Privacy policy

Artha Engine is built around a simple principle: your financial data belongs to you. You can use most of the site without an account at all — in that case, nothing you type ever leaves your browser. If you choose to sign in, we store only what's needed to keep your profile and progress available across devices.

• Signed out: your inputs stay in your browser (localStorage). We don't see them.
• Signed in: your profile syncs to our database so you can access it from any device.
• No advertising, no selling. We don't run ads, and we never sell personal data to third parties.
• Delete anytime: you can delete your account and all associated data from Settings at any time.

The data we hold depends on whether you use Artha Engine signed out or signed in.

Signed-out usage

When you use calculators without an account, everything you enter is stored in your browser's localStorage under the key artha-profile-v1. This data never leaves your device. We cannot read it, back it up, or recover it. You can clear it at any time through your browser settings.

When you sign up or sign in

Authentication is handled by Clerk. When you create an account, Clerk collects:

• Your email address
• Your name (if provided by you or your sign-in provider)
• Authentication identifiers from your sign-in provider (Google, GitHub, etc.) if you use social sign-in
• A hashed password (if you use email/password sign-in — we never see or store the plain-text password)

While you use the product signed in

Once signed in, we store the following in our database:

• Your financial profile — the same data you'd otherwise keep in your browser: income, housing goals, loan details, tax regime preference, assets, and similar fields you choose to enter into calculators
• Monthly snapshots — a periodic record of your profile so you can see how your financial health changes over time
• Account settings — such as whether you've opted in to email nudges
• Timestamps — when your profile or snapshots were created and last updated

We do not collect or store bank account numbers, card numbers, PAN, Aadhaar, payslips, or any document uploads. Artha Engine is a decision-support tool, not a banking or KYC product.

Automatically collected data

Like most websites, our hosting platform (Vercel) records basic request logs and anonymous usage metrics for reliability and performance monitoring. This includes IP address, user-agent, and page load times. We use Vercel Analytics and Speed Insights, which are designed to be privacy-friendly and do not use tracking cookies.

We use a small set of trusted sub-processors to run Artha Engine. Each is contractually obligated to protect your data and is only used for the purposes described here.

Some of these processors are located outside India. By using Artha Engine signed in, you consent to the transfer of your personal data to these jurisdictions for the purposes described above.

• To provide the service: run calculators, save your profile, sync it across devices, and generate your financial health score.
• To show you progress over time: we capture monthly snapshots of your profile so you can see trends on your dashboard.
• To send optional nudges: if you opt in, we may send occasional emails when your financial situation changes materially (e.g., a large drop in health score). You can turn these off in Settings at any time.
• To keep the site working: error monitoring, performance tracking, and abuse prevention.

We do not use your data to train AI models, sell it, rent it, share it with advertisers, or build profiles for third-party marketing.

Under the Indian Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable international privacy laws, you have the following rights over your personal data:

• Right to access: see what data we hold about you. Your profile is visible on your dashboard; for anything else, email us.
• Right to correction: fix anything that's wrong. Most fields are editable directly in the product.
• Right to erasure: delete your account and all associated data. Go to Settings → Delete account. This removes your profile, snapshots, and authentication record within 30 days.
• Right to portability: export your snapshots and profile as JSON from the Settings page.
• Right to withdraw consent: you can stop using the signed-in product at any time. Signed-out usage does not require any consent because nothing leaves your browser.
• Right to grievance redressal: if you believe we've mishandled your data, contact us using the details below. You may also approach the Data Protection Board of India if your concern is not resolved.

• While your account is active: we keep your profile, snapshots, and settings for as long as you use Artha Engine.
• After you delete your account: we remove personal data from our database within 30 days. Backups may retain data for up to 90 days before being fully overwritten.
• Server logs: hosting logs are retained by Vercel according to their own retention policy, typically 30 days.
• Signed-out data: stays in your browser until you clear site data manually. We have no copy.

We use a small number of cookies and browser storage items:

• Session cookies (Clerk): required for you to stay signed in. Without them the product cannot function for authenticated users.
• localStorage (artha-profile-v1): stores your profile data locally. Used by both signed-out and signed-in users.
• Theme preference: a small localStorage entry to remember light/dark mode.
• Vercel Analytics / Speed Insights: privacy- friendly, no cross-site tracking, no advertising cookies.

All traffic to Artha Engine is encrypted in transit via HTTPS. Database contents are encrypted at rest by our database provider. Authentication is handled by Clerk, which maintains SOC 2 Type II compliance. Access to production systems is limited to the operators of the service and protected by multi-factor authentication.

No system is perfectly secure. If you discover a vulnerability, please report it to us at privacy@arthaengine.com so we can address it quickly.

Artha Engine is designed for adults making personal financial decisions. We do not knowingly collect data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy as the product evolves. When we make material changes, we will update the "Last updated" date at the top of this page and, for signed-in users, send a notification. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

Current version last updated on 11 April 2026.

Questions, requests, or concerns about this policy or how we handle your data? Reach out at privacy@arthaengine.com.

Artha Engine is operated from India. This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023.