Fine Print

Privacy Policy

smallcase.com and the mobile application ‘smallcase’ is a product owned and operated by CASE Platforms Private Limited (Formerly known as “Smallcase Technologies Private Limited”; hereinafter referred to as “the Company”, “us”, “we”). The Company is committed to safeguarding any information submitted to us on our website (“Site”) and/or the services made available through the Site or mobile applications (collectively referred to as the “Platform”) of the Company (“Services”). The privacy notice provides you with a summary of the type of information collected by us, policy regarding use of that information and measures taken to safeguard that information.

We may also allow our group companies, affiliates and subsidiary companies, and third parties to use our Platform to offer their products and services to you, under applicable terms and conditions specified on our Platform from time to time.

User Consent and Agreement

By submitting Personal Information through our Platform or Services, you agree to the terms of this Privacy Policy and you expressly give your voluntary consent to the collection, use and disclosure of the Personal Information in accordance with this Privacy Policy.

Information you provided to us

If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included in the e-mail, in order to send you a reply.
When you participate in one of our surveys, we may collect additional information.
We may collect Personal and financial information provided by you, such as your first and last name, phone, e-mail address, age, investments, PAN etc. while you access services on the platform
We may also collect Personal Information on the Platform or through the Services when we make clear that we are collecting it and you voluntarily provide the same, for example when you submit an application for employment.
We may collect necessary documents, to provide services including credit facilitation, when you voluntarily provide the same through one-time access to files or images on your device
You must ensure to recheck the information or data being provided to us. In case any of the data/information is found to be inaccurate or incorrect, the same shall be informed to us for immediate amendment. We shall not be responsible for the authenticity of any information including personal information submitted to us.

Information collected via technology

To make our Platform and Services more useful to you, our servers (which may be hosted by a third-party service provider) collect information from you, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), and domain name.

Use of personal information

In general, personal Information you submit to us regarding you or your company is used either to respond to requests that you make, or to aid us in serving you better. We use such Personal Information in the following ways:

To identify you as a user in our system;
To provide improved administration of our Platform and Services;
To provide the Services you request;
To improve the quality of experience when you interact with our Platform and Services;
To send you e-mail and other notifications;
To send newsletters, surveys, offers, and other promotional materials related to our Services and for other marketing purposes.
Protect our services and our users.
Market and customer analysis, market research and statistics.
To prevent and detect fraud or abuse of our services as well as to prevent, detect and investigate any potential unlawful or prohibited activities.

Disclosure to third parties

We may be required from time to time to disclose any personal information collected by us to governmental or judicial bodies or agencies or our regulators based on their requirement to comply with the applicable laws including cyber laws.

Specifically, in the case of the credit facilitation services being provided to you, the following data is being shared with authorised third parties:

PAN, Mobile no. and Email ID for investment holdings verification are shared with SEBI-registered RTAs and Depositories
KYC documents for OCR and bank account for mandate setup with Digio (Digio is a RBI-regulated entity)
Email ID for communication with Amazon Web Services
Phone No. for SMS/WhatsApp communication with our service providers Kaleyra/Gupshup

Further, to facilitate your transactions in mutual funds as a regulated Category-1 Execution Only Platform, the following data is being shared with authorised third parties:

Name, PAN, phone number, email address, address, date of birth, income range, KYC status, occupation, tax residency status, nominee details, nominee identity verification, bank account details for KYC/account opening are shared with SEBI registered RTAs (CAMS & KFIN)
Bank account details for verification of bank account are shared with Agya Technologies Private Limited (operating as Setu Account Aggregator)
PAN and name for fetching KYC status are shared with NDML being a SEBI-registered KYC Registration Agency
Email ID for communication with Amazon Web Services
Phone No. for SMS/Whatsapp communication with our service providers Kaleyra/Gupshup

Creation of anonymous information

We may create Anonymous Information records from Personal Information by excluding information (such as the name and email). We use this Anonymous Information to analyze request and usage patterns so that we may enhance the content of our Services and improve Platform navigation. The Company reserves the right to use Anonymous Information for any purpose and disclose Anonymous Information to third parties at its sole discretion.

