Privacy Policy

1. Overview & Who We Are

FOLDY is a secure digital financial locker that helps individuals organize and manage their financial documents and compliance records in one centralized location.

Company Name: FOLDY Technologies Pvt. Ltd.
Headquarters: India
Email: info@foldy.co.in
Website: www.foldy.co.in

This Privacy Policy applies to all FOLDY products and services. By using FOLDY, you agree to this policy. If you don't agree, please don't use our services.

2. What Information We Collect

Information You Provide

• Account Information: Name, email address, phone number, password
• Identity Verification: Government ID, PAN, Aadhaar (if required)
• Financial Documents: Bank statements, ITR, TDS certificates, investment records
• Contact Information: Mailing address, communication preferences
• Feedback & Support: Messages, complaints, feature requests

Information We Collect Automatically

• Device Information: Device type, OS, browser type
• Usage Data: Clicks, page views, time spent, features used
• IP Address & Location: For security and fraud prevention
• Login Activity: Time of access, duration of session

Information From Third Parties

• Data Providers: ITR and TDS information from authorized government sources (with your consent)
• Payment Processors: Transaction information for billing
• Analytics Services: Aggregated usage data

3. How We Use Your Information

We Use Your Data To:

• ✅ Provide Services: Create your account, store documents, send reminders
• ✅ Security: Prevent fraud, detect breaches, verify identity
• ✅ Improve Features: Understand usage patterns, develop new features
• ✅ Customer Support: Respond to your queries and issues
• ✅ Legal Compliance: Meet regulatory requirements (tax, data protection laws)
• ✅ Communication: Send product updates, security alerts, important notices
• ✅ Analytics: Track usage to improve user experience
• ✅ Billing: Process payments and subscriptions

We Do NOT:

• ❌ Sell your data to advertisers or third parties
• ❌ Use your financial information for marketing
• ❌ Share personal data without consent (except legally required)
• ❌ Use cookies for tracking across websites
• ❌ Access your documents for any reason except at your request

4. How We Protect Your Data

Security Measures

• 🔐 AES-256 Encryption: Military-grade encryption for all documents at rest
• 🔒 TLS/SSL: Encrypted transmission of data over internet
• 🔑 Multi-Factor Authentication: 2FA and biometric options
• 👁️ Zero-Knowledge Architecture: Even FOLDY staff can't access your data
• 🛡️ Firewalls & Intrusion Detection: Real-time monitoring
• 📊 Regular Security Audits: Third-party penetration testing
• 💾 Automated Backups: Daily encrypted backups with disaster recovery
• 👤 Access Controls: Role-based permissions, minimal access principle

5. When We Share Your Data

We Share Information With:

Authorized Third Parties

• Government Data Sources: ITR Office, TDS portals (for auto-fetch with your consent)
• Payment Processors: Razorpay, PayPal (only transaction data)
• Email Providers: SendGrid (for notifications only)
• Analytics Platforms: Google Analytics (anonymized data only)
• Customer Support: Zendesk (encrypted communication)

We Require All Third Parties To:

• Sign Data Processing Agreements (DPA)
• Maintain equivalent security standards
• Use data only for specified purposes
• Delete data when no longer needed

Legal Requirements

We may disclose your information if required by law (court orders, government agencies, tax authorities). We'll notify you unless legally prohibited.

No Selling of Data

We never sell your personal or financial data to advertisers, brokers, or any commercial entity. This is a core principle of FOLDY.

6. How Long We Keep Your Data

Right to Deletion: You can request deletion of your account and associated data. We'll delete personal data but retain only what's legally required.

7. Your Privacy Rights

You Have the Right To:

• ✋ Access: Request a copy of all your data in a readable format
• ✏️ Correct: Update or correct inaccurate information
• 🗑️ Delete: Request deletion of your account and data
• 📥 Portability: Export your documents in standard formats
• 🚫 Opt-Out: Unsubscribe from marketing communications
• ⚖️ Object: Oppose certain uses of your data
• 📋 Know Purpose: Understand why we collect/use data

How to Exercise Your Rights

Email us at info@foldy.co.in with your request. Include:

• Your account email
• Specific right you're exercising
• Any supporting information

We'll respond within 30 days (or as required by law). Some requests may take longer.

8. Cookies & Tracking

What Are Cookies?

Cookies are small files stored on your device to remember your preferences, login status, and how you use FOLDY.

Types of Cookies We Use

• Essential: Required for login, security, basic functionality
• Preference: Remember your theme, language, settings
• Analytics: Understand how you use FOLDY (anonymized)
• Security: Detect and prevent fraud

Your Cookie Choices

• Most browsers let you disable cookies (Settings → Privacy)
• Disabling may affect FOLDY's functionality
• We don't use third-party tracking cookies
• We don't sell cookie data

Do Not Track (DNT)

If your browser sends a DNT signal, we respect it and don't track your activity across the web.

9. Legal Compliance

We Comply With:

• 🇮🇳 India Data Protection Act (DPDP): Personal data protection framework
• 🇮🇳 Information Technology Act (ITA): Data security and privacy standards
• 🏛️ Tax Regulations: GST, Income Tax, ROC requirements
• 🛡️ RBI Guidelines: Banking security standards

Data Processing Agreements

If you're a business, we can provide a Data Processing Agreement (DPA) for compliance purposes.

Transfers Outside India

Your data is primarily stored in India. Any international transfer requires your explicit consent and complies with applicable laws.

10. Contact Us

Questions About Your Privacy?

Contact FOLDY's Privacy Team:

Email: info@foldy.co.in
Data Protection Officer: info@foldy.co.in
Support: info@foldy.co.in

Complaint Rights

If you believe we've violated your privacy rights, you can:

• Contact us first (we'll try to resolve)
• Lodge a complaint with your local data protection authority
• Contact the Data Protection Board (India)

Changes to This Policy

We may update this policy occasionally. We'll notify you of significant changes via email or prominent notice on FOLDY. Your continued use means you accept the updated policy.