Legal
Last updated: March 19, 2025 · Compliant with DPDPA 2023
🛡️ Your Data, Your Control
We never sell your financial data. You can export or delete your data at any time from Settings. We are compliant with India's Digital Personal Data Protection Act (DPDPA) 2023.
Account Data: Email address, name, date of birth, city, occupation — collected during signup and onboarding.
Financial Data: Income, monthly expenses, investment portfolio holdings, financial goals, risk profile — provided voluntarily by you.
Usage Data: Pages visited, features used, session duration — collected automatically via analytics.
Device Data: Browser type, operating system, IP address — for security and fraud prevention.
• AI Personalisation: Your financial data powers AI-generated investment theses, spending audits, and recommendations
• Product Functionality: Storing your portfolio, goals, and expenses so you can track them over time
• Security: Detecting suspicious activity, rate limiting, and preventing fraud
• Service Improvement: Aggregated, anonymised usage patterns to improve AI accuracy
• Communication: Important account notifications (never marketing spam without consent)
Your data is stored in Supabase (PostgreSQL) hosted on AWS in the ap-south-1 (Mumbai) region. We implement:
• Row-Level Security (RLS): Your data is isolated — no user can access another's data
• Encryption at rest (AES-256) and in transit (TLS 1.3)
• API keys are never stored in client-side code
• Regular security audits and dependency updates
We use the following third-party services:
|---|---|---|
We do not use Google Analytics, Facebook Pixel, or any advertising trackers.
As a Data Principal under India's DPDPA 2023, you have the right to:
• Access: Request a copy of all personal data we hold about you
• Correction: Update inaccurate personal data
• Erasure: Request deletion of your account and all associated data
• Grievance Redressal: Contact our Data Protection Officer
To exercise these rights, email us at privacy@monetra.app or use the Settings > Delete Account option in the app.
• Active account data: Retained while your account is active
• Deleted accounts: All personal data erased within 30 days
• Financial transaction history: Can be exported before deletion
• Aggregated/anonymised analytics: May be retained indefinitely
Monetra is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.
We may update this Privacy Policy. We will notify you via email and in-app notification at least 14 days before material changes take effect. Continued use after the effective date constitutes acceptance.
Data Protection Officer: Monetra
privacy@monetra.app
For grievances under DPDPA 2023, you may also approach the Data Protection Board of India.