Third party websites

When you click on a link to any other website or location, you will leave our Platform and go to another site and another entity may collect Personal Information or Anonymous Information from you. We have no control over, do not review, and cannot be held responsible for, these outside websites or their content. Please be aware that the terms of this Privacy Policy do not apply to these outside websites or content, or to any collection of information after you click on links to such outside websites.

Cookies

“Cookies” are pieces of information that a browser can record after visiting a website. We may use cookies for technical purposes such as to enable better navigation through our site, or to store user preferences for interacting with the site. If you turn off the option to have cookies stored on your browser, it will affect your experience on smallcase.com

Security of your information

The Company is committed to protecting the security and privacy of your Personal Information. We endeavour to have suitable technical, operational and physical security controls and measures to protect information collected by us that are commensurate with the nature of our business at all times. We use a variety of industry-standard security technologies and procedures to help protect your Personal Information from unauthorized access, use, or disclosure, and periodically review the same.In the event of any breach of our security control measures resulting in unauthorised access to your information, we will endeavour to inform you of the extent of such breach, subject to applicable law and cooperation with the relevant authorities. Further, despite our efforts to protect your information, if unauthorized persons breach security control measures and illegally use such sensitive/personal data or information, the Company, its affiliates and directors shall not be held responsible/liable.

Retention and destruction of information/data

Personal Information provided by you shall be retained for a duration of 8 years from the completion/termination of Services, unless a longer period is necessitated under legal or regulatory requirements from time to time.

For any data as well as consent that you may have provided and want to be deleted or revoked (fully or partially), please send an email to support@smallcase.com stating the details of the data and/or consent provided and the scope/nature of the deletion/revocation desired. However, in the event of you withdrawing such consent or making a request to delete the data, you would not be able to use the Services.

Upon the receipt of a valid data deletion request, it is assessed for authenticity and the legitimacy of the request is evaluated. Anonymization is considered prior to deletion, provided it does not conflict with the applicable laws and/or legal obligations. We endeavor to delete the relevant Personal Information based on a valid request received from you within a reasonable period not exceeding 30 days of receiving a valid and legitimate data deletion request, unless retention is required for compliance with the applicable laws and/or legal obligations.

All information (including Personal Information) is stored on Amazon Web Services (AWS) cloud infrastructure hosted in India. We rely upon their protocols to ensure secure disposal of such data. Data destruction shall be performed according to AWS Media Destruction Protocols hosted at: https://aws.amazon.com/trust-center/data-center/our-controls/#topic-4. AWS decommissions media using techniques detailed in NIST 800-88.

Notwithstanding the above, certain data may be retained beyond the specified timelines where there is an unresolved issue, dispute, or claim relating to your account; where retention is required under applicable law or regulatory mandate; where the data is retained in aggregated and/or anonymised form such that it is not attributable to you; or where retention is necessary for legitimate business interests such as fraud prevention or ensuring platform security.

Amendments/Modifications

This Privacy Policy available on our website is current and valid. However, the Company reserves the right to amend/modify any of the sections of this policy at any time and the general public are requested to keep themselves updated for changes by reading the same from time to time.

Contact Information

The Company welcomes your grievances, comments or questions regarding the term of this Privacy Policy, the Platform, or the Services. Please e-mail us at support@smallcase.com or contact our grievance officer at the following address:

CASE Platforms Private Limited (Formerly known as “Smallcase Technologies Private Limited”)
#51, 3rd Floor, Le Parc Richmonde,
Richmond Road, Shanthala Nagar,
Richmond Town, Bangalore – 560025

Definitions

Anonymous Information – Anonymous information means information that does not directly or indirectly identify, and cannot reasonably be used to identify, an individual guest/user.
Internet Protocol (IP) – Internet Protocol (IP) is the principal set (or communications protocol) of digital message formats and rules for exchanging messages between computers across a single network or a series of interconnected networks, using the Internet Protocol Suite (often referred to as TCP/IP). Messages are exchanged as datagrams, also known as data packets or just packets.
Personal Information – Personal Information means any information that relates to a natural person, which, either directly or indirectly, in combination with any other information available, is capable of identifying such person.

Last updated on 25 September 2025.