lists on your behalf
• Facilitating introductions between founders and investors (with mutual consent)

3.2 Business Communications

• Sending engagement updates, milestone reports, and progress communications
• Sharing relevant market insights, newsletters, and event invitations (with opt-out available)
• Responding to post-engagement queries

3.3 Website Operations

• Analysing site traffic to improve content and user experience
• Diagnosing technical issues
• Administering contact forms and callback requests

3.4 Legal and Compliance

• Meeting obligations under applicable Indian law, including the IT Act 2000 and SPDI Rules 2011
• Responding to lawful requests from regulatory or law enforcement authorities
• Enforcing our contractual agreements and protecting our legal rights

We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes.

4. Sharing & Disclosure

We share personal information only in the following circumstances:

4.1 With Your Consent

When you engage our investor outreach services, we share your company information and pitch materials with investors in our network. This sharing is the core purpose of the engagement and is explicitly authorised by your engagement agreement. We never share your information with investors outside the agreed scope.

4.2 Service Providers

We engage trusted third-party vendors who process data on our behalf, including:

• Email service providers (for transactional and marketing communications)
• Cloud storage and document management providers
• Website analytics services (Google Analytics and similar)
• Video conferencing tools (Zoom, Google Meet)
• CRM and project management software

These providers access only the minimum data necessary and are contractually bound to use it solely for the service rendered.

4.3 Legal Requirements

We may disclose information if required to do so by law or in good-faith belief that disclosure is necessary to comply with a legal obligation, protect the rights or property of GMAV Capital, or prevent harm to any person.

4.4 Business Transfers

In the event of a merger, acquisition, restructuring, or asset sale, your information may be transferred as part of that transaction. We will notify you by email or Website notice of any change in ownership and your choices regarding your information.

4.5 Aggregated or Anonymised Data

We may share statistical or aggregated information that does not identify any individual for research, industry analysis, or marketing purposes.

5. Cookies & Tracking

Our Website uses cookies and similar tracking technologies to improve your browsing experience and analyse traffic.

5.1 Types of Cookies We Use

• Essential Cookies: Required for the Website to function (session management, security). Cannot be disabled.
• Analytics Cookies: Collect anonymous usage data (pages visited, time on site) to help us improve the Website. Provided by Google Analytics.
• Preference Cookies: Remember your settings and choices on the Website.

5.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain parts of our Website. You may also opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on.

5.3 Do Not Track

Our Website does not currently respond to "Do Not Track" signals from browsers. We continue to monitor developments in this area.

6. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including:

• Active engagement data: Retained throughout the engagement and for 3 years thereafter, to support post-closure queries, investor follow-ups, and legal record-keeping.
• Website enquiry data: Retained for 12 months from the date of enquiry if no engagement is initiated.
• Marketing preferences: Retained until you opt out or request deletion.
• Legal records: Retained for the period required under applicable Indian law (typically 7 years for financial and contractual records).

Upon expiry of the retention period, data is securely deleted or anonymised.

7. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

7.1 Access

You may request a copy of the personal information we hold about you.

7.2 Correction

You may request that we correct inaccurate or incomplete information about you.

7.3 Deletion

You may request deletion of your personal information. We will comply unless we are required to retain it by law or have a legitimate ongoing business need (such as an active engagement or pending legal matter).

7.4 Opt-Out of Marketing

You may opt out of marketing communications at any time by clicking "Unsubscribe" in any email or by writing to us at the address below. Opting out of marketing does not affect transactional or engagement-related communications.

7.5 Data Portability

Where technically feasible, you may request your data in a structured, machine-readable format.

7.6 For EU/EEA and UK Users

If you are located in the European Union, European Economic Area, or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to lodge a complaint with your local data protection authority. You also have the right to object to processing based on legitimate interests and to restrict processing in certain circumstances.

To exercise any of these rights, contact us at info@gmav.io. We will respond within 30 days.

8. Security

We implement reasonable technical and organisational measures to protect personal information from unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Access controls limiting data access to authorised personnel only
• Secure cloud storage with reputable providers
• Regular review of our data handling practices

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by law.

9. International Users

GMAV Capital is headquartered in Chandigarh, India, and our servers and data processing infrastructure are based in India. If you access our Website or services from outside India, including from the European Union, United Kingdom, United States, or other jurisdictions with data protection laws that differ from India's, please be aware that your information will be transferred to, stored, and processed in India.

By using our Website or submitting information to us, you consent to this transfer. We take appropriate steps to ensure that your information receives an adequate level of protection wherever it is processed.

10. Children

Our Website and services are directed exclusively at business professionals and are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly. If you believe we have collected information from a minor, please contact us immediately.

11. Third-Party Links

Our Website may contain links to third-party websites, including LinkedIn, Google, and partner organisations. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link on our Website does not imply endorsement.

12. Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice on our Website.

Your continued use of our Website or services after any changes become effective constitutes your acceptance of the revised policy. If you do not agree to the revised policy, please discontinue use of our Website and contact us to discuss your engagement.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact: