> ## Documentation Index
> Fetch the complete documentation index at: https://recontrol.money/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy Policy

> How Recontrol collects, uses, and protects your personal information.

**Effective Date:** 19 October 2026
**Last Updated:** 29 October 2026
**Supersedes:** version dated 29 July 2026

> [!NOTE]
>
> **What changed in this version.** These are corrections so the policy matches the Service as it now works. (1) Recontrol is also a **web application** at app.recontrol.money, hosted by **Vercel**; Section 14 describes its cookies and browser storage, and its usage analytics are off in the EEA and the UK until you turn them on (Sections 1, 3.3, 6.1 and 14). (2) **AI Chat** now looks up what each question needs, which can include individual transactions, and can **propose changes you confirm**; the **AI features** permission is asked the first time you ask, can be turned off in Settings, and also covers sorting a linked bank's new kinds of transaction (Section 4A). (3) Bank connections may also bring in investment holdings, card and loan terms, and repeating payments, where your bank reports them (Section 3.2). (4) You sign in with Google, Apple or your email address: a one-time code sent to it, or a password where your account has one (Sections 3.1 and 7); the codes are sent by our email provider (Section 6.1); and the web application's sign-in storage is listed (Section 14). (5) The Service no longer computes a net worth (Section 5). (6) When you delete your account, what you recorded in a shared space stays with that space (Section 11.2). We also list feedback and notifications among the data we hold (Sections 3.1 and 3.3).

***

## 1. Introduction

Recontrol ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal information when you use the Recontrol mobile applications or the Recontrol web application at app.recontrol.money (each, and together, the "App") and all related services (collectively, the "Service").

This Privacy Policy applies to all users of the Service. Recontrol is provided as a mobile application for iOS and Android and as a web application at app.recontrol.money.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices as described in this Privacy Policy, you should not access or use the Service.

This policy should be read together with our [Terms of Service](https://recontrol.money/docs/legal/terms.md), our [Information Security Policy](https://recontrol.money/docs/legal/security.md), our [Data Retention and Disposal Policy](https://recontrol.money/docs/legal/data.md), and our [Access Controls Policy](https://recontrol.money/docs/legal/access.md).

***

## 2. Who we are

Recontrol is a personal and collaborative finance management application that helps users track accounts, record transactions, set financial goals, collaborate in shared workspaces, and — optionally — import balances, transactions, and investment holdings from connected financial institutions, and ask questions about their own figures using AI Chat.

**Data Controller / Data Fiduciary:**

* **Name:** Mrinal Wahal (sole proprietorship)
* **Email:** [support@recontrol.money](mailto:support@recontrol.money)
* **Mailing Address:** 2005, Yucca, Paramount Symphony, Crossing Republik, Ghaziabad, Uttar Pradesh, India 201016

For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we are the **Data Fiduciary** in respect of the personal data we process about you. For users in **Canada**, the same individual is the **Privacy Officer** accountable for our personal-information practices under PIPEDA and Quebec's Law 25; for users in the **United States**, the same contact handles privacy-rights requests under the CCPA/CPRA and other state laws. Our contact details (one address for all privacy, grievance, and rights requests) are in Section 17. Region-specific rights are described in Section 10.

***

## 3. Information we collect

### 3.1 Information you provide directly

| Data type | Details | Purpose |
| - | - | - |
| **Account registration** | Email address and display name: from the Google or Apple account you sign in with, or the email address you sign in with. When you sign in with your email, a one-time code is sent to that address; a password, where your account has one, is kept only as a one-way hash | Account creation and authentication |
| **Phone number** (optional) | If provided — for example, to invite members to a Space by phone | Space invitations |
| **Financial account data** | Account names, account types, account balances | Core Service functionality |
| **Transaction data** | Amounts, descriptions, timestamps, source and destination accounts | Core Service functionality |
| **Plans and alerts** | Budgets, goals and watchlists — their names, amounts, dates, linked accounts and any planning figures you enter — and the alerts set on them and on accounts | Planning, and notifying a Space's members of what was asked to be told |
| **Space information** | Space names and organisational data | Collaborative workspace management |
| **Reporting currency** | The display currency for each Space. It is defaulted from your device's region when a Space is created and can be changed in-app at any time | Display formatting and currency conversion |
| **AI Chat questions** | The text of the questions you ask in AI Chat, and whether the exchange succeeded. **The answers are never stored** | Understanding which questions users ask, so we can build them into the product (see Section 4A) |
| **Feedback** | What you send through **Send Feedback**: its type, your message, whether you would like a reply, the Space you were in, and — if **Include Diagnostics** is on — the App's version, your device or browser platform, and the screen it was sent from. Never your financial data | Fixing defects and improving the Service |
| **Support communications** | Messages you send to us | Customer support and Service improvement |

### 3.2 Information from connected financial institutions (optional integrations)

If — and only if — you choose to connect an external financial account, we receive data from that institution **on your behalf and with your consent**. These integrations are optional and inactive until you explicitly connect an account. Manual entry remains fully available and is the default. See Section 4 for full detail.

| Source | Data we receive | Purpose |
| - | - | - |
| **Plaid** (bank connections — United States and Canada) | Account names, types and subtypes, the last four digits of the account number ("mask"), current balances and currency codes, transaction history (up to 730 days — amount, date, description, merchant name, pending status), and your financial institution's name. Where your institution reports them: investment holdings (security name, quantity, price and value); card and loan terms (last statement balance and date, minimum payment, due date, interest rate, overdue status, and a loan's end date); and recurring payments it has detected (merchant, typical amount, frequency and next expected date) | Automatically importing and refreshing your bank accounts and transactions, and showing what your institution reports about them |
| **Zerodha** (investment holdings — India) | Equity and mutual-fund holdings (ISIN, security or fund name, quantity, average price, last price, profit/loss), and your Zerodha user ID, name, and email | Automatically importing your investment holdings |

We **never** receive, see, or store your online banking or brokerage login credentials or one-time passwords. Authentication happens directly between you and the institution (through Plaid or Zerodha). See Section 4.

