Privacy Policy
Last updated Effective
What we collect, why, who receives it, how long we keep it and your choices.
On this page
In short: we collect what you give us to run your account and workspace, keep private content private, never sell your data or show ads, share data only with the providers needed to run the service, and let you export your research or delete your account at any time.
1. Who we are
QFinera is operated by QCyberIndia, Chennai, Tamil Nadu, India (“we”, “us”). We decide how and why your personal data is processed for QFinera. This policy describes what the application actually does.
Privacy questions, requests and grievances: [email protected].
2. What we collect and why
| Information | When | Why | Who can see it |
|---|---|---|---|
| Email address, name, username, password (stored only as an Argon2id hash) | When you register | Create and secure your account, verify your email, send account emails | You. Other members see only your username. Administrators see your email for account support |
| Your acceptance of the Terms and Privacy Policy, Member Charter acknowledgement | When you accept | Record what you agreed to and when | Kept as a record |
| Profile: bio, experience level, interests, generated avatar, appearance and other preferences | When you add them | Show your profile and personalise the app | Bio and username are visible to members |
| Research (drafts and published), sources, reviews, versions | When you create them | Provide the research workspace | Drafts and reviews: only you (and a collaboration you share into). Published research: members |
| Journal, expenses and budgets, documents, sheets, watchlist, saved items | When you create them | Private workspace features | Only you, unless you share an item into a collaboration |
| Community posts, replies, reactions, ratings, templates you publish | When you post | Community features | Members |
| Messages, collaboration membership and invitations (including an email address you enter to invite someone) | When you use them | Messaging and private collaborations | The participants; moderators see a message only if it is reported to them. An invitee's email is used only to send the invitation |
| Reports you file and moderation decisions about your content | When they happen | Keep the community safe | Moderators and administrators; you see the status of your own reports |
| Optional connections: an encrypted Zerodha access token and your Zerodha user id; your own AI provider key (encrypted) | Only if you connect them | Show your holdings to you; run the research assistant with your key | Only you. Holdings are fetched live and not stored |
| Voluntary contribution records: amount, status, date, payment provider order/payment references, refund status | Only if you contribute | Process and confirm your contribution, handle errors and keep financial records | You and authorised administrators. Amounts are never shown to other members |
| Feedback and survey answers | Only if you send them | Improve the product | Administrators, with a pseudonymous reference instead of your name or email |
| Optional usage analytics (see section 4) | Only if switched on and you allow it | Understand which features help and what breaks | Administrators see aggregates |
| Security and operational data: sessions (identifier, time, browser user agent), audit records of security and administrative actions, short-lived rate-limit counters (keyed by IP address or a hash of your email), server logs (IP address, time, page path without query parameters, status) | When you use the service | Security, abuse prevention, troubleshooting, keeping a record of administrative actions | Operators and administrators |
We do not collect or store card numbers, UPI PINs or bank login details — payments are handled by the payment provider. We do not sell personal data and do not use it for advertising.
3. Why we are allowed to use it
We process your personal data to provide the service you signed up for under the Terms and Conditions, with your consent where we ask for it (for example optional analytics, connecting an integration or contributing), to keep the service secure, and where the law requires us to. You can withdraw a consent at any time; withdrawing does not affect processing that already took place.
4. Optional usage analytics
Usage analytics are off unless you choose “Allow”, and they are currently switched off for everyone. If they are switched on and you allow them, we record which features you open and use, when something fails (without the error text), an estimate of active time per area, and a random visit identifier not linked to your sign-in cookie.
We never record in analytics your research, notes, documents, titles or AI conversations; what you type, search for or paste; holdings, transactions, balances or payment details; or screen recordings and keystrokes. Turning analytics off in Settings → Privacy & data stops collection and deletes the events already stored for your account. Details: Cookies and Analytics.
6. How long we keep data
| Data | How long |
|---|---|
| Your account and workspace content | Until you delete it or delete your account |
| Sessions | Up to 30 days, or until you sign out or change your password |
| Email verification / password-reset links | 24 hours / 1 hour, single use |
| Rate-limit counters | Minutes up to 24 hours |
| Usage analytics events (if collected) | About 13 months, and deleted immediately when you turn analytics off or delete your account |
| Feedback and survey answers | About 2 years |
| Contribution and payment records | As long as needed for accounting, tax, dispute and legal obligations |
| Audit, security, moderation and acceptance records; anonymised content kept after deletion | As long as needed for security, moderation, legal and record-keeping purposes |
| Server and application logs | Generally up to about 30 days |
| Backups | Deleted data can remain in backups until they expire (currently up to about 14 days) |
See the Account Deletion and Data Retention for what happens when you delete your account.
7. Your choices and rights
- Access and correction: view and edit your profile and content in the app. Ask us for a copy of the personal data we hold about you.
- Export: download all your research as CSV in Settings.
- Erasure: delete individual content, or delete your account in Settings.
- Consent: change your analytics choice, disconnect integrations and change notification and messaging preferences in Settings.
- Grievances and nomination: raise a grievance, or nominate a person to exercise your rights in case of death or incapacity, where applicable law provides for it.
For requests you can't complete in the app, email [email protected] from the address on your account. We may ask you to confirm your identity. We respond within the time required by applicable law, including the Digital Personal Data Protection Act, 2023 where it applies. If you are not satisfied with our response you may have the right to complain to the relevant authority.
8. Security
Passwords are hashed with Argon2id. Connections use HTTPS. Stored AI provider keys and broker tokens are encrypted. Sessions are held on the server and can be revoked from Settings. Administrative access is limited by role and recorded. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities as required by law.
9. Children
QFinera is only for people aged 18 or over. You confirm your age at sign-up. If we learn that an account belongs to someone under 18, we will close it. If you believe a child has an account, contact [email protected].
10. Changes to this policy
We will post changes here and update the date at the top. For material changes we will tell you in the app and ask you to acknowledge the new version; for changes to optional analytics we will ask for your choice again.
11. Contact
QCyberIndia, Chennai, Tamil Nadu, India — [email protected]. See Contact and Grievances for how to raise a grievance.
Related policies
- Cookies and AnalyticsThe cookies and browser storage QFinera uses, and optional usage analytics.
- Account Deletion and Data RetentionWhat deleting your account removes, what stays and how long records are kept.
- Third-Party Services and Financial Data DisclaimerConnected services, AI providers, public data sources and the limits of financial information.
- Terms and ConditionsThe agreement between you and QCyberIndia for using QFinera.