Privacy Policy

GramFolio ("we", "us", "our") is a personal finance tracking tool for physical gold and precious metal purchases. This Privacy Policy explains what data we collect, how we use it, and your rights over it. By creating an account you agree to this policy.

We collect only what is necessary to provide the service:

• Account data — the display name and email address you provide at sign-up.
• Portfolio data — gold purchase records, weights, prices, cashback, and reward points you enter manually.
• Session data — authentication tokens stored in cookies so you can stay signed in.
• Usage data — anonymous page-view analytics via our hosting provider (no advertising profiles).

• To provide and display your portfolio dashboard.
• To authenticate you and maintain your session.
• To improve the platform based on aggregated, anonymous usage patterns.

We do not use your data for advertising, profiling, or any automated decision-making.

Your account and portfolio data are stored on managed cloud infrastructure (currently Vercel for the app and Neon for the database). Data is encrypted in transit. Passwords are stored only as irreversible hashes — we never keep them in plain text.

We use reasonable technical and organisational measures to protect your information. No online service can guarantee perfect security; please use a strong unique password and keep your credentials private.

We do not sell, trade, or share your personal data with third parties, except:

• Infrastructure providers — such as our hosting and database providers — who process data only to run the Service and under their own privacy terms.
• Legal obligations — if required by Indian law or a valid court order.

Under applicable Indian data-protection law, you can:

• Access — view the portfolio and account details available in your signed-in dashboard.
• Correct— update your display name and preferences in Profile & Settings.
• Delete your account— permanently remove your login identity from Profile & Settings (password confirmation required). That deletes your user account, sessions, and settings. Purchase history may remain in our systems without your name or email attached, and cannot be opened by a new account with the same email.

For help with any of the above, email folio@gramfolio.in.

We use only essential session cookies required for authentication. We do not use advertising, tracking, or third-party analytics cookies. No cookie consent banner is required for essential cookies under applicable law.

GramFolio is not intended for users under 18 years of age. We do not knowingly collect data from minors.

We may update this policy from time to time. When we do, we will update the "Last updated" date above. Continued use of GramFolio after changes constitutes acceptance of the updated policy.

For any privacy-related questions, contact us at folio@gramfolio.in.