← Back

Privacy Policy

Last Updated: September 19, 2026 | Effective Date: September 19, 2026

Your privacy matters. This Privacy Policy explains how MeraFolio ("MeraFolio", "we", "us") collects, uses, discloses, and protects your personal information. By creating an account or using the Platform, you consent to the practices described here.

1. Introduction and Scope

1.1. This Privacy Policy applies to all users of the MeraFolio platform and any associated services, applications, or tools used to track personal and family wealth, investments, and finances.

1.2. We are committed to protecting your privacy in compliance with the Information Technology Act, 2000 (India); the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and other applicable data-protection laws in India.

1.3. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Definitions

"Personal Information" means any information relating to a natural person that directly or indirectly identifies that person.
"Sensitive Personal Data or Information" (SPDI) means personal information as defined under Rule 3 of the IT Rules, 2011, including financial information and passwords.
"Platform" means the MeraFolio web application and related services.
"Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.

3. Information We Collect

3.1. Information You Provide Directly

Account Information: name, email address, phone number, and password — for account creation, authentication, and communication.
Portfolio Data (Online accounts): holdings, transactions, SIPs, fixed income, properties, bank balances, insurance, loans, other assets, income and expenses you choose to enter — to provide tracking, calculations, reports, and analytics.
Documents: any files you choose to attach (e.g. policy PDFs) — stored privately under your account.

Offline accounts: If you use an offline account, your portfolio data is not stored on our servers. It stays in a file on your own computer that you load and save yourself. We only hold your account credentials and validity status.

3.2. Information Collected Automatically

Device & Log Data: IP address, browser type, operating system, access times, and error logs — for security, troubleshooting, and performance.
Cookies: session and preference cookies used for authentication and to keep you signed in.

4. How We Use Your Information

Service provision: to provide, maintain, and improve the Platform and its features.
Account management: to create, authenticate, approve, and manage your account and its validity period.
Calculations & analytics: to compute portfolio values, generate reports, and provide insights from data you enter.
Communication: to send service-related notifications, verification, approval, and renewal messages.
Security & legal compliance: to detect and address security threats and to comply with applicable law.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not use your financial data to make credit decisions or share it with credit bureaus.

5. Information Sharing and Disclosure

5.1. We share information only in limited circumstances:

Service providers: trusted providers (e.g. cloud hosting, email delivery) who are contractually obligated to protect your data and use it only for specified purposes.
Legal requirements: where required by law, court order, or a lawful request from government or law-enforcement authorities.
Business transfers: in a merger, acquisition, or sale of assets, subject to the same privacy protections.
With your consent: where you have given explicit consent.

6. Data Security

6.1. We implement reasonable security practices and procedures as required under the IT Rules, 2011, including:

Encryption: data in transit is encrypted using SSL/TLS protocols.
Access controls: access to personal data is restricted on a need-to-know basis, and each user's data is scoped privately to their own account.
Authentication: passwords are stored using secure one-way hashing.
Monitoring: reasonable monitoring for vulnerabilities and security incidents.

IMPORTANT — No guarantee of absolute security, and no liability for cyber-attacks. While we implement reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot and do not guarantee the absolute security of your data. To the fullest extent permitted by law, MeraFolio shall not be liable for any loss, theft, corruption, unauthorised access, disclosure, or alteration of your data resulting from any cyber-attack, hacking, security breach, malware, phishing, interception, unauthorised third-party access, or any other event beyond our reasonable control. You acknowledge that you use the Platform and store data on it at your own risk, and you are responsible for keeping your password confidential, using strong credentials, and maintaining your own backups of any data that matters to you.

7. Data Retention

7.1. We retain your personal information for as long as your account is active, as necessary to provide services, and as required to comply with legal obligations or resolve disputes.

7.2. Upon account deletion or request, we will delete or anonymise your personal data within 90 days, except where retention is required by law. Anonymised, aggregated data may be retained for analytics.

7.3. For offline accounts, your portfolio data lives only in your own file — deleting your account does not affect files already saved on your computer.

8. Your Rights

8.1. Under applicable Indian law you have the right to access, correct, withdraw consent, request a copy of, and request deletion of your personal information.

8.2. To exercise these rights, contact us at info2data2decision@gmail.com. We may require verification of your identity before processing requests and will respond within a reasonable period.

9. Cookies

9.1. We use essential cookies for authentication and to keep you signed in. You may disable cookies in your browser, but this may prevent you from signing in or using the Platform.

10. Children's Privacy

10.1. The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, please contact us so we can remove it.

11. Changes to This Policy

11.1. We may update this Privacy Policy from time to time. Material changes will be notified through the Platform or by email. Continued use after changes constitutes acceptance of the revised Policy.

12. Contact Us

For privacy questions or requests, contact us at info2data2decision@gmail.com.

13. Consent

By creating an account and using MeraFolio, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy, and you accept the security limitations and non-liability for cyber-attacks set out in Section 6.