Privacy Policy

1. Who we are

PaisaCopilot is provided by PAISACOPILOT PRIVATE LIMITED ("PaisaCopilot", "we", "us" or "our"). This Privacy Policy explains how we handle personal information when you use our iOS app, paisacopilot.com, household features and support services. PaisaCopilot accounts are offered to adults.

Our registered office is No. 2/144-A, S.F. No. 256/3B, Maamarathu Thottam, G. Vadugapalayam, Kittampalayam Post, Karumathampatti, Coimbatore – 641659, Tamil Nadu, India. You can contact us at help@paisacopilot.com or +91 422-4573299.

2. Information we collect

We collect information you provide, information generated when you use PaisaCopilot, and information supplied by the services that help us operate it.

We also store account and message data on your device to support the app. If you save a password used to unlock a PDF, it is stored in your device's Keychain. The password is used locally and is not uploaded to PaisaCopilot. When you send the unlocked PDF, its contents are uploaded. You can manage saved PDF passwords in Settings.

Please submit only information you are entitled to share. Avoid including bank-login passwords, one-time passwords, card security codes or unrelated sensitive information in messages or documents.

3. Why we use information

We use information to:

• Create and authenticate accounts, maintain preferences, and enforce household access permissions.
• Process documents and messages, organise financial records, answer questions about those records, and provide bills, summaries and reminders.
• Send invitations, service communications and notifications you enable.
• Verify purchases, manage subscriptions, apply usage limits and help recover eligible subscription access.
• Diagnose failures, secure the service, prevent fraud or misuse, and improve reliability using appropriate operational information.
• Respond to support and privacy requests, comply with applicable law and resolve disputes.

You can decline to provide information or contact us to withdraw consent. We may then be unable to provide the feature that needs that information. Acknowledging this policy does not replace a separate consent required by law. Section 4 explains the app's AI-processing permission and its scope.

4. AI processing and provider retention

PaisaCopilot uses OpenRouter to route AI requests to OpenAI. Depending on your request, the information sent can include your message, selected images or PDFs, their contents, and relevant financial records or conversation context that your account is authorised to access. This processing supports document extraction, categorisation and answers about your finances. PDFs are sent through the selected native PDF-processing route.

The app asks for permission to process attachments and remembers your approval for the current sign-in session and disclosure version. This permission applies to attachments. Text-based Copilot requests can also involve AI processing and relevant financial or conversation context that your account is authorised to access. If you do not want particular content processed this way, do not submit it to Copilot. Contact us to withdraw consent or request deletion of previously submitted information.

We do not use your financial content to train general-purpose AI models. Our AI requests use provider-data-collection opt-out settings, restrict model processing to OpenAI, disable fallback to other model providers, and disable OpenRouter's full-response caching. These controls do not eliminate the provider retention described below.

OpenAI's default abuse-monitoring logs may contain submitted content, responses and derived metadata for up to 30 days, with longer retention in circumstances described in its policy, including legal or safety needs. Image and file safety checks can also result in retention for review. Provider-side prompt caching may temporarily retain processing data. We do not represent Zero Data Retention as active for PaisaCopilot.

OpenRouter also processes request and operational metadata for routing, billing and service operation. Its retention practices are separate from our account-data retention. See OpenAI's data controls, OpenRouter's data-collection information and OpenRouter's Privacy Policy.

5. Household access and notifications

Household administrators can view financial records added or imported by members of their household. This can include the source attachment linked to a financial record. That permission does not expose another member's entire private message timeline, failed uploads or unrelated attachments. Ordinary household members can access only their own financial records.

Administrators can manage membership. Removing a member deletes that member's PaisaCopilot account and associated data. The household owner's account-deletion action has broader consequences, described below. Join a household only if you are comfortable with these permissions.

If you enable notifications, Apple receives the device token and notification payload needed for delivery. Notifications can include financial details or message previews, which may appear on a lock screen or connected device. You can disable notifications or hide previews in your device settings.

6. Who receives information

We use the following services for the purposes described here. The information each receives depends on the feature you use.

Our monitoring rules exclude financial content, attachments, prompts, model responses, authentication secrets and raw provider error bodies from application logs and error reports. Diagnostic information still includes operational metadata; the app is not free of diagnostics.

Service providers receive information for the functions described above. When providers act on our behalf, we remain responsible for our handling of your information and for requiring appropriate protection consistent with this policy and applicable law. Providers that act independently, such as Apple for App Store transactions, also have their own privacy responsibilities.

Where permitted by applicable law, and with any permission required, we may disclose information when reasonably necessary to comply with law or a valid legal request, protect rights or safety, or investigate misuse. If a merger, acquisition or transfer of the business involves personal information, we will apply appropriate protections and provide notice where required. We remain responsible for our handling of your information when using service providers.

We do not sell your personal information or share it for cross-context behavioural advertising. We do not use your financial documents to target advertisements.

7. Website information and local storage

Our current public website does not include advertising trackers or analytics scripts. Cloudflare processes network information to deliver and secure it. The homepage uses country information supplied by Cloudflare to select India or U.S. screenshots; it does not request precise device location or use a tracking cookie for this choice.

Our website does not track your activity over time across third-party websites for advertising. It does not change its operation in response to browser "Do Not Track" signals.

The app uses local storage for sign-in/session state, preferences, cached content and certain consent records. This is separate from website tracking. External services you open, such as Apple's subscription-management pages, follow their own privacy notices.

8. How long we keep information

Retention depends on the type of information and why it is needed. The periods and deletion rules below distinguish active account data, billing and security records, and provider-held copies. Where a fixed period is not specified, we assess the need to provide the requested service, resolve an outstanding support request or dispute, investigate security incidents, complete deletion or recovery work, or meet an applicable legal obligation. The absence of a fixed period does not authorise retention beyond what is necessary for a lawful purpose.

