Privacy Notice

This Privacy Notice explains how NPS Desk, an independent research initiative by Box Wealth Advisors (the “Operator”, “we”, “our”, or “us”), collects, uses, stores, and protects personal information shared by visitors and users of npsdesk.com(the “Site”).

1. Who we are

NPS Desk is operated by Box Wealth Advisors. The Site is an independent education and planning-support initiative focused on India's National Pension System (NPS). It is not affiliated with PFRDA, NPS Trust, any Central Recordkeeping Agency, any Pension Fund Manager, any Annuity Service Provider, any Point of Presence, or the Government of India.

2. Information we collect

When you register interest through the Site, we collect:

• Your name and email address.
• Your self-declared user profile (for example, individual, employer, advisor, NRI / OCI).
• The research topics or questions you describe in the free-text field.
• The text and version of the consent statement you accepted, with a timestamp.
• Your IP address and browser user-agent string, for security and consent audit purposes.

When you simply browse the Site, our hosting and analytics providers may collect standard technical information such as IP address, device type, browser, pages viewed, and approximate location at country level.

3. Why we collect this information

• To respond to your expression of interest and share early-access research material.
• To understand which user segments and research themes matter most to our audience.
• To maintain a record of consent in line with applicable data protection requirements.
• To detect abuse, debug issues, and operate the Site reliably.

4. Lawful basis

We process the personal information you share with us on the basis of your consent, given when you submit the early-access form. Where applicable, we also rely on our legitimate interest in operating, securing, and improving the Site.

5. Service providers and where your data is stored

We rely on a small set of trusted processors to operate the Site:

• Neon Inc.— managed Postgres database. Waitlist submissions are stored in our Neon database hosted in Singapore.
• Vercel Inc.— web hosting and edge delivery for the Site, with global points of presence.
• Google LLC— Google Analytics 4 for aggregate, non-identifying usage analytics.

Personal information collected through the Site may therefore be processed and stored outside India by the service providers listed above. As of the date of this notice, the Government of India has not restricted cross-border transfers of personal data to Singapore, the United States, or the European Union under the Digital Personal Data Protection Act, 2023, and we take reasonable steps to ensure such transfers are made to providers with appropriate privacy and security commitments.

These processors handle data only on our instructions and under their own published privacy and security commitments.

6. Sharing and disclosure

We do not sell or rent your personal information. We do not share it with third parties for their independent marketing. We may disclose information when required by law, regulatory request, or to protect the rights and safety of the Operator and its users.

7. Retention

We retain waitlist information for as long as it remains useful to keep you informed of our research and product progress, and to maintain our consent records. You may ask us to delete your information at any time using the contact details below. Server logs and aggregate analytics are retained for shorter periods consistent with our processors' defaults.

8. Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Withdraw your consent and request deletion of your information.
• Raise a grievance about how your information is handled.

To exercise any of these rights, write to us using the contact details below. We will respond within a reasonable period.

9. Cookies and analytics

The Site uses Google Analytics 4 to understand aggregate visitor behaviour. Analytics may set cookies in your browser to distinguish unique visits and sessions. The Site does not currently use advertising or remarketing cookies. You can disable cookies through your browser settings and use browser extensions to opt out of analytics tracking.

10. Security

We use encryption in transit (HTTPS), least-privilege access to administrative systems, and rely on reputable managed service providers for storage and processing. No internet transmission or electronic storage is fully secure, and we cannot guarantee absolute security.

11. Children

The Site is not intended for children below the age of 18. We do not knowingly collect information from minors.

12. Updates to this notice

We may update this Privacy Notice from time to time. The “last updated” date at the top of this page indicates when it was last revised. Material changes will be highlighted on the Site.

13. Contact us

For privacy questions, data access, correction, or deletion requests, write to privacy@npsdesk.com.