Privacy Policy

1. Introduction & Overview

Welcome to arthaX (“we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal wealth data, transaction logs, and authentication credentials. This Privacy Policy details how our personal wealth terminal collects, processes, encrypts, and safeguards your information when you use our web application and associated Google OAuth services.

2. Information We Collect

When using arthaX, we collect and process the following categories of data:

• Authentication & Identity Data: When you sign in using Google OAuth or Email/Password, we receive your email address, full name, and profile avatar picture provided by Google authentication servers (`openid`, `email`, `profile` scopes).
• Financial & Portfolio Records: Ledger entries, bank account titles, income entries, expense tracking data, mutual fund holdings, stock portfolio orders, bond allocations, and derivative trades that you explicitly input or synchronize into your dashboard.
• Email Transaction Alert Sync (gmail.readonly scope): If you explicitly opt-in and authorize automated transaction synchronization, our server extracts read-only bank debit and credit transaction notifications sent to your Gmail inbox from verified banking institutions. We strictly read only transactional alert emails and never access personal correspondence, contacts, or send emails on your behalf.

3. Google API Services Disclosure

arthaX's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data retrieved via Google OAuth (such as your profile address or financial debit alerts) is utilized exclusively to calculate your personal net worth, display your categorized spending, and present analytical reports on your private dashboard. We do not sell, rent, share, or broker your Google account data or financial history with third-party advertisers or data aggregators under any circumstances.

4. Data Protection & Security Architecture

Your financial records are secured using enterprise-grade security protocols:

• Row-Level Security (RLS): Every database row in our Supabase infrastructure is strictly isolated to your individual unique User ID. Authorized server operations use privileged credentials where needed to provide integrations and account management.
• Encryption at Rest & in Transit: All data transmissions are encrypted via TLS/SSL 1.3, and sensitive database columns are protected by AES-256 encryption at rest.

Analytics & Storage

Essential storage supports sign-in, security, and your preferences. Vercel Analytics receives page events with query strings and fragments removed, and campaign parameters are stored in session storage for the current visit. Error monitoring, when configured, supports service reliability separately.

5. Your Rights & Data Deletion

You retain absolute ownership and control over your financial records. You may export all your transaction histories, mutual funds, and portfolio reports to CSV/PDF at any time from the Settings dashboard. You may also request permanent deletion of your account and all associated database records by contacting us or invoking the account deletion procedure in the Console Settings.

6. Contact Us

If you have any questions, security concerns, or inquiries regarding this Privacy Policy or your Google OAuth consent preferences, please contact our administrative team directly: