Privacy Policy

1. Who we are

BudgetAnalyzer (“BudgetAnalyzer”, “we”, “us”, “our”) is a personal finance web application available at budgetanalyzer.in. It is owned and operated as an independently run sole proprietorship based in India, and is the Data Fiduciary for the personal data described in this policy under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). You can reach the person responsible for your data at connect@budgetanalyzer.in — see section 15.

This policy explains what we collect when you use BudgetAnalyzer, why we collect it, who else can see it, how long we keep it, and the rights you have over it. It applies to the website, the logged-in app, and the emails we send you. Your use of the service is also governed by our Terms & Conditions.

2. The short version

The full detail is below, but in plain terms:

• We never ask for your bank login. BudgetAnalyzer has no connection to your bank, no Account Aggregator integration and no read access to any account. Your data gets in because you type it, import a file, or upload a statement yourself.
• We do not sell or rent your data — to anyone, ever — and we run no advertising, no ad networks and no third-party analytics or tracking scripts.
• We collect what the app needs to work: your account details, the financial records you choose to enter, the files you upload, and basic technical logs.
• Sensitive fields are encrypted at rest, files sit in a private bucket reachable only through short-lived signed links, and passwords are stored only as one-way hashes.
• You can get your data out and have it deleted. Export to CSV or PDF any time from the app, and write to connect@budgetanalyzer.in to have your account and its data erased.

3. Information we collect

a. Account information

• Email and password sign-up — your name, email address, and a password. The password is stored only as a one-way bcrypt hash — we never store or see it in readable form. We email a one-time code (OTP) to verify the address.
• “Continue with Google” — if you sign in with Google, Google gives us your name, email address, Google account identifier and profile picture. We never receive your Google password, and we request no access to Gmail, Drive, Contacts or any other Google service.
• Profile details — an optional short description and profile photo you upload.

b. The financial information you enter

• Expenses: date, amount, category, sub-category, payment platform and any description or note you add.
• Income: amount, source, the month it belongs to, and notes.
• Budgets: your monthly and per-category targets.
• Bank balances: the account nickname and type you choose, and the balance figures you record over time. Account numbers are never required.
• Investments: holding names, amounts invested and current values you record.
• Money lent and borrowed: amounts, dates, status, and any counterparty name you type in.
• Categories and payment platforms you create or that are created for you during an import.

All of this is data you choose to enter. None of it is fetched from a bank, a credit bureau or any external financial source.

c. Files you upload

• Your profile photo.
• Receipts or documents you attach to an expense, income or lend/borrow record.
• Bank-statement files (CSV or PDF) you upload to import transactions.

Files are stored in a private object-storage bucket (Cloudflare R2). They are not publicly addressable: the app serves them to you through links that expire within minutes.

d. Technical and usage information

• A “last active” timestamp on your account, and daily counts of active users kept only as aggregate numbers.
• Standard web-server logs — IP address, browser user-agent, the URL requested and the time — used for security, abuse prevention and debugging.
• Delivery information from our email provider (whether a message was sent, bounced or failed).

e. If you join the Premium waitlist

• The email address you submit, so we can tell you when Premium launches.

f. What we never collect

• Bank or net-banking usernames, passwords, UPI PINs or OTPs.
• Card numbers, CVVs or any payment instrument details.
• PAN, Aadhaar or other government identifiers.
• Your location, contacts, camera roll or device identifiers.
• Advertising, analytics or social-media tracking cookies and pixels.

The finance calculators at /calculators run entirely in your browser. The salary, EMI, SIP and other figures you type there are never sent to our servers or stored anywhere.

4. How we use your information

We use the information above only to:

• Create and secure your account, sign you in, and keep your session valid.
• Store, display and let you edit your own financial records.
• Produce your charts, summaries, net-worth trend and budget-vs-actual views.
• Suggest budget targets and auto-categorise transactions. These are computed from your own history on our servers — your data is never pooled with other users' to build a shared model.
• Import transactions from the CSV or statement files you upload, and export your data when you ask for it.
• Send transactional email: verification codes, password resets, a welcome message, and security notices.
• Send occasional product announcements to your registered address. To stop these, reply to any such email or write to connect@budgetanalyzer.in and we will remove you.
• Monitor for abuse, fraud and technical faults, and keep the service running.
• Understand product usage through aggregate counts (for example, how many people used an import feature in a month) — never by reading individual records for analysis.
• Comply with law and respond to valid legal requests.

Consent. We process your data on the consent you give when you create an account and enter information, and for the “legitimate uses” the DPDP Act allows, such as responding to a request you make or complying with a legal obligation. You may withdraw consent at any time by deleting your account (see section 11); withdrawal does not affect processing already carried out.

Internal access. BudgetAnalyzer is run by one person. Access to production systems is limited to the operator and used only to run and repair the service. The internal admin dashboard reports aggregate figures and anonymised activity references — it is not a window into any user's transactions.

5. Cookies and browser storage

We set no tracking cookies and run no third-party analytics. There is no Google Analytics, no Facebook pixel, no advertising tag and no cross-site tracker on this site.

What we do use is your browser's local storage, on your own device, for:

• your session token, so you stay signed in;
• your light/dark theme choice and the amount-privacy (Visible/Hidden) setting;
• small interface preferences, such as whether you have dismissed a one-time prompt.

