Privacy Policy

1. Who we are

Finotop (“we”, “us”) is a personal finance organiser. This policy explains what personal information we collect when you visit finotop.com or use the Finotop app at app.finotop.com, why we collect it, who we share it with, and the choices you have.

Finotop is a record-keeping and reminder tool. We are not a bank, lender, broker or investment adviser, and we do not connect to your bank or investment accounts. Everything in your Finotop account is information you chose to enter.

2. Information we collect

Account information: your email address and password when you sign up. Your password is handled by our authentication provider (Amazon Cognito) and is never stored by Finotop itself.
Profile information: your name, phone number, country and preferences, which you add after signing up.
Financial records you add: for example account and card names, institutions, balances, loans, investments, due dates and amounts. We do not collect card numbers, bank passwords or UPI PINs, and you should not enter them.
Documents you upload to the document vault.
WhatsApp details, only if you opt in: the WhatsApp number you verify, your consent to receive reminders, and a record of each message we send (which template, when, and whether it was delivered).
Purchase records, only if you buy a plan: the plan, price, period, dates, the mobile number you give for the payment, and the order and payment references from our payment partner. We never receive or store your card, UPI or bank details.
Messages you send us, for example by email.
Technical information: such as IP address, browser type and request logs, which our servers record to operate the service and keep it secure.

3. How we use information

To provide your dashboard, records, document vault and reminders.
To send the notifications you have asked for, by email or WhatsApp.
To verify your email address and phone number, and to secure your account.
To respond to your support requests.
To detect, investigate and prevent fraud, abuse and security incidents.
To meet our legal obligations.

We do not sell your personal information, use it for advertising, or share it with advertisers.

4. WhatsApp reminders

WhatsApp reminders are optional and off until you turn them on. To turn them on, you enter your own WhatsApp number in Finotop and confirm it with a one-time code that we send to that number.

We then send only:

reminders about payment due dates that you entered in Finotop, and
verification codes for your number.

We do not send marketing or promotional messages on WhatsApp. You can choose whether reminders include amounts, and you can turn WhatsApp reminders off at any time in the app’s settings. Messages are delivered through Meta’s WhatsApp Business Platform, so Meta processes your number and the message content in order to deliver them, under WhatsApp’s terms and policies.

5. AI assistant

The AI assistant is not yet available. Before it launches, we will update this policy to explain what information it uses, which provider processes your questions, and how to turn it off.

We share personal information only with service providers who help us run Finotop, and only as much as they need to do that:

Amazon Web Services (AWS): hosting, storage, databases, authentication and email delivery. Your data is stored in AWS’s Mumbai (ap-south-1) region in India.
Meta (WhatsApp): only if you turn on WhatsApp reminders, as described above.
Cashfree Payments: only if you buy a plan. Cashfree processes the payment and receives the amount, an internal customer reference and the mobile number you give at checkout. You enter your payment details directly with Cashfree, under Cashfree’s privacy policy.

We may also disclose information if the law requires us to, for example in response to a valid order from a court or government authority, or to protect the rights, safety or property of our users or Finotop.

7. How we protect information

All connections to Finotop are encrypted in transit (HTTPS).
Your records and documents are encrypted at rest.
Documents are stored privately. Each download uses a link that expires within minutes, and only you can request one.
Each person’s records are kept separate, and every request is checked against the signed-in account.
Finotop staff who provide support must use multi-factor authentication, and their actions are recorded in an audit log. Our support tools do not let staff open the contents of your documents.

No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

8. How long we keep information

We keep your information for as long as your account is open. You can delete individual records, reminders and documents in the app at any time.

Closing your account. You can close your account in the app under Settings → Data → Close account (we ask for your password first). Closing signs you out, stops all reminders and prevents sign-in, but it does not delete your information: we keep it so that the account can be reopened if you contact us.

Erasing your information. To have your account and its information permanently deleted, email us at the address below, whether or not you have closed the account first. We will erase it within 30 days, except for information we must keep to meet a legal obligation (such as payment records), which we keep only for as long as that obligation lasts.

9. Your rights

Under India’s Digital Personal Data Protection Act, 2023, you have the right to:

get a summary of the personal information we hold about you and how we use it;
correct, complete or update your information (most of it you can edit directly in the app);
have your information erased;
withdraw your consent at any time, for example by turning off WhatsApp reminders (this does not affect anything we did before you withdrew consent);
nominate another person to exercise these rights if you die or become unable to; and
raise a grievance with us, and, if you are not satisfied with our response, with the Data Protection Board of India.

To exercise any of these rights, contact us using the details in section 13.

10. Cookies and similar technologies

finotop.com does not use cookies, analytics or advertising trackers. When you sign in to the Finotop app, it stores sign-in tokens in your browser so that you stay signed in. These are needed for the app to work and are removed when you sign out.

11. Children

Finotop is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has created an account, please contact us and we will delete it.

12. Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change significantly affects how we use your information, we will also tell you by email or in the app before it takes effect.

13. Contact and grievance officer

For privacy questions or requests, or to raise a grievance, contact our grievance officer:

Rohit, Grievance Officer
Finotop
Email: privacy@finotop.com