Privacy Policy

"Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under applicable data protection laws. In order to enable us to provide Services we may need to, and/or may be required to collect, record, hold, use, disclose and store (i.e., "Process") Personal Data and client data.

To provide the Services, Equilay may collect and process Personal Data relating to Users and representatives of Client Companies. In the course of providing the Services, Equilay may also process Client Data submitted by or on behalf of Client Companies, which may include Personal Data.

Personal Data

• Name
• Address
• Phone
• Job title/designation
• Business address
• IP address
• Browser/device information
• Login credentials (if users create accounts)

Client Data (which may include Personal Data)

• Uploaded documents
• ESOP details
• Cap table information
• Shareholder information
• Employee information (where uploaded by client)
• Payment information

We collect Personal Data from User directly as follows:

Contacting us: Name, Email, Phone, Company, Message

Requesting a demo or consultation: Name, Email, Phone, Company, Business requirements

Using the Platform: Login information, Usage logs, IP address, Browser information, Uploaded documents

Categories of Personal Data and Client Data We Process

Depending on the Services requested by the User or Client Company, Equilay may process different categories of Personal Data and Client data:

For Cap Table Management: Shareholder names, Email addresses, Shareholding details, Share certificates, Share classes, Investment details

For Employee Stock Option Plan (ESOP) Design and Management: Employee names, Employee IDs, Email addresses, Designations, Option grant details, Vesting schedules, Exercise and lapse history

For Valuation Services: Financial statements, Revenue and profit information, Asset and liability details, Shareholding information, Investor details

For Shareholders' Agreement Drafting and Review: Founder details, Investor details, Shareholding information, Corporate documents, Contact details

For Merger and Acquisition (M&A) Advisory: Financial records, Shareholding information, Contracts, Employee information, Customer contracts, Corporate documents

For Equity Succession Planning: Shareholder details, Nominee information, Ownership records, Family information (where voluntarily provided and relevant to the Services)

Additional Collection Methods

When you access our platform and to avail our services you may require to complete the contact form which is below, in the contact form – free consultation form, user or you have to enter the data including name, email address, phone number, company name, also the ESOP application which is optional with the issue which the user is facing, both are optional to fill. We collect your name, email address, phone number and this optional information.

When you request customer support or otherwise communicate with us, we collect your name, email address, usage information or any other personal data that you may provide us in the course of interaction.

When you interact with us on public forums through social media platforms including LinkedIn, Instagram and Facebook or any other social media platform, we collect information you provide us while interacting with us and Personal data such as your name, location, work information and any other information that you may provide.

We may also receive your personal data when you use or view our website through information collected via browser's cookies.

We process your personal data to:

• to provide access to and operate the Platform and Services
• to respond to your enquiries, requests, and applications for consultations or demonstrations
• to create, manage and administer your user account, where applicable
• to verify your identity and authenticate your access to the Platform
• to provide equity management, cap table management, ESOP management, valuation support, shareholder documentation, compliance support and other Services requested by you or your Client Company
• to process subscription requests, invoices and payments for Paid Services, where applicable
• to provide customer support and resolve technical issues
• to improve, maintain, secure, and enhance the functionality, performance, and user experience of the Platform
• to monitor, detect, investigate, and prevent fraud, unauthorised access, misuse of the Platform, security incidents, and other unlawful activities
• to comply with applicable laws, legal processes, regulatory requirements, or lawful requests from governmental authorities
• to send you information about new features, updates, products, services, newsletters, webinars, or promotional communications, where permitted by applicable law or with your consent, where required
• for any other purpose for which we obtain your consent or as otherwise permitted or required by applicable law
• to administer and manage contractual relationships with Client Companies

Equilay does not sell or rent your Personal Data to third parties. We may share your Personal Data only in the circumstances described below and in accordance with applicable law:

a. Service Providers

We may share your Personal Data with trusted third-party service providers who assist us in operating the Platform and providing the Services. These may include cloud hosting providers, data storage providers, communication service providers, information technology support providers, analytics providers, payment service providers (where applicable), professional advisers, auditors, and other vendors who process Personal Data on our behalf. Such third parties are authorised to process Personal Data only to the extent necessary to provide their services to Equilay and are subject to appropriate contractual and confidentiality obligations.

b. Legal and Regulatory Requirements

We may disclose Personal Data where required to do so by applicable law or in response to lawful requests from courts, governmental authorities, regulators, law enforcement agencies, or other competent authorities, or where such disclosure is necessary to comply with legal obligations or to establish, exercise, or defend our legal rights.

c. Protection of Rights and Prevention of Fraud

We may use or disclose Personal Data where necessary to investigate, prevent, detect, or address fraud, unauthorised access, security incidents, violations of our Terms of Use, or other unlawful activities, or to protect the rights, property, safety, or security of Equilay, its Users, Client Companies, or any other person, as permitted or required by applicable law.

d. Business Transfers

If Equilay undergoes a merger, acquisition, investment, corporate restructuring, sale of assets, business transfer, or any similar transaction, Personal Data may be transferred to the relevant successor entity, purchaser, or investor as part of such transaction, subject to appropriate safeguards and compliance with applicable law.

e. With Your Consent

We may disclose your Personal Data to third parties where you have expressly consented to such disclosure or where such disclosure is otherwise permitted or required under applicable law.

Third-Party Data Processing Disclosure

Equilay may engage third-party service providers to support the operation, maintenance, and improvement of the Platform and Services. These third parties may process Personal Data on our behalf in accordance with their respective privacy policies and applicable data protection laws.

In particular, we may use services provided by Google LLC, including but not limited to Google Analytics and Google Ads services, for purposes such as website analytics, performance measurement, conversion tracking, and advertising optimisation. These third-party service providers may process Personal Data in accordance with their own privacy policies, which govern their use of such data. We encourage you to review the privacy policies of these third parties to understand how they process your information.

Equilay implements reasonable technical, administrative, and organisational safeguards designed to protect Personal Data against unauthorised access, disclosure, alteration, loss, misuse, or destruction.

Equilay retains Personal Data and Client Data for as long as is reasonably necessary to provide the Services, comply with applicable legal, regulatory, accounting, or contractual obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.

The duration of retention may vary depending on the nature of the information and the purposes for which it was collected. Where there is no longer a legitimate business or legal purpose to retain Personal Data, Equilay will take reasonable steps to delete, anonymise, or securely dispose of such Personal Data in accordance with applicable law and its internal policies.

Equilay currently retains Client Data for the duration necessary to provide the Services and maintain the Client Company's account, unless deletion is requested by the Client Company or required by applicable law or a contractual obligation.

Subject to applicable law, you may have the following rights in relation to your Personal Data:

We may update this Privacy Policy from time to time to reflect changes in our Services, applicable laws, or our data processing practices. The updated version will be published on the Platform and will become effective from the date of publication. Where required by applicable law or where material changes are made, we will take reasonable steps to notify you.

You may contact our privacy and grievance redressal contact if you have any enquiries or feedback on our personal data protection policies and procedures, or if you wish to make any request.