Clearing your browser storage signs you out and resets those preferences. Nothing in it is read by any third party.

6. Who we share information with

We do not sell, rent or trade your personal data. We share it only with the service providers that run parts of the product on our behalf (Data Processors), each of them bound to use it only for that purpose:

• MongoDB Atlas — database hosting, where your account and financial records are stored.
• Cloudflare R2 — private object storage for your profile photo, attachments and uploaded statements.
• Our cloud/VPS hosting provider — runs the application servers and keeps the web-server logs.
• Google LLC — only if you choose “Continue with Google”, and only to verify who you are at sign-in.
• Our email provider (Hostinger) — delivers verification, password-reset, welcome and announcement email.
• Anthropic — processes statement text during AI-assisted import — only when you use that feature. See section 8.

Beyond those, we disclose personal data only when:

• you ask us to, or you make it public yourself;
• we are required to by Indian law, a court order or a valid request from a public authority;
• it is necessary to investigate fraud, abuse or a security incident, or to protect our rights or someone's safety;
• the service is transferred to a new owner — in which case we will tell you first, and the new owner remains bound by this policy or gives you notice of a replacement.

7. Where your data is stored and processed

Some of the providers above operate outside India, so your data may be stored or processed in other countries. Where that happens we rely on providers that offer recognised security and contractual protections, and we transfer data only to countries not restricted by the Government of India under the DPDP Act.

8. AI-assisted statement import

When you import a bank statement, BudgetAnalyzer first tries to read it with its own rule-based parser, which runs entirely on our servers. If that parser cannot read enough of the file, the lines it could not handle may be sent to Anthropic's Claude API to be turned into structured transactions.

• This happens only for imports you start, and only for the portion of the file the deterministic parser could not read.
• What is sent is transaction text — dates, descriptions and amounts. Your name, email and account identity are not sent with it.
• The data is used to return a parse result to you. It is not used to train AI models.
• Your uploaded file itself is never handed to a third party for storage — only extracted text is processed, and the file is deleted as described in section 9.

9. How long we keep your data

• Account and financial records — kept for as long as your account exists, because they are the product. Deleted when you delete your account.
• Uploaded statement files — deleted from storage as soon as an import has been parsed. A storage lifecycle rule removes anything left in the import area within one day regardless.
• Unfinished import sessions — expire and are deleted automatically after 48 hours.
• Attachments and profile photos — kept until you delete the attachment, replace the photo, or delete your account.
• Verification codes and reset tokens — valid for minutes, then discarded.
• Web-server logs — kept for a short period for security and debugging, then rotated away.
• Backups — our database provider keeps rolling backups. Data you delete disappears from the live service immediately and ages out of backups as those backups roll over.

10. Deleting your data

You can delete individual expenses, income records, budgets, holdings, attachments and entire imported batches yourself from inside the app, at any time.

To delete your whole account, email connect@budgetanalyzer.in from the address your account uses. We will verify the request and erase your account and its data within 30 days, except anything we must keep to comply with a legal obligation. Deletion is permanent and cannot be undone, so export your data first if you want a copy.

11. Your rights

Under the DPDP Act you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is processed. Most of it is visible in the app already, and the Export page produces a full CSV or PDF copy.
• Correction and completion — correct anything inaccurate or incomplete. Profile details and every financial record are editable in the app; write to us for anything you cannot change yourself.
• Erasure — have your data deleted, as described in section 10.
• Grievance redressal — raise a complaint with us and get a response — see section 15.
• Nomination — nominate another person to exercise these rights on your behalf if you die or become incapacitated. Write to us to record a nominee.
• Withdraw consent — stop our processing at any time by deleting your account.

We answer rights requests free of charge, within 30 days. We may ask you to verify your identity before acting on one.

12. How we protect your data

• All traffic between your browser and our servers runs over HTTPS/TLS.
• Passwords are stored only as salted one-way bcrypt hashes.
• Sensitive text fields — including your name, email address, transaction descriptions and merchant labels — are encrypted at rest with AES-256, so they are not readable in the raw database.
• Your email is indexed by a one-way hash, so lookups do not require storing it in plain text.
• Uploaded files live in a private bucket with no public URLs; the app issues download links that expire within minutes.
• Sessions use signed, expiring tokens, and every API request is checked against the account that owns the record.
• Administrative access is restricted to the operator and used only to run the service.

No system is perfectly secure, and we cannot guarantee absolute security. Please use a strong, unique password. If we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board of India as the DPDP Act requires.

13. Children

BudgetAnalyzer is for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete the account and its data. If you believe a minor has created an account, tell us at connect@budgetanalyzer.in.

14. Changes to this policy

We may update this policy as the product changes or the law does. The “last updated” date at the top always reflects the current version. If a change materially affects how we handle your data, we will tell you by email or through a notice in the app before it takes effect. Continuing to use BudgetAnalyzer after a change means you accept the updated policy.

15. Contact and grievance redressal

For any question, request or complaint about privacy or your data, contact the person responsible for grievance redressal:

• Grievance Officer, BudgetAnalyzer
• Email: connect@budgetanalyzer.in

BudgetAnalyzer is a small, independently run product, and this mailbox reaches the person who actually operates it — not a support queue.

We acknowledge complaints promptly and respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of Indiaunder the DPDP Act.