Privacy notice
NidhiVista helps you and your family keep track of your investments in one place. This notice explains, in plain words, what personal data NidhiVista handles, why, who else touches it, how long it is kept, and what you can do about it. It is written for India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
In short
- We never ask for your PAN, Aadhaar, full bank account or demat account numbers.
- We keep what you put in: your sign-in email, names of the people in your household, and the holdings and transactions you import or enter.
- No ads. We do not sell your data or share it with anyone except the few service providers named below.
- You can download your data and delete your account from inside the app.
- Questions or complaints: hello@nidhivista.com.
1. Who we are
NidhiVista is run by Sreedhar Reddy, an individual in Hyderabad, India (postal address on request). Under the DPDP Act he is the "data fiduciary": the person who decides why and how your personal data is used. When this notice says "we" or "us", it means him.
NidhiVista is in a private, invitation-only beta. It is free, and it is for individuals and families in India. It is a tracker, not an adviser: it gives no investment recommendations, and NidhiVista is not registered with SEBI.
2. What we collect
If you join the waiting list on nidhivista.com
- Your name and email address.
- Your family size and what you would like to track (both optional choices from a list).
- That you agreed to be emailed about the beta, and when you signed up.
To slow down abuse, the form briefly keeps a scrambled (hashed) form of your internet address; it is deleted after 60 seconds.
When you have an account
- Sign-in details: your email address (and a mobile number if you add one), and whether it has been verified. Sign-in codes are sent by email; codes by text message are not available yet.
- Your name: a first name, and a last name if you choose to give one.
- Your agreement: which version of this notice and the terms of use you accepted, and when.
- Sign-in security: your signed-in devices (a device label such as the browser or app, and when it was last used); if you turn on two-step sign-in, an encrypted authenticator-app secret and your recovery codes (stored only in scrambled form).
- Your household: the names of the people you add (first name is enough), each person's role, and invitations you send to other people's email addresses.
- Your investments: holdings and transactions that you import (for example a mutual fund CAS, broker contract notes or holdings files, NPS statements) or type in; the broker, fund house or NPS record-keeper they are held with; your goals; and other assets such as deposits, PPF, gold, property and loans. Mutual fund folio numbers are kept encrypted and shown masked. For other assets you may add the last 4 characters of a reference number; we keep only those 4.
- Tax details you choose to give: your tax regime, other income and tax already deducted, and optionally your month and year of birth (never the day), kept encrypted and used only to apply the senior-citizen tax rules.
- Technical records: each request to our server is recorded with its time, the address requested, the result, the device label and a network address, which may identify your connection. We keep these for 90 days. We also keep short-lived error reports to fix problems.
How imported statements are handled
- The file you upload and its password are used in memory only to read it. The original file is not kept, and the password is never stored.
- Only an allow-list of facts is kept from it: instrument, date, quantity, price, amount, transaction type, charges, folio number (encrypted) and similar. Names, addresses, emails, phone numbers, bank details and nominee details in the statement are dropped.
- A statement names its owner by PAN, PRAN or broker client code. We turn that number into a secret-keyed fingerprint as soon as the file is read, so we can tell whose statement it is next time. The number itself is never stored, shown, logged or included in a download.
- An import waits for you to confirm it for up to 24 hours, stored encrypted, and is then saved or cleared.
3. What we do not collect
We do not ask for, and the service refuses to store, your PAN, PRAN, Aadhaar, full bank account number or IFSC, demat or depository IDs, broker client codes, nominee details, home address, full date of birth or gender. If a name or note looks like one of these numbers, it is refused.
The website and the apps carry no advertising and no third-party tracking or analytics tools.
4. Why we use it
We use your personal data only with your consent, which you give when you sign up (and, for the waiting list, when you tick the box), and only to:
- let you sign in and keep your account secure;
- show your holdings, values, returns, goals, tax estimates and reports;
- let the people in your household work together, as you choose;
- email you sign-in codes, invitations and important notices about the service or this notice;
- keep the service working, find and fix faults, and prevent misuse;
- for the waiting list: tell you about the beta and invite you.
We may also keep or share data where the law requires it, for example to answer a valid order from a court or government authority. We do not use your data for advertising, and we do not sell it.
You can withdraw your consent at any time by deleting your account (section 9) or, for the waiting list, by writing to us. Withdrawing does not affect what was done before.
5. Your household
NidhiVista keeps each household separate from every other. Inside a household, what others see depends on the roles the household owner sets (owner, manager, member or viewer): the owner and managers can see and manage the household's records. If you have your own sign-in, you choose how your own portfolio is shared with the rest of the household: in full, as totals only (value, cost and gain, without the holdings), or not at all. A person's tax page is seen only by that person and the household owner.
If the only owner of a household deletes their account, the household and all its records are deleted, including records of other members; those members keep their own sign-in. A download of your data contains only what you can see in NidhiVista: other members' private portfolios are never included, and portfolios they share as totals only appear as totals.
The people who run the service from inside the app (operators) do not see household data. As the person who runs the server, Sreedhar Reddy can technically reach the database; he looks at household data only when you ask for help, to fix a fault, or when the law requires it.
6. Who else handles your data
We use a small number of service providers ("data processors"). They handle data only to provide their service to us.
