Privacy policy

Invest With Raj is the public-facing name used on this website. Privacy requests for the website are handled through Raj Tomar's office at office@investwithraj.com. The contracting party for any separate professional engagement must be identified in that engagement's written terms; this page does not invent it.

This policy covers investwithraj.com. A third-party site, app or embedded media player applies its own privacy terms when you choose to open or load it.

Intake and lead forms

Depending on the form, the site can receive your name, email, phone or WhatsApp number, jurisdiction, capital band, time horizon, intent, areas of interest, free-text note, form source and consent version or timestamp.

Editorial email subscription

The newsletter page records your email address, selected topics, optional market preference, page source, consent time and subscription activity in a separate durable subscription store. Delivery begins only after double opt-in confirmation. Private confirmation and management tokens are stored as hashes; the email link carries the raw tokens in its URL fragment so the browser can remove them before making the preference request. You can change topics or suppress delivery from that private page. Email consent does not permit WhatsApp, SMS, phone or automated calling.

Partner and referral records

A partner application records the applicant's own professional, market, regulatory-status and client-benefit details for manual review. A referral-link request records only the introducer's own contact details and non-identifying context; the endpoint rejects email addresses and phone-like strings in that context. Neither form creates marketing consent or a commercial promise.

Automated question desk

If you accept the disclosure and send a question, the question and recent chat context are submitted to the site's server and then to Anthropic to generate a response. Do not include passport, banking, contract or other sensitive personal information.

Booking and direct contact

Information entered in the booking interface, WhatsApp or your own email service is received by that service and by Raj's office according to the route you choose.

• Hosting and security systems may receive IP address, request time, requested path, browser metadata and error information.
• The automated question endpoint derives a short-lived hashed request key from the trusted network address and maintains temporary counters locally and, in production when configured, in shared Redis. Those counters do not contain the question text and are not used as a marketing profile.
• The browser stores the versioned privacy choice locally so it can keep optional measurement off unless allowed.
• If you save research, comparisons or calculator scenarios, this browser keeps up to 20 items for 30 days. You can remove them individually or clear the shortlist. They do not sync across devices. Only items you explicitly select in the brief are sent to Raj for review and included in the enquiry record and office notification. Clearing this browser does not delete a brief you have already submitted. Saved calculation inputs are not included in marketing analytics or public web addresses.
• If analytics consent is given, configured measurement tools can receive pageviews and interaction events. Form inputs are not intended to be sent as analytics properties.
• Social-video previews are served by this site. Instagram is not contacted unless you deliberately choose to load its embedded player or open the post on Instagram.

• To deliver and respond to an enquiry or intake brief.
• To confirm and deliver the editorial email topics you selected, and to honour preference changes or suppression.
• To review a professional partner application or create the privacy-safe referral link you requested.
• To generate the automated response you explicitly requested.
• To provide a booking or direct-contact route you selected.
• To protect forms and APIs from abuse, diagnose faults and keep the site operating.
• To measure and improve the site only when optional analytics have been allowed.

The site does not infer cross-channel marketing permission from an editorial subscription, enquiry, booking, partner application or referral request, and it does not sell contact data.

The following services are connected in the current code. Some operate only when the corresponding environment configuration or consent is present.

• Vercel for hosting, delivery, server logs and, when consented and configured, website measurement.
• Resend for lead and conversion notifications and editorial confirmation emails.
• Upstash Redis, when configured, for lead, subscription, partner, referral and briefing-registration records, consent/suppression activity, idempotency controls and short-lived shared rate-limit keys.
• Anthropic for configured lead classification and for the automated question response described above.
• n8n, when configured, for routing an enriched lead submission into the office workflow.
• Cal.com when you choose the booking interface.
• Hunter.ioonly when an authenticated reviewer deliberately asks to verify a lead's email address. This is not automatic; the submitted email is sent to Hunter and the verification result is retained with the protected lead record.
• Meta WhatsApp when you choose to open a WhatsApp conversation.
• Instagramwhen you choose to load an embedded public post or Reel. That request is made directly from your browser to Instagram, which may receive network and browser information under Meta's own terms. A direct Instagram link remains available if the player is unavailable or blocked.
• Google Analytics 4 / Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, PostHog and Statsig only when configured and the browser has allowed optional analytics.

A named vendor is not a promise that it is active in every environment. Provider contracts, regions and account settings require operational review.

The site starts in essential-only mode. Optional analytics stay off until you give explicit consent. The privacy choice is stored in the browser so configured providers can run only after that choice and may then set or read their own identifiers.

Use the persistent privacy-choices control to change the setting. Withdrawing consent shuts down optional trackers and clears known first-party tracker storage. Browser controls can also block or clear storage. Essential hosting, security and direct form delivery continue because they are required for the requested site function.

An Instagram player is a separate, one-time media request. It is never loaded automatically and choosing it does not turn on the site's optional analytics setting. You can instead use the direct link or leave the first-party preview untouched.

The automated chat route does not write a conversation to a site database. It sends recent context to Anthropic, whose handling is governed by the configured service terms and account settings. A hashed, IP-derived rate-limit key and a global counter may be held in shared Redis for up to ten minutes; the question text is not written into those counters.

A launch request becomes an office notification, not a subscriber-list entry. Lead and one-time launch-request records in the website's Redis store have a default expiry of 730 days, while duplicate-submission reservations expire after 24 hours. Copies accepted by office email or configured automation follow those providers' and the office's separate retention settings.

Separate newsletter, partner, referral and briefing-registration records expire from the website's durable conversion store after 1,095 days by default. Their duplicate-submission reservations and newsletter confirmation lookup expire after 24 hours. Newsletter confirmation and management tokens are stored only as hashes; a management-token hash can remain with the subscription record for that record's lifetime so the private preference route continues to work.

A production retention and deletion schedule must be approved by the responsible operator and counsel. Until then, request access or deletion through the contact below.

You may ask the office to identify, correct or delete personal information it controls, object to a use or withdraw optional analytics consent. Rights and exceptions depend on the applicable law and the reason a record must be kept.

Send the request from the address associated with the record to office@investwithraj.com. The office may need proportionate information to verify the request.

The services listed above may process information outside your country or the UAE. The location and safeguards depend on the configured provider account and contract. Those details require operational and counsel review rather than a blanket claim on this page.

The site is not designed for children. Do not submit information about a child or sensitive identity, health, financial, banking or contract material through the public forms or automated desk.

The site uses access controls, validation, consent gating and rate controls appropriate to its current functions, but no online service can promise absolute security.

Material changes will update the review date on this page. For a privacy request or question, email office@investwithraj.com.

Return to the legal index or read the terms of use.