Privacy Policy

1. Introduction

Paisa Agent ("we", "our", or "us") is an AI-powered financial assistant that helps you manage event budgets (weddings, construction, parties, and more) and track personal expenses. This Privacy Policy explains how we collect, use, and protect your information when you use our service via WhatsApp or our web dashboard at paisaagent.ai.

This policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India, to the extent notified and applicable.

2. Consent

By sending a message to Paisa Agent on WhatsApp, signing in to the web dashboard, or otherwise using the Service, you expressly consent to the collection, use, storage, and processing of your personal data as described in this Privacy Policy. You may withdraw your consent at any time by messaging "delete my data" on WhatsApp or by emailing us. Withdrawal of consent will result in deletion of your data and termination of the Service for your account.

3. Information We Collect

• Phone number (for WhatsApp communication and authentication)
• Name and profile information you provide
• Event details, vendor information, personal expenses, and budget data you share
• Messages and media you send through WhatsApp
• Usage data and interaction logs

4. How We Use Your Information

• To provide and improve our AI-powered financial management service
• To send you expense summaries, payment reminders, and budget alerts via WhatsApp
• To authenticate your identity via OTP
• To generate reports and analytics for your events and personal budgets
• To automatically extract transactions from connected email accounts

5. Internal Access by Authorised Personnel

A limited number of authorised employees and contractors of Paisa Agent may access account information to:

• Provide customer support when you contact us
• Investigate suspected fraud, abuse, or security incidents
• Diagnose and fix technical issues you report
• Monitor product health (e.g. how many users have onboarded, how often the service is used, which features perform well)
• Estimate and manage operational cost (including aggregate AI token consumption per account)

What authorised personnel can see:

• Account metadata: your name, plan tier, signup date, last activity, and a masked phone number (e.g. +9198••••••10)
• Aggregate engagement counts: number of events, expenses, and messages associated with your account
• Aggregate AI usage: token counts and estimated cost per account (used to identify abusive patterns and forecast infrastructure cost)

When the full phone number is revealed:

• The full phone number is hidden by default and is only revealed when an authorised person provides a written business reason (e.g. "user reported login issue").
• Every reveal is recorded in an internal audit log with the accessor's identity, timestamp, IP address, and the stated reason. We retain these records for review.
• If the audit log cannot be written, the reveal is refused — no full phone number is ever shown without a corresponding audit entry.

What we do NOT do:

• We do not read your conversation messages, financial details, or vendor information for product analytics.
• We do not export your personal data to third-party analytics services (e.g. PostHog) without first masking or pseudonymising it.
• We do not sell, rent, or share your data with advertisers.

6. AI and Data Processing

Paisa Agent uses third-party AI models (Google Gemini) to process your messages and extract financial information. Your messages are sent to these AI services for real-time processing only. We do not use your personal financial data to train, fine-tune, or improve any AI models. Conversation context is maintained in our secure database solely to provide you with a coherent and personalized experience.

Media files: When you send images, PDFs, voice messages, or other files via WhatsApp, we process them in memory to extract financial information (e.g. vendor names, amounts, transaction details). The extracted data is saved to your account, but the original media files are not stored on our servers. They are discarded immediately after processing. You can access your original files through WhatsApp's media settings at any time.

7. Data Storage and Security

Your data is stored securely on Google Cloud Platform with encryption at rest and in transit. OAuth tokens for connected services are encrypted using AES before storage. We use industry-standard security measures to protect your personal information. We do not sell, rent, or trade your data to third parties.

8. Third-Party Services

We use the following third-party services to operate:

• Meta / WhatsApp Business API (messaging)
• Google Cloud Platform (hosting and storage)
• Google Gemini (AI processing — no data used for model training)
• Sentry (error monitoring — no personal financial data is sent)
• PostHog (product analytics — usage patterns only, no financial data)
• Langfuse (AI quality monitoring — messages are logged for response quality; no data shared externally or used for training)

Each third-party service processes data in accordance with their own privacy policies. We share only the minimum data necessary for each service to function.

9. Data Retention and Deletion

You can request deletion of your data at any time by messaging "delete my data" on WhatsApp or by emailing us. We will delete your personal data within 30 days of receiving your request, except where retention is required by law.

10. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to erasure")
• Withdraw consent for data processing
• Nominate another person to exercise these rights on your behalf
• Lodge a grievance with us or, if unresolved, with the Data Protection Board of India (once constituted under the DPDP Act)

11. Children's Privacy

Paisa Agent is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will promptly delete their data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via WhatsApp or on the dashboard. Your continued use of the service after changes constitutes acceptance of the updated policy. The "Last updated" date at the top reflects the most recent revision.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the Grievance Officer for Paisa Agent can be contacted at: support@paisaagent.ai

We will acknowledge your grievance within 24 hours and resolve it within 30 days of receipt.

14. Contact Us

If you have questions about this Privacy Policy, contact us at: hello@paisaagent.ai