Fundora — Privacy Policy

Effective date: 2026-09-__ · Applies to: the Fundora Telegram bot (the "Service").

Fundora analyses the mutual-fund portfolio you already own. This page explains, in plain language, what we store, for how long, who else sees it, and how you get it back or have it erased.

What we collect and why

Data	Why	How long
Your Telegram user ID (and display name)	To recognise you, apply your plan (free / premium / family / pack), and enforce abuse limits	Until you stop using the Service, or 12 months after your last message
Your portfolio, as you type or import it	To run the analyses you ask for	24 hours — sessions are cleared automatically every day; `/reset` clears yours immediately
Your conversation with the bot	So follow-up questions can refer back to earlier turns	Same 24-hour session window
CAS PDF statements you upload	Parsed in memory only to extract your holdings — the file is never written to disk, and the PDF password you send is deleted from the chat immediately	Never stored
Usage counters (how many analyses/AI questions, aggregate LLM cost)	To enforce free-tier limits, your plan's fair-use cap, and to keep the Service financially sustainable	Rolling daily/monthly counters
Payment records (subscription status, Razorpay charge references, amounts, refunds)	To deliver what you paid for, process refunds, and meet Indian tax/GST record-keeping obligations	Retained as required by law (years, not months) — a legal-obligation carve-out under DPDP §17
Family-plan group membership (owner ↔ member IDs)	To share one subscription between your household's seats	While the family plan is active

Who else sees your data (processors)

Telegram — delivers your messages to the bot, under Telegram's privacy policy.
LLM providers (e.g. Anthropic, or an OpenAI-compatible gateway) — when you use the AI assistant, your question and the relevant portfolio context are sent to the model provider to generate the reply. Numbers are computed by our own code, not the model.
Razorpay — processes payments (UPI). Your payment instrument never touches Fundora; we store only Razorpay's charge references and amounts.
Cloudflare — hosts this policy page.
Cloud providers (fly.io, Render, Cloudflare R2) — run the Service and its encrypted ledger backups.

We do not sell, rent, or share your portfolio data with anyone, for advertising or any other purpose. We are not a data fiduciary beyond the minimum needed to run the Service.

Your rights (India DPDP Act, 2023)

Access / portability: /export gives you your portfolio and conversation as JSON, instantly.
Erasure: /forgetme erases your portfolio and conversation immediately and tells you exactly what was retained and why.
Correction: /reset then re-send corrected holdings.
Grievance: contact the support channel below.

Withdrawal of consent

You may stop using the Service and run /forgetme at any time. Payment records are retained only to the extent tax law requires; everything else goes when you ask.

Children

The Service is not directed at anyone under 18.

Changes to this policy

Material changes are announced in the bot before they take effect. The dated version on this page is the one in force.

Contact / Grievance Officer: __ (support handle) · expected response time: 72 hours.