Last updated 6 October 2026
Draft. This describes what mf.finchaya.com does today, while the site is in limited release, including the paid subscription. It will be reviewed and expanded before general launch, and again before any client onboarding or transaction facility is added.
This policy covers mf.finchaya.com, the fund health research tool operated by FinChaya. It explains what we collect, why, and what you can ask us to do about it.
Almost everything on this site is public data about mutual funds, and you can read it without an account. We hold personal data only in two situations.
If you sign in with Google, we receive and store your email address and the name on your Google account. We do not receive your Google password, and we cannot read your Gmail, contacts, files, or anything else in your Google account. The only permissions we request are your basic profile and email address.
If you start a free trial, we keep a record of it: which plan you tried, the first and last day, whether you later subscribed, and the two emails we send about it (a reminder on the sixth day and a note on the eighth day if it ended without a subscription). To stop one person getting repeated trials we also keep the email address in a simplified form (lower case, with Gmail dots and "+" tags removed). This record is deleted with your account.
If you subscribe, payment is handled by Razorpay on its own secure page. We never receive or store your card number, UPI ID or bank details. We keep a record of the subscription itself: which plan, its status, the dates it runs to, and Razorpay's reference numbers for it and for each payment. We keep these for as long as the law and our accounts require, even if you delete your account.
If you invite a friend, you can share a personal link that carries a short code. We do not send anything to your friend and we do not read your contacts: you send the link yourself, from your own WhatsApp, phone or email. If your friend opens the link and then signs in for the first time, we record that they came through your link, so we can show you how many people have joined. Your friend is not told who you are beyond the message you chose to send, and you are not told who they are.
When you use the site, our server keeps ordinary access logs — the pages requested, timestamps, and the IP address the request came from. These are used to keep the service running and to investigate faults or abuse.
We do not sell your data. We do not share it with advertisers. We do not run advertising or third-party tracking on this site.
One cookie, fc_session, set when you sign in. It holds a
random token that identifies your session — nothing else, and nothing about
you. It is marked HttpOnly, so scripts running in your browser cannot read
it. Signing out clears it. There are no analytics or advertising cookies.
Fund data comes from AMFI, the AMCs' own published portfolio disclosures, and market data providers. That data is about funds, not about you.
Your account details are kept while your account exists. Sessions expire automatically after 90 days. Server logs are kept for a short period for operational purposes and then rotated away.
You can ask us to show you what we hold about you, correct it, or delete your account and everything attached to it. Write to finchaya2026@gmail.com from the address you signed in with and we will action it. You can also revoke FinChaya's access from your Google account settings at any time.
The site is served over HTTPS. Session tokens are stored only as cryptographic hashes, never in a form that could be reused. We do not store passwords, because we do not use them.
What this site is not. mf.finchaya.com publishes educational research about mutual funds. It is not investment advice, and nothing here is a recommendation to buy or sell any scheme. FinChaya is not currently registered with SEBI as an Investment Adviser or Research Analyst.
We will update this page when what we do changes, and the date at the top will change with it.
FinChaya — finchaya2026@gmail.com