Privacy

What we store when you sign in

• Encrypted broker access tokens — decrypted only to fetch your holdings; never seen by us in plaintext.
• Your portfolio holdings (CAS uploads, CDSL fetches, manual entries) so you don't have to re-upload across sessions or devices.
• Your chat history with Niveshark, plus your shared profile (age, goal, etc.) for personalized analysis.

How your data flows

What we do NOT store

• Your CAS PDFs or files themselves — only the parsed holdings.
• Your bank or trading credentials. We never see passwords.
• Anonymous-flow data — if you don't sign in, nothing about your session leaves your browser.

How to delete

• Disconnect a broker on the Portfolio page.
• Delete a portfolio source via the × button on the stored-sources panel.
• Email sushobhith@gmail.com to delete your account entirely (chat history + profile + tokens + holdings).

Encryption

Broker tokens are Fernet-encrypted at the application layer — even our database can't read them without the server's secret key. All data is also encrypted at rest by Supabase. We don't sell or share any of it.