Privacy Policy

FinClarus ("we", "us", "our") provides financial-planning software for financial advisers. This policy explains what personal data we collect, how we use it, and the choices you have. It is written to align with India's Digital Personal Data Protection Act, 2023.

1. Who this applies to

Our users are financial advisers ("you"). Advisers may enter information about their own clients into the tool. For that client information, the adviser is the Data Fiduciary and is responsible for obtaining their client's consent; we act only as a Data Processor that stores it securely on the adviser's behalf. These are the terms the Digital Personal Data Protection Act, 2023 uses: the adviser decides why and how their client's information is used, and we only hold it for them.

2. What we collect

• Account data: your name, firm name, email, phone, licence/registration number, GST number, location and profile photo.
• Client plan data (entered by you): your clients' names, ages, contact details, income, goals and financial figures used to build a plan.
• Usage data: basic technical logs needed to operate and secure the service.

3. How we use it

We use this data only to provide and improve the service: to run your account, generate plans and reports, store your saved clients, and keep the service secure. We do not sell your data or your clients' data, and we do not use it for advertising.

4. Where it is stored & how it is secured

Data is stored with our infrastructure provider, Supabase, on managed, encrypted databases. Access is protected by row-level security, so each adviser can only ever access their own account and their own clients' data. We apply reasonable technical and organisational safeguards to protect against unauthorised access.

Report links you share with a client

There is one deliberate exception to the above, and advisers should understand it before using the feature. When an adviser chooses Share with client, FinClarus publishes a copy of that plan at a long, randomly generated web address so the client can open it without signing in. Anyone who has that address, including anyone it is forwarded to, can read the plan. The address is not listed anywhere, is not indexed by search engines, and cannot be guessed, but it is not protected by a password.

The shared copy deliberately leaves out details the report does not need: the client's mobile number, email address, occupation, spouse's name, spouse's age and number of dependants are all removed before the link is created. New links stop working after one year unless the adviser chooses otherwise, an adviser can switch any link off at once or change when it expires, and deleting a client switches off every link for that client.

5. Who we share it with

We share data only with the service providers needed to run FinClarus, under appropriate agreements:

• Supabase - secure database and authentication hosting.
• Vercel - application hosting. Requests are served from their infrastructure, so it processes data in transit.
• Resend - sending our emails: sign-in and confirmation messages, billing notices, and replies to the contact form.
• Payment processor (e.g. Razorpay) - to handle subscription payments. We never store your card details.

We may also disclose data where required by law.

6. Retention

We keep your data for as long as your account is active. You can delete a saved client at any time; a deleted client stays recoverable for 30 days and is then erased permanently, along with every saved plan version and share link belonging to them. If a client asks you to erase their record sooner, you can do that immediately from the deleted-clients panel, and it cannot be undone. You can also close your account yourself, from Settings under Security: closing it cancels any active subscription, then permanently deletes your profile, every saved client, every saved plan version and every report link you have shared, so those links stop working immediately. For your protection, closing an account requires a code we email to the address you sign in with. This cannot be undone.

7. Your rights

You can access, correct, or delete your personal data, and withdraw consent, by using the in-app settings or by writing to us at support@finclarus.com. We will respond within a reasonable time.

8. Cookies

We use only the cookies necessary to keep you signed in and to operate the service. We do not use third-party advertising or tracking cookies.

9. Grievances

For any privacy question or complaint, contact our grievance contact at support@finclarus.com.

10. Changes

We may update this policy. We will post the revised version here with a new "last updated" date.

Contact

FinClarus · support@finclarus.com · finclarus.com