Privacy & Data Protection
Privacy Policy
Last Updated: March 24, 2026
1. Overview & Who We Are
Foldy is a secure digital financial locker that helps individuals organize and manage their financial documents and compliance records in one centralized location.
- Company Name: Foldy Technologies Pvt. Ltd.
- Headquarters: India
- Email: info@foldy.co.in
- Website: www.foldy.co.in
This Privacy Policy applies to all Foldy products and services. By using Foldy, you agree to this policy. If you don't agree, please don't use our services.
2. What Information We Collect
Information You Provide
- Account Information: Name, email address, phone number, password
- Identity Verification: Government ID, PAN, Aadhaar (if required)
- Financial Documents: Bank statements, ITR, TDS certificates, investment records
- Contact Information: Mailing address, communication preferences
- Feedback & Support: Messages, complaints, feature requests
Information We Collect Automatically
- Device Information: Device type, OS, browser type
- Usage Data: Clicks, page views, time spent, features used
- IP Address & Location: For security and fraud prevention
- Login Activity: Time of access, duration of session
Information From Third Parties
- Data Providers: ITR and TDS information from authorized government sources (with your consent)
- Payment Processors: Transaction information for billing
- Analytics Services: Aggregated usage data
3. How We Use Your Information
We Use Your Data To
- Provide Services: Create your account, store documents, send reminders
- Security: Prevent fraud, detect breaches, verify identity
- Improve Features: Understand usage patterns, develop new features
- Customer Support: Respond to your queries and issues
- Legal Compliance: Meet regulatory requirements (tax, data protection laws)
- Communication: Send product updates, security alerts, important notices
- Analytics: Track usage to improve user experience
- Billing: Process payments and subscriptions
We Do Not
- Sell your data to advertisers or third parties
- Use your financial information for marketing
- Share personal data without consent (except legally required)
- Use cookies for tracking across websites
- Access your documents for any reason except at your request
4. How We Protect Your Data
Security Measures
- AES-256 Encryption: Military-grade encryption for all documents at rest
- TLS/SSL: Encrypted transmission of data over internet
- Multi-Factor Authentication: 2FA and biometric options
- Zero-Knowledge Architecture: Even Foldy staff can't access your data
- Firewalls & Intrusion Detection: Real-time monitoring
- Regular Security Audits: Third-party penetration testing
- Automated Backups: Daily encrypted backups with disaster recovery
- Access Controls: Role-based permissions, minimal access principle
Security Note: While we use industry-leading security measures, no system is 100% secure. We recommend using strong passwords and keeping your login credentials confidential.
6. How Long We Keep Your Data
| Data Type | Retention Period | Reason |
|---|---|---|
| Your Documents (ITR, Bank Statements, etc.) | Until you delete or account closed + 2 years | Your ownership; tax/regulatory requirements |
| Account Information | Until account closed + 7 years | Tax compliance, audit trails |
| Login Activity & IP Logs | 90 days | Security and fraud prevention |
| Payment Records | 7 years | Tax and financial regulations |
| Support/Chat History | 2 years | Service improvement and dispute resolution |
| Cookies | 1 year | User preferences and security |
Right to Deletion: You can request deletion of your account and associated data. We'll delete personal data but retain only what's legally required.
7. Your Privacy Rights
You Have the Right To
- Access: Request a copy of all your data in a readable format
- Correct: Update or correct inaccurate information
- Delete: Request deletion of your account and data
- Portability: Export your documents in standard formats
- Opt-Out: Unsubscribe from marketing communications
- Object: Oppose certain uses of your data
- Know Purpose: Understand why we collect and use data
How to Exercise Your Rights
Email us at info@foldy.co.in with your request. Include:
- Your account email
- Specific right you're exercising
- Any supporting information
We'll respond within 30 days (or as required by law). Some requests may take longer.
9. Legal Compliance
We Comply With
- India Data Protection Act (DPDP): Personal data protection framework
- Information Technology Act (ITA): Data security and privacy standards
- Tax Regulations: GST, Income Tax, ROC requirements
- RBI Guidelines: Banking security standards
Data Processing Agreements
If you're a business, we can provide a Data Processing Agreement (DPA) for compliance purposes.
Transfers Outside India
Your data is primarily stored in India. Any international transfer requires your explicit consent and complies with applicable laws.
10. Contact Us
Questions about your privacy? Contact Foldy's Privacy Team:
Complaint Rights
If you believe we've violated your privacy rights, you can:
- Contact us first (we'll try to resolve)
- Lodge a complaint with your local data protection authority
- Contact the Data Protection Board (India)
Changes to This Policy
We may update this policy occasionally. We'll notify you of significant changes via email or prominent notice on Foldy. Your continued use means you accept the updated policy.
This policy applies to all Foldy services and products.