Privacy notice

Version 2026-11-09. This notice explains what the HamaraFolio account keeps about you, under India's Digital Personal Data Protection Act, 2023.

Draft for the invitation-only test, to be reviewed by a lawyer before HamaraFolio opens to the public.

What we keep

• Your details: first name, last name, e-mail address and mobile number.
• Your consent: which version of the Terms and this notice you agreed to, when, and that you confirmed it with your e-mail and WhatsApp codes.
• Your passkey's public key and when it was created and last used. The private part never leaves your device; we never see your fingerprint, face or PIN.
• Short-lived sign-in records: codes stop working after 10 minutes (registration) or 5 minutes (sign-in), and an unfinished registration is deleted automatically. Service logs are kept 14 days and never contain codes, full numbers or full addresses.

What we never collect here

No PAN, no Aadhaar number, no bank or investment details, no documents. Your vault and everything in it stays encrypted with keys on your own devices; the account can't read it.

Why

• To identify you and let you sign in securely (passkey, WhatsApp code, e-mail code).
• To contact you about your account and about HamaraFolio's test.

We don't sell your data, show ads or use trackers. The account pages set no cookies; your sign-in is kept only in the open browser tab.

Who processes it for us

• Amazon Web Services, Mumbai region (ap-south-1): storage, sign-in and e-mail sending.
• Meta (WhatsApp): delivers the WhatsApp code to your number.
• GoDaddy: our support@hamarafolio.com mailbox, if you write to us.

How long

Your details and consent record are kept while you have an account, and deleted within 30 days after you ask us to delete it (a deletion record may be kept as the law requires).

Your rights

You can ask to see, correct or delete your data, withdraw your consent (this closes the account), name someone to act for you, and raise a grievance. Write to support@hamarafolio.com; we answer within 30 days. If you're not satisfied, you can complain to the Data Protection Board of India.

Changes

If this notice changes in a way that matters, we'll ask for your agreement again before you continue.