Privacy Policy

This Privacy Policy explains how Weekend Bytes Tech Private Limited ("Company", "we", "us", or "our"), operating the Foliyo and Foliyo.ai platform, website, and applications (collectively, the "Service" or "Foliyo"), collects, uses, shares, and protects your personal information. By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We collect the following types of information:

• Personal Information: Name, phone number, email address (when provided), and any other information you voluntarily submit through our waitlist, registration, or contact forms.
• Portfolio Data: Investment portfolio details, holdings, transactions, and related financial data that you provide to the Service.
• Google Account and Gmail Data: If you choose to connect your Google account to Foliyo / Foliyo.ai, our application requests access to the following Google OAuth scopes:
  • https://www.googleapis.com/auth/userinfo.email: Used solely to verify your Google identity and display the connected email address in your Foliyo settings.
  • https://www.googleapis.com/auth/gmail.readonly: A restricted scope used strictly in read-only mode to detect, ingest, and parse financial statements, bank transaction alerts, depository statements (CDSL/NSDL CAS), mutual fund confirmations (CAMS/KFintech), insurance premium notices, and loan EMI notifications. We do not read, process, or store personal or non-financial correspondence.
• Usage Data: Information about how you access and use the Service, including IP address, browser type, operating system, device information, pages visited, time spent, referring URLs, and clickstream data.
• Cookies and Tracking: We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing behavior and preferences.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, maintain, and improve the Service.
• To analyze your portfolio, statements, and financial data to generate private wealth dashboards, asset allocation breakdowns, and financial insights.
• To communicate with you, including sending service updates, security notices, and administrative messages.
• To create anonymized, aggregated, and de-identified datasets for internal analytics and product benchmarking (excluding Google user data).
• To personalize your user experience on the website. (Note: Information obtained through Google APIs is strictly excluded from any advertising or marketing use and is governed by our Google API Limited Use Policy in Section 3 below.)
• To detect, prevent, and address fraud, security issues, and technical problems.
• To comply with legal obligations and enforce our Terms of Service.

3. Google API Services User Data Policy and Limited Use Disclosure

Foliyo's (Foliyo.ai) use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, when you connect your Google account to Foliyo (Foliyo.ai):

• Strictly Read-Only Access: We request access only to the https://www.googleapis.com/auth/gmail.readonly and https://www.googleapis.com/auth/userinfo.email scopes. Foliyo cannot send emails, delete messages, modify mailbox configurations, or compose messages on your behalf.
• Financial Ingestion Purpose Only: We access and parse only financial transaction alerts, bank statements, depository statements (CDSL/NSDL), mutual fund CAS statements, insurance renewal receipts, and loan EMI notifications to compile your personal household net worth dashboard. All non-financial personal correspondence is ignored and filtered out before processing.
• No Human Access: No human at Foliyo or Weekend Bytes Tech Private Limited reads your raw email data or attachments, unless: (a) you provide explicit, affirmative consent for specific messages to assist in customer support or bug resolution, (b) it is required for security purposes (such as investigating abuse or a security incident), (c) it is required by applicable law or legal process, or (d) the data is aggregated and anonymized for internal system operations.
• No Advertising: Information obtained via Google APIs is NEVER used, transferred, or disclosed for serving advertisements, including personalized, retargeted, or interest-based advertising.
• No AI/ML Model Training: Information obtained via Google APIs is NEVER used to train, retrain, or fine-tune generalized artificial intelligence (AI) or machine learning (ML) foundation models.
• No Third-Party Transfers: We do not sell, rent, or transfer your Google user data to any third parties, except to service providers strictly necessary to deliver user-facing features (such as secure encrypted cloud database storage), or in compliance with applicable law. Any such service providers are bound by strict confidentiality and security obligations consistent with this policy.
• User Control, Revocation, and Data Deletion: You can disconnect your Google account and revoke Foliyo's access at any time through the Foliyo dashboard ("Disconnect Gmail" button) or directly in your Google Account Security Settings at https://myaccount.google.com/permissions. Upon disconnection or upon submitting a data deletion request to hello@foliyo.ai, all stored OAuth credentials, email extracts, and associated financial statement records derived from your Gmail account will be permanently purged from our servers within 30 days.

4. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors and partners who assist us in operating the Service, including cloud hosting, analytics, and customer support providers, under strict data protection agreements. (Google user data is strictly governed by Section 3 above).
• Affiliates: Our parent company, subsidiaries, and affiliates for business operations consistent with this Privacy Policy.
• Business Transfers: In connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Aggregated Data: We may share anonymized and aggregated data with third parties for research, analytics, and industry benchmarking. Such data will not personally identify you, and Google user data is not included in commercial datasets.

5. Data Retention

We retain your personal information for as long as your account is active, as needed to provide you the Service, and for a reasonable period thereafter for backup, archival, audit, and legal compliance. You may request deletion of your account and associated financial data at any time by contacting us at hello@foliyo.ai.

5. Data Security

We implement commercially reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You acknowledge and accept this inherent risk.

6. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

• The right to access the personal information we hold about you.
• The right to request correction of inaccurate information.
• The right to request deletion of your personal information, subject to certain exceptions.
• The right to withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at hello@foliyo.ai. We will respond to your request within a reasonable timeframe. We reserve the right to verify your identity before processing any request and to deny requests that are unreasonable, repetitive, or in conflict with our legal obligations.

7. Third-Party Links

The Service may contain links to third-party websites or services that are not owned or controlled by us. We are not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party websites you visit.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

9. Marketing Communications

By providing your contact information (phone number or email), you consent to receive marketing communications, product updates, and promotional content from us. You may opt out of marketing emails by clicking the "unsubscribe" link in any email. However, we may still send you transactional and service-related communications.

10. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time without prior notice. Changes will be effective immediately upon posting the updated policy on the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

11. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising out of or relating to this policy shall be subject to the exclusive jurisdiction of the courts in Bangalore, Karnataka, India.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Weekend Bytes Tech Private Limited
Email: hello@foliyo.ai