At Arthavi, privacy is not an afterthought—it is our core product feature. We believe that your financial life explicitly belongs to you. This policy outlines exactly what data we collect and, more importantly, what we do not do with it.
1. Data We Collect
We collect only the information necessary to provide our portfolio tracking service:
- Account Information: Email address and basic profile photos (from Google Auth) required for login.
- Portfolio Data: Mutual fund transaction histories, stock investment values, and asset details that you explicitly upload (via CAS PDFs) or manually enter.
- Usage Data: Anonymous, aggregated metrics on how the application is used (e.g., "Page Load Time") to improve performance.
2. How We Handle Your Investment Statement
When you upload your investment statement (CAS — Consolidated Account Statement) from CAMS or KFintech:
- The file is processed securely to extract transaction data (Schema, Date, Amount, Units).
- The original PDF file is discarded after extraction; we do not permanently store your raw statement files.
- We do not share your investment data with any Asset Management Company (AMC) or broker.
3. NO Data Selling (Strict Policy)
We wish to be explicitly clear on this point: Arthavi does not sell, rent, trade, or lease your personal financial data to third parties.
- We do not monetize your data via ads.
- We do not share your portfolio size ("Net Worth") with lenders, credit agencies, or insurers.
- We do not allow third-party trackers to profile your investment behavior for targeting.
4. Data Storage & Encryption
All user data is stored in secure data centers compliant with global standards. We use AES-256 encryption for data at rest and TLS for data in transit. Access to production databases is strictly restricted and logged for audit purposes.
5. Your Rights
As an Arthavi user, you have the right to:
- Access: View all personal data we hold about you via the app dashboard.
- Rectify: Correct any inaccuracies in your investment data.
- Delete: Request the permanent deletion of your account and all associated data. We honor these requests immediately and irreversibly.
6. Third-Party Services
We may use trusted third-party services for specific infrastructure needs (e.g., Google OAuth for login, Cloud hosting, Transactional Email). These providers are contractually obligated to protect your data and are not permitted to use it for their own purposes.