Privacy Policy

Who we are

FolioMunshi is a personal financial dashboard service operated by Amit Mehta, a SEBI-registered Mutual Fund Distributor (AMFI Registration No. ARN-XXXXXX) and Independent Financial Advisor based in New Delhi, India.

FolioMunshi is not a financial product, bank, NBFC, or investment platform. It is a portfolio organisation and tracking tool that helps you and your family view your existing financial assets in one place.

For any privacy-related questions, contact us at: amitmehta.finance@gmail.com

Legal basis for processing

We process your personal data under the Digital Personal Data Protection Act, 2023 (DPDPA 2023) of India. Our legal bases for processing are:

• Consent — you provide explicit consent when you begin using FolioMunshi and share your financial information with your advisor
• Contractual necessity — processing is necessary to provide the dashboard service you have subscribed to
• Legal obligation — we retain certain records as required under SEBI regulations applicable to registered intermediaries

You may withdraw your consent at any time by contacting us at the email above. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

What information we collect

We collect only what is necessary to provide your financial dashboard. This includes:

We do not collect biometric data, credit scores, bank account numbers, or any financial data beyond what you or your advisor explicitly provide.

How we use your information

Your information is used exclusively to:

• Display your insurance, mutual fund, FD, and loan data on your private dashboard
• Send premium renewal reminders and maturity alerts to your registered email
• Respond to WhatsApp queries about your portfolio (Platinum tier)
• Authenticate you when you access your dashboard
• Power AI-based features (FD rate analysis, loan prepay advisor) that run on your own data
• Maintain records as required under SEBI regulations

We do not use your data for marketing, behavioural profiling, credit scoring, targeted advertising, or any purpose unrelated to your dashboard.

Where your data is stored

All your personal and financial data is stored on Google's India-based servers (Mumbai region), within Google Workspace infrastructure. Specifically:

• Google Sheets — your financial data is stored in access-controlled spreadsheets visible only to your advisor
• Google Drive — uploaded insurance and FD documents are stored in your advisor's secured Drive folder
• Google Cloud Run (asia-south1, Mumbai) — backend processing runs in India
• Google Apps Script — dashboard logic executes within Google's infrastructure

Your data does not leave Google's India-based infrastructure except as described in the third-party section below. No data is stored on any server outside India unless explicitly noted.

Each client's data is isolated by a unique access token. Only your advisor (Amit Mehta) has administrative access to the underlying data store. Your dashboard URL is unique to you and not discoverable by others.

Data sharing and third parties

We share your data with the following service providers only to the minimum extent necessary to operate FolioMunshi. None of these providers may use your data for their own commercial purposes.

We do not share your data with insurance companies, AMCs, banks, brokers, government bodies (except as legally required), or any entity not listed above.

Note on AI features: When you use AI-powered features (FD health analysis, loan prepay advisor), anonymised financial data (amounts, rates, dates — no name, PAN, or policy numbers) is sent to Anthropic's Claude API to generate insights. This data is used solely to produce your response and is not used to train AI models per Anthropic's API data processing policy.

Your rights under DPDPA 2023

Under India's Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

To exercise any of these rights, email us at amitmehta.finance@gmail.com with the subject line "DPDPA Rights Request". We will acknowledge within 48 hours and respond within 30 days.

Data retention

We retain your personal and financial data as follows:

• While you are an active client — your full dashboard data is retained and kept current
• After you stop using FolioMunshi — records required under SEBI regulations are retained for 5 years from your last transaction date
• Login audit logs — retained for 2 years for security purposes
• WhatsApp message content — not stored by us beyond what Meta retains per their policies

You may request deletion of data not subject to regulatory retention at any time, and we will action it within 30 days.

Security measures

We implement the following technical and organisational measures to protect your data:

• PIN-based authentication — your dashboard is protected by a PIN that only you set and know
• Token-isolated access — your unique dashboard URL is not guessable or discoverable
• HTTPS encryption — all data in transit is encrypted using TLS 1.2 or higher
• Access-controlled storage — only your advisor has administrative access to the underlying data
• Audit logging — all dashboard logins are recorded with timestamp and IP address
• Google Workspace security — benefits from Google's ISO 27001, SOC 2, and GDPR-compliant infrastructure

No system is perfectly secure. If you suspect unauthorised access to your dashboard, contact us immediately at amitmehta.finance@gmail.com.

Cookies and tracking

FolioMunshi does not use advertising cookies, tracking pixels, or third-party analytics tools that profile your behaviour. We use:

• Session storage — to temporarily cache your dashboard data within a single browser session, avoiding repeated server calls. This data is cleared when you close your browser tab.
• Cloudflare — standard CDN performance and security cookies. These do not identify you personally.

We do not use Google Analytics, Facebook Pixel, or any behavioural tracking technology.

Children's privacy

FolioMunshi is intended for use by adults (18 years and above). We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor's data has been submitted, contact us and we will delete it promptly.

Under DPDPA 2023, we obtain verifiable parental consent before processing any data of a child (person under 18), and we do not engage in tracking, behavioural monitoring, or targeted advertising directed at children.

Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and Information Technology Act, 2000, the details of the Grievance Officer are:

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once it is constituted under DPDPA 2023, or approach the appropriate regulatory authority.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or applicable law. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify active clients via email at their registered address
• For significant changes affecting your rights, seek fresh consent where required under DPDPA 2023

Continued use of FolioMunshi after the effective date of a revised policy constitutes acceptance of the updated terms.

Contact

For any questions, concerns, data requests, or complaints related to your privacy: