Privacy Policy

Last updated: August 2026

1. Introduction

Welcome to MyFinanceSheet. We respect your privacy and are committed to protecting the personal and financial data you record in your trading journal. This Privacy Policy describes how we collect, process, secure, and manage your data when you use the MyFinanceSheet application dashboard operated by RAVINDRA KUMAR SAHOO (Trade Name: MY FINANCE SHEET) (“us”, “we”, or “our”).

2. Information Collection

We collect the following classes of data to operate and personalize your trading journal dashboard:

  • Profile Metadata: Your name, email address, username, optional mobile number, optional profile avatar, and authentication details supplied via email login.
  • Journal Records: Tickers/symbols, entry/exit prices, position quantities, stop-losses, targets, strategy setups, notes, psychological tags, and attached chart images.
  • Imported Broker Data: CSV spreadsheets uploaded to sync trade history.
  • Device Metadata: Generated device session identifiers, browser client strings, and IP configurations to manage active sessions and prevent unauthorized access.

3. Data Security & Storage

All trade journals and configuration metadata are securely stored in our encrypted relational databases managed by Supabase, utilising SSL transmission protocols.

To enable offline support, your transactions are cached locally inside your browser's IndexedDB environment. This local cache is protected by your personal 4-digit App PIN Lock to prevent unauthorized local viewing if you share device screens.

4. APIs & Customer Service

API: Our platform syncs transactions via third-party broker APIs (e.g. Zerodha Kite, Dhan, Groww, Upstox). We do not store your account passwords or trading credentials on our servers. All API integrations use secure, direct OAuth handshakes or token validation.

Customer Service: When you reach out to our support team via our contact form or [email protected], we collect your name, email address, selected topic, and message logs to troubleshoot issues, guide dashboard configurations, and resolve help tickets.

5. When Would We Share Personal Information

MyFinanceSheet does not sell, lease, or rent your trade logs or performance stats to any third-party brokers or advertisers.

We only share personal information with essential infrastructure service providers necessary to operate our billing and account services:

  • Supabase: For account authentication databases and core storage storage.
  • Razorpay: Encrypted payment tokenization for managing paid subscription renewals.
  • Resend / WhatsApp Gateways: Transactional billing alerts and administrative notifications.

6. Analytics, Advertising & Cookies

Analytics & Advertising: We use self-hosted, privacy-focused analytical logs alongside third-party tracking services including **Google Analytics (GA4)**, **Google Ads**, **Facebook Pixel**, and **Bing Ads** to measure landing page traffic, track visitor interactions, analyze ad campaign performance, and build retargeting audiences. These tools deploy tracking cookies to compile aggregate user statistics on marketing conversions, but do not access or collect your private trading logs, journals, or personal broker credentials. For more information on what type of information is collected, please visit the Google Privacy web page. For more information on Google Analytics privacy practices, you can check here.

Cookies: We utilize essential cookies and service worker caching (CacheStorage) to verify active profile credentials, bypass redundant logins, speed up loading assets, and ensure offline functionality. You can block cookies in your browser settings, though doing so will disable app login features.

7. Public Profiles & Your Rights

Public Profile: By default, your trade logs and profile statistics are private. If you explicitly choose to make a playbook setup or trading scorecard public (e.g., sharing a public link of your trades), other users will be able to see those details.

Your Rights & Deletion: You have the right to view, modify, or completely delete all trade logs, portfolios, custom tags, trading systems, and AI conversation history stored in your account database. You can instantly delete your profile directly from your Account settings, which immediately purges your journal and personal data from our active database nodes.

Financial & Tax Data Retention: In compliance with Section 36 of the Indian CGST Act, 2017 and the Income Tax Act, 1961, all financial records, subscription sales invoices, payment transactions, and tax receipts (including customer email, billing address, business names, and GSTINs used during checkout) must be legally retained for a minimum period of 72 months (6 years). Upon account deletion, these billing invoices are decoupled from your active profile but are preserved in our historical accounting ledger to comply with statutory government tax audits.

Anonymized Usage & Infrastructure Audit Logs: To reconcile operational vendor billing (such as Google Cloud LLM API Studio and WhatsApp infrastructure fees), aggregate daily resource usage logs (token counts, query numbers, and message totals) are decoupled from your personal profile upon account deletion (`user_id = NULL`). These logs contain zero personal data, trade records, or identifiable information and are retained strictly as anonymized platform cost metrics.

Inactivity & Data Retention: In order to maintain system hygiene and optimize storage resources, we enforce an automated inactivity data retention cleanup policy. If an account has no recorded sign-in activity for a consecutive period of 365 days (12 months) for Free Plan accounts, or 1,095 days (36 months) for Paid Plan/Expired-Paid accounts, all journal records, portfolios, trade logs, strategy tags, and associated checklists will be permanently purged from our active databases. Prior to this deletion, we will send warning notifications to the registered account email at 30 days, 15 days, and 7 days before the scheduled deletion. Logging back into your account resets this inactivity timer.

Data Backups & Custody: When you generate and download a JSON backup using our Backup & Restore utility, the exported file is stored locally on your device. We do not store duplicates of your downloaded backup files on our servers. You are solely responsible for securing your backup files. Deleting your profile will permanently erase all journal data on our servers, and it can only be restored using your own locally saved JSON backup files.

8. Children and Sensitive Personal Data

Children: Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we discover a profile belongs to a minor, we will terminate it immediately.

Sensitive Personal Data: We do not collect sensitive personal data such as biometric identifiers, medical information, religious beliefs, or political associations.

9. Updates & Contact Us

Updates: We may update this privacy policy at our discretion from time to time by posting a new version on our website. You should check our website occasionally to ensure any changes are suitable for you.

The current version of this privacy policy was modified on August 2026.

Contact Us & Registered Address: If you have questions about this privacy policy, please contact us or write to our registered office: