Privacy Policy

This Privacy Policy (“Policy”) is issued by Franchise World Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at to be set(“Company”, “Franchise World”, “we”, “our” or “us”).

The Company operates an online platform that facilitates interactions between investors, franchise consultants, franchise brands, business owners, and other stakeholders (“Platform”).

This Policy describes how we collect, use, process, store, transfer, disclose, and protect personal data of users in accordance with:

• Digital Personal Data Protection Act, 2023 (“DPDP Act”);
• Information Technology Act, 2000;
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
• Applicable rules, regulations, and governmental notifications.

By accessing, browsing, registering on, or using the Platform, you consent to the collection and processing of your Personal Data in accordance with this Policy.

For purposes of this Policy:

The Company may collect the following categories of Personal Data:

A. Identity Information

• Full Name
• Date of Birth
• PAN Number
• Aadhaar Number (where voluntarily provided)
• Government-issued Identification Documents
• KYC Records

B. Contact Information

• Mobile Number
• Email Address
• Residential Address
• Billing Address
• Communication Preferences

C. Investment Information

• Investment Appetite
• Investment Capacity
• Preferred Franchise Categories
• Business Interests
• Funding Preferences

D. Professional Information

• Occupation
• Designation
• Employer Details
• Business Details
• Professional Experience

E. Transaction Information

• Payment Details
• Transaction History
• Razorpay Transaction Records

F. Technical Information

• IP Address
• Browser Type
• Device Information
• Operating System
• Login Records
• Usage Data
• Geolocation Information

We process Personal Data for:

1. Account Registration;
2. Investor Verification;
3. Franchise Opportunity Matching;
4. Consultant Onboarding;
5. Customer Support;
6. KYC Verification;
7. Payment Processing;
8. Fraud Prevention;
9. Risk Assessment;
10. Compliance with Applicable Laws;
11. Marketing Communications;
12. Platform Analytics;
13. Business Operations;
14. Dispute Resolution.

The Company shall process Personal Data only upon obtaining valid consent from the Data Principal or where otherwise permitted under applicable law.

By providing Personal Data through the Platform, the Data Principal expressly:

• Consents to processing;
• Acknowledges the purposes of processing;
• Agrees to the sharing of information as described herein.

Consent may be withdrawn at any time by contacting the Grievance Officer.

Withdrawal of consent shall not affect processing undertaken prior to such withdrawal.

The Company may disclose Personal Data to:

A. Franchise Brands

Where users express interest in franchise opportunities.

B. Franchise Consultants

For onboarding, lead management, and investor assistance.

C. Service Providers / Data Processors

Including but not limited to:

• Razorpay
• Resend
• WATI
• Google Workspace
• Google Calendar
• Supabase
• Vercel
• Cloudflare
• Meta Platforms
• Google Analytics
• Microsoft Clarity
• Google Tag Manager

and any future processors engaged for operational purposes.

D. Government Authorities

Where disclosure is required under law, court order, governmental directive, investigation, or regulatory proceeding.

The Platform integrates with Google APIs to enable our brand Single Point of Contact (SPOC) users to connect their Google Calendar so that Franchise Consultants can schedule investor discovery meetings on their availability. Specifically, we request the following Google OAuth scopes:

• https://www.googleapis.com/auth/calendar.events — to create, view, and update calendar events for investor meetings scheduled through the Platform, including attaching attendees and an auto-generated Google Meet conferencing link;
• https://www.googleapis.com/auth/calendar.readonly — to read the SPOC user's free/busy availability so consultants can select a meeting slot that is not already booked. Event titles, descriptions, and attendees of unrelated events are not displayed in the Platform.

Franchise World's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we:

• Use Google user data only to provide and improve the calendar-scheduling features described above;
• Do not transfer Google user data to third parties except as needed to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to affected users;
• Do not use Google user data for serving advertisements, including retargeting, personalised, or interest-based advertising;
• Do not allow humans to read Google user data unless we have obtained the user's affirmative agreement to view specific messages, are doing so for security purposes (e.g. investigating abuse), to comply with applicable law, or where the data has been aggregated and is used for internal operations in accordance with applicable privacy and other laws.

A SPOC user may revoke the Platform's access to their Google account at any time by visiting the "Connected apps and sites" page in their Google account settings, or by clicking "Disconnect" on the Settings page within the Platform. On revocation we cease accessing the account and the refresh token stored on our servers is rendered invalid.

The Platform utilizes:

• Cookies;
• Pixels;
• Tags;
• Analytics Tools;
• Session Storage Technologies.

The Company currently utilizes:

• Google Analytics 4 (GA4);
• Meta Pixel;
• Microsoft Clarity;
• Google Tag Manager.

Users may control cookie preferences through browser settings or the Platform’s consent management interface.

Personal Data shall be retained only for so long as necessary to:

• Fulfil contractual obligations;
• Comply with applicable laws;
• Resolve disputes;
• Protect legal rights;
• Prevent fraud.

Upon expiry of the retention period, Personal Data shall be deleted, anonymized, or securely destroyed unless retention is required by law.

The Company maintains reasonable security safeguards, including:

• Encryption;
• Access Controls;
• Authentication Controls;
• Audit Logging;
• Secure Cloud Infrastructure;
• Vendor Due Diligence Procedures;
• Data Access Restrictions.

Notwithstanding the foregoing, no electronic system can be guaranteed to be completely secure.

Personal Data may be processed, hosted, stored, or transferred outside India through service providers engaged by the Company, subject to compliance with applicable law and any restrictions notified by the Government of India under the DPDP Act.

The Platform is not intended for individuals below the age of eighteen (18) years.

The Company does not knowingly process Personal Data of children without complying with applicable legal requirements.

Pursuant to the DPDP Act, the Company has designated the following Grievance Officer:

Any grievances regarding Personal Data may be addressed to the above contact details.

Franchise World acts solely as an intermediary platform facilitating introductions between investors, consultants, and franchise brands.

All investment and business decisions are undertaken solely at the user’s risk.

The Company reserves the right to modify, amend, update, or replace this Policy at any time.

Updated versions shall be published on the Platform and shall become effective upon publication.

This Policy shall be governed by and construed in accordance with the laws of India.

Any disputes arising out of or relating to this Policy shall be subject to the exclusive jurisdiction of the courts located at Mumbai, Maharashtra.

For any privacy-related queries: