Privacy Policy
Perovo is local-first by default. Your financial ledger is written to storage on your device first, and the core app works with no account. Cloud backup and selected connected features are optional and only send the information needed for that feature to the relevant provider. This page states plainly what stays on your device and what leaves when you choose a connected feature.
1. What we collect
Only what the product needs to compute your numbers or provide a feature you use:
- Account (only if you sign in): email address, and a display name if you set one.
- Financial data you enter: bills and EMIs, income, assets and liabilities, instruments, lending and borrowing records, rental agreement details, goals. PAN and mobile number are optional and used only where you enter them on a document or agreement.
- Connected investment data (optional): when you connect a supported provider (currently Groww or Upstox), Perovo retrieves read-only portfolio holdings such as instruments, quantities, average cost, current value, and related P&L fields. Credentials required for that connection are handled as described in section 5.
- Market and property context (optional): when you refresh market data for holdings or run property intelligence, location or instrument identifiers you provide may be sent to mapping, places, or market-data services to return evidence and prices.
- AI context (optional, Pro): when you use Ask Perovo / the financial guide, a minimized snapshot of financial context you have recorded may be sent to the AI provider to generate an explanation. Deterministic engines remain the source of numerical calculations.
- Agreement / eSign data (optional): when you generate or sign a lending or rental document, the document content and signer details you provide are processed for PDF generation and, if you choose eSign, by the electronic-signature provider.
- Device and product signals: app version, device label (for example "Chrome on Windows"), language, session identifier, and anonymous feature-usage events.
- Crash information: error message, source and a truncated stack trace, with emails, phone numbers, PAN, long identifiers and tokens stripped before the report is stored or sent.
We do not read your SMS inbox, call logs, or contacts. Perovo does not connect to your bank account or automatically import bank transactions. Supported investment connections can import portfolio holdings read-only. Every ledger figure is either entered by you, imported from a connection you initiated, or clearly identified as market / evidence data.
2. Where your data is stored
| On your device | Default and primary location for your financial ledger. Data lives in the app's local storage and is not uploaded for cloud backup unless you switch that on. |
|---|---|
| Perovo cloud backup | Optional, Pro only, off by default. A snapshot of your data is stored in our Supabase project, protected by your account login and per-row database access rules so no other account can read it. Encrypted in transit (TLS) and at rest by the database provider. The snapshot itself is stored as readable JSON to your own authenticated session, so enable backup only on devices you trust. Imported holdings and agreement metadata may be included in that snapshot when backup is on. |
| Connected-feature processing | Investment sync, market refresh, property intelligence, AI explanations, payments, and eSign necessarily process limited data with the relevant third-party service while that feature runs. See section 5. |
| Payments | Pro subscription and separately purchased eSign credit packs are handled by Razorpay. Perovo never receives or stores your card, UPI PIN, or bank credentials for those charges. |
3. Why we process it
- To calculate your Perovo Score, commitment burden, survival runway, net worth, holdings analysis, lending and rental records.
- To import and refresh read-only investment holdings when you connect a supported provider.
- To provide property intelligence evidence (comparables, location context, confidence and freshness) when you request it.
- To generate explanations via AI when you ask, without replacing deterministic calculations.
- To generate agreement documents and, if you choose, route them for electronic signature.
- To back up and restore your data when you explicitly enable cloud backup or press Restore.
- To keep the app working: diagnosing crashes and measuring which features are used.
- To process Pro subscription and eSign credit payments and provide support you ask for.
4. What we never do
- We do not sell, rent or trade your data.
- We do not share it with credit bureaus, lenders, or data brokers for their marketing.
- We do not use your financial data for advertising, and we serve no ads.
- We do not run credit checks and we do not lend money.
- We do not place trades, withdraw funds, or move securities in connected investment accounts.
- We do not silently overwrite your local records with an empty or older cloud snapshot.
5. Third parties we use
| Supabase | Authentication, optional cloud backup, app release files, and server-side functions that power connected features. |
|---|---|
| Razorpay | Pro subscription payments and eSign credit purchases. |
| Groww | Optional read-only portfolio import. You supply the connection credentials required by Groww’s Trade API (for example API key / secret, access token, or TOTP-based flow as configured). Credentials are stored encrypted server-side for your account so the app can sync holdings; Perovo uses them only to retrieve holdings and related market snapshots, and not to place orders or move money. Disconnect removes the stored connection for future syncs. |
| Upstox | Optional read-only portfolio connection via OAuth. Perovo retrieves equity and mutual-fund holdings you authorize. Tokens are stored for sync under your account; disconnect revokes the connection for future use. |
| Market data | Price and related market information for holdings may be fetched through supported provider APIs (for example Upstox market data where configured). Prices may be delayed, estimated, or unavailable. |
| Google Maps / Places / related Google APIs | When you use property intelligence, location or address information you provide may be sent to mapping and places services to resolve locality context and related evidence. |
| Gemini / Google AI | When you use Ask Perovo or property research features that call the AI layer, a minimized financial or property context may be processed to generate explanations or research summaries. Calculations remain engine-driven. |
| Leegality | When you choose Aadhaar / electronic signature for a lending or rental agreement, the document and signer details you provide are sent to Leegality to complete signing. |
| OpenTimestamps | Optional: if you anchor an agreement’s tamper-evidence hash, only the hash (not the document text) may be submitted to the OpenTimestamps calendar network. |
| Vercel | Hosting for this marketing website only (no app financial ledger). |
| PostHog / Sentry | Product analytics and crash reporting, when configured for a build. Both are covered by the opt-out below, and crash reports are redacted before sending. |
Provider availability depends on configuration, region, and the provider’s own terms. Scaffolded or disabled brokers are not active connections and are not listed as live integrations above.
6. Your choices
- Use it without an account. Sign-in is needed for cloud backup, Pro, connected investment sync, lending invitations, and some agreement / eSign flows.
- Leave connected features unused. If you never connect investments, never run property intelligence or AI, never pay or eSign, and keep cloud backup off, your financial ledger stays on-device for day-to-day use.
- Disconnect investment providers in the app when you no longer want holdings sync.
- Turn analytics and crash reporting off in the app under Settings → Privacy & security. Diagnostics then stay on your device only.
- Withdraw consent per purpose (financial tracking, cloud sync, notifications) at any time in the same screen. Each purpose is withdrawn separately; withdrawing one does not affect the others.
- Local-first ledger: your financial records remain on your device unless you choose cloud backup or a connected feature that must send specific information to provide that feature.
7. Your rights under the DPDP Act 2023
- Access and portability: Profile → Backup & data → Export data gives you a full JSON copy.
- Correction: edit or delete any entry directly in the app.
- Erasure: Profile → Delete all data wipes local data; deleting your account removes cloud data.
- Nomination: you may nominate another person to exercise these rights for you in case of your death or incapacity. Email the nominee's name and contact details to support@perovo.in.
- Grievance: write to support@perovo.in.
- How to exercise your rights: email support@perovo.in from the address linked to your account. We aim to respond within 30 days, and always within 90 days.
8. Personal data breach
If a personal data breach affects you, we will inform you without delay, including what happened, the likely impact and the steps you can take. We will also inform the Data Protection Board of India as the law requires.
9. Retention
- Local data: kept until you delete it or uninstall the app.
- Cloud backup: the latest snapshot is kept while backup is on, and deleted within 30 days of account deletion.
- Connection credentials / tokens: kept while the connection remains enabled for your account, and removed or invalidated when you disconnect or delete the account.
- Crash and usage records: retained no longer than 12 months.
10. Children
Perovo is not intended for anyone under 18. We do not knowingly process a child's data; if you believe we have, contact us and we will delete it.
11. Changes and contact
If this policy changes materially we will update the effective date above and note it in the app's changelog. Questions, requests or complaints: support@perovo.in.