- Cloudflare, Inc. (USA)
- Hosts this website and stores the waiting list. All traffic to the app passes through Cloudflare (Cloudflare Tunnel), which provides the secure connection; Cloudflare Access checks the web app's sign-in email and sends a one-time PIN. Cloudflare therefore sees your internet address, your sign-in email and, as the secure connection ends at Cloudflare, the traffic between you and the app.
- Postmark, by ActiveCampaign, LLC (USA)
- Sends our emails: sign-in codes and invitations. It receives the email address and the message.
- Microsoft OneDrive (Microsoft Corporation)
- Holds an encrypted copy of our backups. The copy is encrypted on our computer before upload, and Microsoft does not have the key. It is stored in Microsoft's cloud, in the region Microsoft chooses for the account.
- Google Play and Apple App Store
- Will distribute the phone apps. When you download an app, their own terms and privacy policies apply to what they collect.
Prices come from public sources: NSE, AMFI and MFAPI (mutual fund NAVs), NPS Trust, IBJA (gold and silver) and Yahoo Finance. Those requests name instruments and dates only; we never send them your personal details.
Some of these providers are outside India, so your data may be handled abroad. The DPDP Act allows this except to countries the Government restricts; we will stop using a provider in such a country.
7. Where your data is kept
During the beta, the app and its database run on a computer in India that Sreedhar Reddy operates. Backups are kept on an encrypted external drive, and an encrypted copy is kept in Microsoft OneDrive. We may later move the service to a cloud provider; we will update this notice and tell you by email before we do.
8. How long we keep it
- Your account and household data: until you delete it.
- After you ask to delete your account: the deletion happens 7 days later, so you can change your mind. Then your sign-in details, name, consents and devices are erased. If you were the only owner of the household, the whole household and all its records are erased too. A blank "Deleted user" entry and a record that the deletion took place are kept, so our security records stay consistent.
- Imports waiting to be confirmed: up to 24 hours.
- Error reports: 30 days.
- Request records (section 2): kept for 90 days, then deleted automatically; deleted sooner when you delete your account.
- Backups: a backup is taken every week and before each software update that changes the database. On the encrypted drive we keep one backup a week for 13 weeks, then one a month for up to 12 months; in OneDrive, the newest 12. Data you delete stays in older backups until they are removed on that schedule, so it is gone from every backup within 12 months; we restore from a backup only to recover from a failure.
- Waiting list: deleted once the beta is open to you, or sooner if you ask. The whole list is deleted when the beta ends, or 12 months after you joined it, whichever comes first.
9. Your rights
- See your data
- On the web app, Account → Download my data gives you a file (JSON) with your account details, the consents you gave and, if you are an owner or manager of a household, all of the household's records. Encrypted folio numbers and statement fingerprints are not included (you see a count of the fingerprints). The phone app does not offer the download yet. You can also write to us for a summary of what we hold and who we have shared it with.
- Correct or complete your data
- You can change your name, household and investment records in the app. For anything you cannot change yourself, write to us.
- Delete your data
- On the web or the phone, Account → Delete my account. You confirm with a code, and the deletion happens after 7 days; you can cancel until then. See section 8 for exactly what is erased. Other members of a household keep their own accounts.
- Withdraw consent
- Delete your account, or for the waiting list write to us.
- Nominate someone
- You can name a person to use these rights for you if you die or become unable to. Write to us with their name and email. Before acting for a nominee we will ask for reasonable proof of their identity and of your death or incapacity.
- Complain
- Write to us first (section 14). If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
We answer requests sent to hello@nidhivista.com within 30 days. We may ask you to write from the email address on your account, so we know the request is yours.
10. Your duties
The DPDP Act also asks you to: give true information, not pretend to be someone else, add other people's data only with their permission (or as their parent or guardian), and not make false or frivolous complaints.
11. Children and family members
You must be 18 or older to have an account. A child's records can only be added by a parent or legal guardian, who confirms this when adding the child. When you add another adult who does not sign in themselves, you confirm that they have agreed to you recording and managing their investment records. Invited family members sign up and accept this notice themselves.
We do not track children or show them advertising.
12. How we protect your data
- All connections use encryption (TLS) through Cloudflare.
- Each household is kept apart in the database itself (row-level security), as well as in the app.
- Sign-in uses a one-time code sent to your email; you can add two-step sign-in with an authenticator app under Account.
- Folio numbers, authenticator secrets, birth months and imports waiting to be confirmed are encrypted in the database.
- Backups are encrypted, and the off-site copy uses its own key.
- The server is not reachable directly from the internet; it accepts connections only through Cloudflare.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires, with what happened and what you can do.
13. Changes to this notice
If we change this notice, we will email you before the change takes effect and show the new version in the app. For important changes we will ask you to accept the new version.
14. Contact and complaints
Sreedhar Reddy, NidhiVista · hello@nidhivista.com · Hyderabad, India (postal address on request).
Grievance officer: Sreedhar Reddy, sreedhar@nidhivista.com. We reply to every grievance within 30 days.
Emails from codes@nidhivista.com are sent automatically; please write to hello@nidhivista.com instead of replying.
Back to NidhiVista