Privacy Policy

Last updated 25 October 2026

i-wise (at https://i-wise.in) is run by Invest Wise ("we"). This policy explains what personal data we collect when you use i-wise, why, who else handles it, how long we keep it, and your rights under India's Digital Personal Data Protection Act, 2023.

1. What we collect

• Your account: your name and email address; your password (stored only as a one-way hash we can't read); if you use them, your Google account identifier, email and the address of your Google profile photo, your two-factor authentication secret (encrypted) and recovery codes (hashed).
• What you enter: your investment records (shares and ETFs, bonds and deposits, gold, mutual funds and SIPs, crypto, property, and other assets such as vehicles, bank balances and valuables, with dates, amounts, prices and notes), your retirement plan and About Me details (such as date of birth, marital status, number of dependents, income, expenses, savings, loans, EMIs and insurance), and your dashboard and display settings.
• Security records: the network (IP) address and time of log-ins, sign-ups, password-reset and email-confirmation requests, and of messages sent through the contact form.
• If you use the contact form (you don't need an account): your name, email address, the topic and your message. We email them to our support inbox to reply to you, and don't store them anywhere else on our servers.
• In your browser: a session cookie that keeps you logged in, a cookie remembering your light/dark theme choice, and figures you type into the calculators, kept in your browser's own storage and cleared when you log out. We use no advertising or tracking cookies and no analytics services.

2. Why we use it

• To provide i-wise to you: storing your records and showing your portfolio, calculations, plans and comparisons.
• To keep accounts safe: confirming email addresses, two-factor login, stopping password guessing and mass sign-ups.
• To send emails about your account only: confirming your address, password resets, and confirming deletion. No marketing.
• To answer messages you send through the contact form.

We use your data only with your consent, which you give by agreeing to this policy, and only for these purposes. We do not sell your data, share it for advertising, or use it to make decisions about you.

3. Who else handles data

• Our site administrators can see account details (your name, email address, sign-up and last log-in dates, whether two-factor login is on, and how many entries you have of each type), to give support and keep the service secure. They cannot see what is in your portfolio, such as amounts, holdings or your About Me details. Every action they take on an account is logged.
• Vultr hosts our servers, in Mumbai, India. Your data is stored there.
• Our email provider receives your email address and the text of account emails, to deliver them.
• Google, only if you choose "Sign in with Google": Google tells us your name, email address and profile photo. While you're logged in with Google, your browser shows that photo as your account icon, loading it directly from Google.
• Price and fund data: we fetch prices and fund NAVs from Yahoo Finance, AMFI and mfapi.in using only market symbols and fund codes, never your personal data.

4. How long we keep it

• Your account and records: until you delete your account.
• Accounts whose email address was never confirmed: deleted after 7 days.
• Security records: 30 days.
• Backups: we keep daily backups for 14 days, and our host keeps server backups for a short time, so a deleted account disappears from backups within about a month.

5. Your rights

• See and get your data: everything you entered is shown in your account, and each section can be downloaded as a CSV file.
• Correct it: edit or delete any entry at any time.
• Erase it and withdraw consent: delete your account in Settings; all your data is removed at once.
• Complain: write to our grievance contact, support@i-wise.in. We reply as soon as we can, normally within 7 days. If you're not satisfied, you may approach the Data Protection Board of India.
• Nominate: you may name someone to exercise these rights for you in case of death or incapacity, by writing to us.

6. Security

Connections are encrypted (HTTPS); passwords are hashed; two-factor login is available; the database can't be reached from the internet; the servers receive security updates automatically and are backed up daily. No system is perfectly secure: if a breach affecting your data happened, we would tell you and the authorities as the law requires.

7. Children

i-wise is meant for adults. Please don't use it if you are under 18.

8. Changes

If we change this policy, we'll update the date above and ask you to agree again before you continue using i-wise.

9. Contact

Invest Wise · support@i-wise.in