Privacy Policy

3.2 What does leave your device, always

Loading a web page necessarily contacts servers. This is the complete list for ordinary use — none of it contains your financial data:

• Hosting: your IP address and request metadata reach the server, as they must for any website. The site runs on our own hardware rather than a hosting provider, so this does not pass through a third party.
• Product analytics: none. The code contains a wrapper for a cookieless analytics service, but the script is never loaded, so no usage events are sent anywhere.
• Error monitoring: a stack trace when something breaks, so the bug can be found. Numbers of four digits or more are stripped before sending and browser-storage contents are never attached. Session replay — which records a playback of the screen — is switched off.
• Rate data: requests to public market-data sources for gold, silver, forex, NAV and RBI rates. These carry no information about you.
• Approximate location: an IP-geolocation lookup picks a default pricing city for the Rates page. Used once, not stored.

3.3 Optional features that transmit data — only if you switch them on

Each of these is off by default and each requires a deliberate action:

• AI features (your own API key): the AI does nothing until you supply a key for Gemini, OpenAI, Anthropic or OpenRouter. When you use it, your prompt — and any document image you attach — passes through a Trezoriq proxy endpoint on its way to that provider. We do not store it; the provider handles it under their own terms.
• Backup to your Google Drive: encrypted on your device before it is uploaded, and it goes to your Drive, not ours. We never receive it.
• Statement inbox: if you point it at a Drive folder, files there are read and parsed on your device. The contents are not sent to us.
• Sharing a bundle with your CA: creates an encrypted archive, protected by a password you choose, and stores it temporarily so your accountant can fetch it. It is encrypted before upload, so neither we nor the storage provider can read it, and it is deleted automatically once the expiry you set has passed.
• Reminder notifications: if you switch these on, your browser registers a push endpoint with its own push service (Google, Mozilla or Apple, depending on the browser) and we store that endpoint so a reminder can be delivered. It identifies a browser installation, not you, and turning reminders off deletes it.
• Password breach check: the vault can check a credential against the Have I Been Pwned range API, which receives only a partial hash — never the password.

3.4 Google user data — Limited Use

Drive backup and the statement inbox reach your Google account through Google’s own APIs, so Google’s rules about that data apply on top of everything else on this page:

Trezoriq’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice that means we ask for the narrowest access that makes each feature work, and we use it for nothing else. Backup uses a hidden application folder that can hold only what this app puts there — it cannot see the rest of your Drive. The statement inbox, where a deployment offers it at all, needs read access to your files; it is used solely to read the statements you place in the folder you name, the parsing happens on your device, and we never receive the contents. No Google data is used for advertising, sold, or given to a human to read, and access tokens are held in memory only for as long as the app is open.

3.5 What we do not do

• We do not serve advertisements, and we do not run advertising trackers.
• We do not sell, rent or share personal data with data brokers.
• We do not build advertising profiles or perform behavioural targeting.
• We do not use Account Aggregator feeds, and we are not registered as a Financial Information User.
• We do not hold a copy of your financial data, so we cannot produce it — to anyone.

6.2 Advertising

Trezoriq does not display advertisements. There is no ad network on this site, no advertising cookie, and no advertising identifier. We do not participate in personalised advertising, so there is no ad-preference opt-out for us to offer — there is nothing to opt out of.

6.3 Data Sharing & Service Providers

We share data only with essential service providers to operate our platform:

• Public market-data sources: where published gold, silver, forex, NAV and RBI rates come from. These are outbound requests for public numbers and carry nothing about you.
• Our own server: the site and its database run on hardware we operate, not a third-party host. Server logs stay there.
• Your chosen AI provider: only if you add your own API key. Whatever you send to the assistant goes to that provider under their terms, not ours. Leave the key blank and nothing is sent.

7.2 How long each thing is kept

Section 8(7) of the DPDP Act requires personal data to be erased once the purpose it was collected for has been served. Where we hold anything at all, that is the rule we apply — which is why a CA share is destroyed on its expiry date rather than merely hidden from view.

7.3 If there is a breach

Should a personal data breach affect anything we hold, section 8(6) of the DPDP Act requires us to inform the Data Protection Board of India and every affected person, in the form and within the time the Act and its Rules prescribe. We will do that, and we will say plainly what was affected and what you should do about it.

It is worth being clear about the shape of that risk. A breach of our systems could expose an encrypted CA bundle, a push endpoint, or server logs. It could not expose your financial records, because they are not there to be taken.