Financial records and uploads. We retain your data while your account remains active, unless you delete it or your account, or deletion is required for legal, security or operational reasons. We do not currently apply automatic plan-based deletion: becoming a Free household or ending a paid subscription does not by itself erase financial history. Any future plan-based deletion would require advance notice, an explanation of the affected data and deletion date, and a meaningful opportunity to preserve your records.

Account deletion. You can request deletion in the app's Settings. For a non-owner, deletion removes that person's account and associated data while preserving other household accounts. When the household owner deletes their account, every PaisaCopilot account in that household, all household data and pending invitations are deleted. Primary account/database deletion and cleanup at authentication and attachment-storage providers are separate steps; external cleanup may continue through retries.

Subscription records after deletion. Deleting your account does not cancel a subscription billed by Apple. Where billing history exists, we retain a minimal pseudonymous billing record while the subscription or related recovery or reconciliation remains active or unresolved. The subsequent 180-day retention period starts no earlier than account deletion, or when we finally verify that the subscription and related recovery work are inactive, whichever is later. A future verified entitlement-end date can extend the deadline. Eligible records are removed by scheduled cleanup after the deadline and completion of outstanding billing work. The record is used to process billing events, prevent duplicate subscription claims and support subscription recovery. It does not contain your financial history, attachments, messages or contact details.

Security and cleanup records. We retain a one-way hash of the removed authentication-provider account identifier, without a scheduled expiry, to reject that old identity and its sessions. The record contains no email address or financial history and does not prevent you from creating a new account with a new authentication identity. Limited cleanup records remain while deletion work is unfinished. Legally required records may remain for the applicable obligation.

Processing records, diagnostics and backups. Different stores have different purposes and retention periods. Our current settings and provider schedules are:

Household invitation records stored in PaisaCopilot are separate from invitation emails. An invitation's 24-hour validity does not delete the record; records remain until acceptance or an applicable invitation, account or household deletion. Device-registration records, including inactive registrations, and certain usage and synchronisation records remain until the applicable deletion flow removes them.

Support correspondence. Support messages are held separately from your app account. Their retention depends on the time needed to handle your request and necessary follow-up, resolve a related dispute, or meet an applicable legal obligation. We delete support information when it is no longer needed for these purposes, subject to applicable retention obligations. To request deletion of support correspondence, contact help@paisacopilot.com and identify the correspondence you want included.

Provider-held copies. Account deletion does not necessarily erase information immediately from every backup, diagnostic log or service-provider system. Retention varies by the information, its purpose and applicable obligations, including service recovery, security, billing and legal requirements. The periods stated above and the AI-processing information in section 4 apply to the identified records and stores; they are not deadlines for every provider-held copy.

Where a provider processes information on our behalf, we remain responsible for handling your privacy request and pursuing deletion as required by applicable law. Some providers also retain records under their own responsibilities; for example, Apple's independent purchase records are not governed by our 180-day billing-recovery period. Contact us for help with the status of a deletion request or an applicable retention exception. These distinctions do not limit your rights under applicable law.

Processing already authorised before deletion may finish sending information to a provider before it reaches its next account-access check. Deleting an account cannot retract information already sent to an AI provider or erase copies another person has lawfully saved. Provider retention described above continues to apply. If you need help understanding a deletion request's status or exceptions, contact us.

9. Your choices and privacy requests

You can review your records and delete supported records you own in the app; contact us for corrections that the app does not support. You can also manage saved PDF passwords, change device notification permissions, and use the account-deletion controls in Settings. Deleting the app from your device does not delete your PaisaCopilot account or cancel an Apple subscription.

Contact help@paisacopilot.com to request access to, a copy of, correction of or deletion of your personal information, or to withdraw consent. We may need to verify your identity and the information you are entitled to access. A request concerning a household does not give you access to another person's private information.

Depending on the law that applies to you and to us, you may also have rights to portability, restriction or objection, an appeal of a privacy-request decision, or a complaint to the appropriate authority. We will explain applicable options and respond within the legally required period. We will not unlawfully discriminate against you for exercising a privacy right. This policy does not assume that every regional privacy law applies to every user.

10. Security and international processing

We use measures such as encrypted network connections, authentication and role-based access controls to protect information. No service can guarantee absolute security. PaisaCopilot and its service providers must process content to deliver these features; this is not a promise of end-to-end encryption.

Our providers may process information outside India or your country of residence, including in the United States and Germany. Our production database is currently hosted in Frankfurt, Germany. Data-protection laws may differ between countries. We use the safeguards and transfer arrangements required by applicable law. Choosing an India region, currency or language does not mean that all processing occurs in India.

11. Age eligibility

PaisaCopilot is intended for people aged 18 or older. We do not knowingly provide accounts to children or knowingly collect their information as account holders. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

An app-store content rating is not permission for a child to create a PaisaCopilot account.

12. Changes and complaints

We will update the effective date when this policy changes. For material changes, we will provide appropriate notice through the app, website or another suitable channel, and obtain fresh consent where required before applying a new use of information.

For privacy questions and complaints, contact:

Privacy / Grievance Officer: Mohanraj K Rangasamy
PAISACOPILOT PRIVATE LIMITED
help@paisacopilot.com · +91 422-4573299
Registered office: No. 2/144-A, S.F. No. 256/3B, Maamarathu Thottam, G. Vadugapalayam, Kittampalayam Post, Karumathampatti, Coimbatore – 641659, Tamil Nadu, India.

For grievances governed by India's applicable sensitive-personal-data rules, we will address the grievance within one month of receiving it. Other requests will be handled within the period required by the law that applies.

Back to top