Skip to content
DeciLoan

Privacy policy

Last updated 2026-09-23

This policy explains what DeciLoan stores, why, how AI is used, and how you can delete it.

What we store

  • Account details: email, name, optional phone, language and time zone.
  • Financial details you enter: loans, income, expenses, goals and planned purchases.
  • Documents you upload, in private storage, plus the details extracted from them.
  • Only the last 4 characters of any loan account number — never the full number.
  • AI assistant conversations, so you can come back to them.
  • Billing records from Razorpay: plan, status and amounts. We never see or store card, UPI or bank details.

Why we store it

Solely to provide the service you use: calculations, reviews, reminders, reports and, if you pay, your subscription. We don't sell your data, share it with lenders, or use it for advertising.

How AI is used

  • Document extraction: an uploaded document is sent to our AI provider to suggest loan details. You verify every value before it's saved.
  • Assistant: when you ask a question, the relevant parts of your data are sent to our AI provider to answer it. Numbers come from our own calculation engine, not the AI.
  • Our AI provider processes this data on our behalf and does not use it to train its models.
  • Both are optional and controlled from your profile.

Security

Every record is locked to your account by database row-level security. Documents are in private storage reachable only through short-lived links created after an ownership check. Logs and analytics are scrubbed of financial values and identifiers.

Your rights and choices

  • Export everything we hold about you (Profile → Export).
  • Delete individual loans, documents, reports or conversations at any time.
  • Delete your account, which permanently removes all your data and documents.
  • Withdraw optional consents at any time.

Retention

We keep your data while your account is active. When you delete it, your data and files are removed immediately; minimal audit and billing records may be retained where the law requires, without your financial details. GST tax invoices and credit notes (name on the invoice, email, state, optional GSTIN, plan and amount) are kept for the period required under GST law, currently about six years.

Service providers

Supabase (database, authentication, storage), Vercel (hosting), Anthropic (AI), Razorpay (payments) and an email provider for notifications.