Privacy Policy

Last updated: December 2024

1. Introduction

Xin IT Development Pvt Ltd ("we", "our", or "us") operates the Disha One platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Information You Provide

  • Account information (name, email address, password)
  • Bank statements and financial documents you upload
  • Payment information for premium subscriptions
  • Communication preferences and feedback

2.2 Information Collected Automatically

  • Device and browser information
  • IP address and location data
  • Usage patterns and feature interactions
  • Cookies and similar tracking technologies

2.3 Information from Third Parties

  • Bank transaction data via Account Aggregator (with your consent)
  • Email attachments via Gmail/Outlook integration (with your permission)

3. How We Use Your Information

  • To provide and maintain our financial analysis services
  • To process and categorize your transactions
  • To generate insights and spending reports
  • To improve our AI algorithms and user experience
  • To send service-related communications
  • To process payments and manage subscriptions
  • To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Service providers who assist in operating our platform
  • Payment processors for subscription management
  • Account Aggregator partners (for bank integration)
  • Legal authorities when required by law

5. Data Security

We implement industry-standard security measures including:

  • End-to-end encryption for data in transit
  • AES-256 encryption for data at rest
  • Regular security audits and penetration testing
  • Multi-factor authentication options
  • Secure data centers with 24/7 monitoring

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Delete your account and associated data
  • Export your data in a portable format
  • Opt-out of marketing communications
  • Revoke third-party access permissions

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law. For more details, see our Data Retention Policy.

8. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the platform. Your continued use after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related inquiries, please contact us at: