Privacy Policy

1. Introduction

Finqora (“we”, “our”, or “us”) is a personal finance management platform available at finqora.app. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

By creating an account or using Finqora, you agree to the practices described in this policy. If you do not agree, please do not use the service.

2. Information We Collect

2.1 Account Information

When you register, we collect your email address and password. You may optionally provide your name and profile image. If you sign in with Google, we receive your name, email, and profile picture from Google. We also store your preferences such as default currency, locale, timezone, and theme.

2.2 Financial Data

You manually enter all financial data into Finqora. We do not link to your bank accounts or automatically import transactions. The financial data you provide may include: income and expense transactions, assets and investments across 20+ asset classes, liabilities such as loans and credit card balances, financial goals, recurring transactions, and financial account balances.

2.3 Payment Information

If you subscribe to the Pro plan, payments are processed through Cashfree Payment Gateway. We store limited payment details for subscription management: card last 4 digits, card network, expiry, and issuing bank name for card payments, or your UPI ID for UPI payments. Full card numbers and CVVs are never stored on our servers.

2.4 Cookies & Session Data

We use essential cookies only — no analytics or advertising trackers. An auth-session cookie (7-day duration, SameSite=Lax) is set to maintain your authenticated state. A JWT-based session cookie is managed by our authentication system to persist your login across page reloads.

3. How We Use Your Information

• Providing and operating the Finqora service — displaying your dashboard, generating financial health scores, tracking goals
• Authenticating your identity and securing your account
• Processing payments and managing your subscription
• Sending transactional emails — account verification, password resets, and subscription renewal notifications
• Calculating financial insights such as cashflow analysis, savings rate, and net worth

We do not sell, rent, or trade your personal or financial data to any third party. We do not use your data for advertising or profiling.

4. Third-Party Services

We use the following third-party services to operate Finqora. Each processes only the minimum data required for their function:

• Cashfree Payment Gateway — processes Pro plan payments. Receives payment details necessary to complete transactions. Subject to Cashfree's Privacy Policy.
• Resend — delivers transactional emails (verification, password reset, renewal notifications). Receives your email address only.
• Google OAuth — provides optional sign-in via Google. We receive your name, email, and profile picture. Subject to Google's Privacy Policy.

5. Data Security

We take the security of your data seriously and implement industry-standard measures:

• Passwords are hashed using bcrypt with a secure salt factor and are never stored in plain text
• API authentication is handled via signed JSON Web Tokens (JWT)
• Sensitive data transmissions are encrypted using RSA encryption
• Rate limiting is enforced to prevent brute-force attacks
• All connections are secured with HTTPS in production
• Password reset and verification tokens are hashed and expire automatically (1 hour and 24 hours respectively)

6. Data Retention & Deletion

Your data is retained for as long as your account is active. When you delete your account, it enters a 30-day recovery period during which your data is soft-deleted and can be restored if you change your mind. After 30 days, your account and all associated data — transactions, assets, liabilities, goals, and financial health records — are permanently deleted.

7. Your Rights

You have the right to:

• Access your data at any time through your Finqora dashboard
• Correct any inaccurate personal or financial information
• Export your financial data in Excel format (available to Pro users)
• Delete your account and all associated data from your account settings

To exercise any of these rights, you can use the relevant features in your dashboard or contact us at hello@finqora.com.

8. Children's Privacy

Finqora is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or through a notice on the platform. Continued use of Finqora after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact us at hello@finqora.com.