Privacy Policy

FinCalc India uses Google OAuth exclusively for secure identity verification. When you authenticate with Google, we receive only:

• Your full name and display name
• Your primary email address
• Your Google profile picture (avatar)

We do not request, access, read, or store access to your Gmail inbox, Google Drive, Google Contacts, or any other Google account services.

When you model financial calculations (e.g. SIP, EMI, Income Tax, Valuation), your calculation inputs and mathematical outputs are stored in our secure database and associated with your authenticated account ID.

This data allows you to view your calculation history, retrieve prior models across sessions, and maintain continuity within your workspace. We do not sell, rent, or monetize your financial calculation data to third-party advertisers or brokers.

Calculations are private to your account by default. If you choose to publish a share link for a calculation, a unique cryptographically random token is generated. Shared results only expose the calculation parameters and outputs; your user identity, email, and account ID are never exposed on shared result pages.

Under our authentication-first architecture, viewing a shared result requires signing in to FinCalc India. You can revoke or rotate share links at any time from your history, which immediately disables access to that link.

We use server-side database sessions managed via NextAuth. Session tokens are stored in HTTP-only, secure cookies to maintain your login state. These tokens are encrypted, cannot be read by client-side JavaScript, and can be invalidated immediately upon sign-out.

Your calculation data is retained as long as your account remains active. You have full rights to request complete deletion of your data under applicable data protection principles.

The application implements a programmatic deletion endpoint (DELETE /api/account) that cascades to permanently delete your user record, OAuth tokens, and all associated saved calculations from our database.