Safety, terms & launch readiness
Development-only software. These notes do not constitute legal or financial advice.
No licensed investment business, regulated product, live payments, customer asset management, guaranteed returns, financial advice, or identity verification are provided by this software.
Demo terms
All account balances, example investments, payouts, figures and profit scenarios in this website are fictional. They are not legal claims against an operator and cannot be redeemed, transferred or withdrawn as money. Do not input real government identification numbers or upload documents.
Privacy in this software
The example database stores usernames, email addresses, password hashes, example KYC labels, and test transaction activity. Demo emails are stored in a local outbound queue by default; operators must secure the host, databases, logs, backups and access controls. No actual identity records or banking information should be collected.
Before accepting or investing real money
- Define the exact product and legal entity: investment adviser, securities intermediary, fund manager, deposit-taker or another model. Obtain specialist Indian legal advice.
- Determine required SEBI, RBI, or other licences/registrations and product permissions. RBI NBFC registration alone does not authorise acceptance of public deposits.
- Complete banking/escrow/settlement, designated client-money handling, payment-provider and merchant onboarding, and legally required agreements/disclosures.
- Implement real KYC/AML and screening through authorised partners, regulatory recordkeeping, fraud controls, grievance resolution and data privacy controls.
- Integrate a licensed payment gateway with server-verified signatures, webhook replay protection, refunds, bank reconciliation, dual-control payments and tamper-evident ledger rules.
- Complete independent security audit, penetration tests, incident response, TLS, secrets management, encrypted backups, MFA, role separation, monitoring and production database design.
- Publish real privacy and customer agreements, scheme-specific risk disclosures, fees, returns disclosures and approved marketing copy. Do not promise fixed gains unless a lawful product specifically allows it.
Official starting points: RBI, SEBI. Confirm the current applicable rules with qualified counsel.
Security limitations of this starter
Uses PHP sessions, parameterised SQLite queries, CSRF tokens, a login-attempt throttle, password hashing, authorisation checks and transaction-bound sample ledger entries. This is a teaching/demo foundation, not a production-rated financial system.
Email verification, password reset, user MFA, third-party identity services, live price feeds, full double-entry bank reconciliation, distributed rate limiting, observability and fraud detection are not included.