Privacy Policy

1. Introduction

Paisashield ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, mobile number, date of birth
• Financial Data: Investment portfolios, transactions, broker accounts, bank accounts
• Company Data: Workspace information, company details, accounting records
• User Content: Notes, descriptions, custom categories you create

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: IP address, browser type, operating system
• Cookies and Tracking: Session identifiers, authentication tokens (see Cookie Policy)
• Log Data: Access times, errors, system events

2.3 Third-Party Data

• Market Data: Stock prices, instrument information from yfinance and other providers
• Email Service: Email delivery status from Resend SMTP

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process your transactions and calculate portfolio analytics
• Send authentication emails (verification, password reset)
• Manage multi-tenant workspaces and access controls
• Improve platform features and user experience
• Detect and prevent fraud or security threats
• Comply with legal obligations
• Respond to support requests

4. Data Sharing and Disclosure

4.1 Within Your Workspace

Data is shared with workspace members based on role-based access controls YOU configure. You are responsible for managing who has access to your workspace data.

4.2 Third-Party Service Providers

We share data with trusted third parties:

• Email Service: Resend (for transactional emails)
• Hosting Provider: For server infrastructure
• Market Data Providers: For real-time pricing (via API)

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

4.4 Business Transfers

If Paisashield is acquired or merged, your information may be transferred to the new owner.

4.5 No Sale of Personal Data

We do NOT sell your personal information to third parties for marketing purposes.

5. Data Security

We implement reasonable security measures including:

• Encrypted HTTPS connections
• Password hashing (pbkdf2:sha256)
• CSRF protection tokens
• Email verification for new accounts
• Role-based access controls
• Regular security updates

HOWEVER: No method of transmission over the internet is 100% secure. We cannot guarantee absolute security and are not liable for unauthorized access, data breaches, or security incidents.

6. Data Retention

We retain your data:

• While your account is active
• As required for legal or accounting purposes
• As necessary to resolve disputes

Upon account termination, we may retain certain data for a reasonable period but are NOT obligated to permanently store or return your data.

7. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Objection: Object to certain data processing activities

To exercise these rights, contact us at privacy@paisashield.com

8. Cookies and Tracking Technologies

We use cookies for:

• Authentication and session management
• Security (CSRF tokens)
• Remembering preferences

See our Cookie Policy for detailed information.

9. Children's Privacy

Paisashield is NOT intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. By using the Service, you consent to such transfers. We take reasonable steps to ensure adequate protection but cannot guarantee compliance with all local data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy at any time. We will notify you of material changes by posting the new policy with an updated "Last Updated" date. Continued use after changes constitutes acceptance.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion
• Right to non-discrimination

We do NOT sell personal information. To exercise CCPA rights, contact us at privacy@paisashield.com

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR) including access, rectification, erasure, restriction, portability, and objection.

Our legal basis for processing:

• Contract: To provide the Service you requested
• Legitimate Interest: To improve and secure the Service
• Consent: For optional communications
• Legal Obligation: To comply with laws