Consent & Communication Policy

Welcome to Fin 100X.AI — India’s First Protocol-Governed AI Financial Operating System. By using our app or platform, you agree to the following terms:

Consent & Communication Policy (Effective Date: [●])

  1. Introduction (“we,” “our,” “us”) is India’s first protocol-governed AI Financial OS, committed to empowering Youth, Gen Z, Gen Alpha, and first-time earners with financial dignity, security, and freedom. This Consent & Communication Policy (“Policy”) sets out: How we seek, record, and manage user consent for WhatsApp, SMS, email, push notifications, and in-app communication. The rights of users under the Digital Personal Data Protection Act, 2023 (DPDP Act). Our obligations under regulatory authorities including RBI, SEBI, IRDAI, and PFRDA.

By using our platform, you acknowledge that you have read and understood this Policy.

  1. Scope of Policy This Policy applies to: All users of the Fin 100X.AI platform (mobile app, website, WhatsApp onboarding, SDK integrations). All channels of communication, including SMS, WhatsApp, Email, Push Notifications, and in-app messages. All consent records maintained by us and/or our licensed partners.
  2. Principles of Consent
  3. Free, Informed, Specific, and Unambiguous – Consent is sought in clear and plain language.
  4. Granular – Separate consent is obtained for marketing, product updates, and mandatory service communications.
  5. Affirmative Action – Consent is captured through opt-in mechanisms only (e.g., tick box, OTP confirmation, WhatsApp opt-in).
  6. Proof of Consent – Every consent is timestamped, recorded, and stored securely.
  7. Easy Withdrawal – Users can withdraw consent anytime via app settings, “unsubscribe” links, WhatsApp STOP command, or grievance redressal.
  8. Communication Categories We classify communications into: 4.1 Transactional Messages Service updates, account alerts, fraud notifications, KYC reminders. Consent not required (per RBI/SEBI/IRDAI guidelines) but users are informed.

4.2 Promotional & Marketing Messages Offers, campaigns, referral programs, product launches. Explicit opt-in consent required.

4.3 Regulatory & Compliance Messages Notices required under RBI/SEBI/IRDAI/PFRDA. Delivered even without marketing consent (statutory obligation).

  1. Consent Mechanisms

We use multiple consent capture mechanisms:

  1. App/Website Opt-in – Checkbox + confirm action.
  2. WhatsApp Consent – User sends “YES” or taps opt-in button, per Meta Business Policy.
  3. SMS Consent – Captured via OTP confirmation.
  4. Email Consent – Double opt-in via verification link.
  5. Push Notifications – Captured through device-level permissions.
  6. Record-Keeping & Audit Every consent is logged with timestamp, channel, purpose, and user ID. Consent records are stored in compliance with DPDP Act retention rules. Users may request an audit trail of their consent at any time.
  7. ****Withdrawal of Consent Users may withdraw consent via: App/website settings WhatsApp STOP command Unsubscribe link in emails SMS reply STOP Writing to privacy@fin100x.ai

Withdrawal does not affect lawful communications (transactional, regulatory).

  1. Compliance with DPDP Act 2023
  2. Notice Obligation – Users are informed at the time of consent of purpose, usage, and rights.
  3. Right to Withdraw – Guaranteed at no extra cost.
  4. Grievance Officer – Appointed as per Sec. 13 DPDP Act.
  5. Children & Minors – Parental consent required for users under 18.
  6. Data Fiduciary Duties – We act as a “Data Fiduciary” and ensure all processors/partners comply.
  7. Regulatory Alignment RBI: Digital consent obligations under Master Directions on Digital Payment Security Controls. SEBI: Consent for digital contracts and e-KYC obligations. IRDAI: Consent for insurance PoSP communications. PFRDA: Consent for retirement and NPS updates.
  8. Grievance Redressal Users may raise concerns regarding consent/communications at: 📧 Email: legal@fin100x.ai📞 Helpline: +91-XXXXXXXXXX📮 Grievance Officer: [Name], [Designation] Complaints will be addressed within 30 days as per DPDP Act & RBI Ombudsman guidelines.
  9. Liability & Dispute Resolution Fin 100X.AI shall not be liable for communications sent by unauthorized third parties. Disputes relating to consent shall be resolved via arbitration under the Arbitration & Conciliation Act, 1996, seated in Mumbai.
  10. Policy Updates We may amend this Policy in compliance with law. Updated versions will be published on our website/app with effective date.

Annexures Annexure A – Sample Consent Capture Template

“I consent to receive communications (WhatsApp/SMS/Email/Push) from Fin 100X.AI regarding product updates, financial insights, and offers. I understand I may withdraw consent anytime by visiting Settings or sending STOP.”

☑ WhatsApp☑ SMS☑ Email☑ Push Notifications

Annexure B – Sample Withdrawal Request Subject: Withdrawal of ConsentBody: “I, [Name], registered with [Mobile/Email], hereby withdraw consent for receiving [WhatsApp/SMS/Email/Push] communications from Fin 100X.AI.”

Annexure C – DPDP Act User Rights Summary Right to Access Right to Correction Right to Consent Withdrawal Right to Grievance Redressal Right to Nominate

(regulatory-grade, DPDP + RBI/SEBI/IRDAI/PFRDA aligned)

. Website + App-ready legal format.

Covers all consent flows for WhatsApp/SMS/Email/Push.

This version is DPDP Act 2023–aligned, RBI/SEBI/IRDAI/PFRDA–compliant, and includes annexures for templates.

Policy #4: Consent & Communication Policy is the right next step. This policy will cover: Explicit user consent for WhatsApp, SMS, Email, Push Notifications DPDP Act 2023 compliance (consent, withdrawal, notice) RBI / IRDAI / SEBI guidelines on digital consent Opt-in/opt-out flows (with record-keeping obligations) Consent for marketing vs. transactional messages Multi-channel communication governance (audit logs, grievance redressal) Annexures: Sample consent form templates + withdrawal request format