← Back to FolioXRay

Privacy Policy

Last updated: June 2026  ·  Effective immediately

1. Who We Are

FolioXRay is a portfolio analytics tool operated by an individual developer based in India. We are not a SEBI-registered investment adviser. Contact: vaseemakrams55@gmail.com

2. What Data We Collect

When you upload your Consolidated Account Statement (CAS) PDF, we temporarily process:

• Fund names and scheme details from your CAS
• Portfolio valuation figures
• The CAS password you provide (used only to decrypt the PDF)

We do not collect your name, PAN number, contact details, or any personally identifiable information unless you email us directly.

When you use the free tools (Compare Funds, SIP Calculator, Fund Screener, Sector Breakdown), no personal data is collected — only the fund names you type.

3. How We Use Your Data

• Your CAS PDF is parsed in memory to extract fund names and values
• This data is used solely to generate your overlap report
• A temporary session ID is created to link your upload to your payment
• The session and all associated data is deleted after you receive your report (or after 24 hours if unused)

4. Data Storage

We do not store your CAS PDF. The file is written to a temporary location on our server, parsed, and immediately deleted. It is not written to any database, cloud storage, or logging system.

Payment processing is handled entirely by Razorpay. We receive only a payment confirmation — we never see or store your card, UPI, or bank details.

5. Data Sharing

We do not sell, rent, or share your data with any third party, except:

• Razorpay — for payment processing (their privacy policy applies)
• OpenAI — fund names (not personal data) are sent to GPT-4o-mini to generate the analysis summary. No PAN, values, or personal details are included in this request.
• Railway — our hosting provider processes all server traffic

6. Cookies & Tracking

We do not use cookies, analytics trackers, or any form of user tracking. There are no third-party tracking scripts on this site.

7. Your Rights (DPDP Act, 2023)

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Know what data we hold about you (we hold none after your session ends)
• Request deletion of any data (email us and we will confirm within 3 business days)
• Withdraw consent at any time by not using the service

8. Security

All data is transmitted over HTTPS (TLS). Temporary files are deleted immediately after processing. We do not log CAS content or portfolio values in server logs.

9. Children

This service is not directed at anyone under 18. We do not knowingly process data from minors.

10. Changes to This Policy

We may update this policy. The "Last updated" date at the top will reflect any changes. Continued use of the service constitutes acceptance.

11. Contact

For any privacy-related queries: vaseemakrams55@gmail.com