### 3.3 Information collected automatically

| Data type | Details | Purpose |
| - | - | - |
| **Authentication tokens** | JSON Web Tokens (JWT), access tokens, refresh tokens | Session management and authentication |
| **Integration access tokens** | Encrypted access tokens issued by Plaid and Zerodha that let us refresh your connected data | Maintaining your active integrations (stored encrypted — see Section 7) |
| **Session information** | Session identifiers, login timestamps | Security and session management |
| **Country / region** | A two-letter country code derived from your **device's region setting** at sign-up (not GPS, and not IP-based geolocation). Omitted entirely if your device does not provide one | Establishing your country/region for regional privacy rights and sensible defaults |
| **Device push token** | Once your phone allows notifications: an Expo push token, an optional device name, and your platform (iOS or Android) | Delivering push notifications |
| **Notifications** | The notifications the Service has sent you, and whether you have read them | Your in-App notifications inbox |
| **Subscription status** | Whether you hold an active plan and when it expires, an opaque customer identifier issued by our subscription-management provider, your monthly AI-usage counter, and which Spaces you have chosen to sponsor. **No card number, billing address, or payment details** — those are held by Apple or Google, never by us | Providing and enforcing paid features (see Section 4B) |
| **Product analytics** | Pseudonymous product-usage events (such as which features are opened) together with device and app metadata (operating system or browser, app version, language). Tagged with an app-generated user identifier — **never** your name, email, account balances, transactions, or other financial data | Understanding how the App is used so we can improve it |
| **Crash and error reports** | Uncaught application errors and native crashes, reported through PostHog. The exception **type** and the code locations (file, function, line) are kept; the exception **message** and any runtime values captured with it are removed before the report is sent. Covered by the same opt-out as analytics | Diagnosing and fixing defects |
| **Basic request metadata** | IP address, user-agent string, request timestamps — received by our API and, for the web application, by Vercel (Section 6.1) | Server operation, security monitoring, debugging |
| **Server-side telemetry** | Traces, metrics and logs emitted by our API — request timings, error rates, route and procedure names, and opaque internal identifiers such as your user ID and Space ID. Emitted through **OpenTelemetry** and filtered by a deny-by-default allowlist, so names, monetary amounts, balances, email addresses, tokens and free text are removed before anything leaves our systems | Infrastructure monitoring, performance, security and debugging (see Section 6.1) |

**Analytics is limited and optional.** The App includes one product-analytics tool, **PostHog** (see Section 13). It captures pseudonymous usage events and the stripped crash reports described above to help us understand how the App is used and where it breaks — it **never** receives your financial data (balances, transactions, holdings), your name, or your email. You can turn analytics off at any time from **Settings** in the mobile application or **Profile and settings** in the web application, and it is disabled on local/development builds. In the web application, for visitors in the European Economic Area and the United Kingdom, analytics are off — and nothing is stored on your device for them — until you turn them on. We do not use any advertising SDK, cross-app tracking, or social-media pixel.

### 3.4 Information we do not collect

* **Banking credentials** — we never receive or store the username, password, PIN, or one-time password for your bank or brokerage. Where you connect an institution, that authentication is handled directly by Plaid or Zerodha
* **Precise location** — we do not collect GPS or precise location data. We record the two-letter country code from your device's region setting at sign-up (see Section 3.3); this is coarse and is not location tracking. The web application reads the country that Vercel derives from your IP address on each request, solely to decide whether usage analytics start switched off where the law requires consent first; it is not stored
* **Contacts** — we do not access your device address book
* **Photos or media** — we do not access your camera or photo library
* **Advertising identifiers** — we do not collect IDFA or any advertising identifier
* **Payment details** — we never receive or store your card number, billing address, or any payment instrument. In-app purchases are processed entirely by Apple or Google (see Section 4B)
* **Audio recordings** — where you ask an AI Chat question by voice, transcription is performed by your device's operating system or, in the web application, your browser. We receive only the resulting text and never store, receive, or transmit audio (see Section 4A)
* **Biometric data** — we do not collect or receive fingerprint, face, or other biometric data. The App offers an optional biometric app lock (e.g. Face ID / fingerprint); this verification is performed entirely by your device's operating system, and your biometric data never leaves your device or is shared with us

***

## 4. Connected accounts and financial integrations

Recontrol offers **optional** integrations that let you link an external financial institution so your balances, transactions, and holdings import and refresh automatically. You are never required to use them, and manual entry remains fully available.

### 4.1 Plaid (bank connections — United States and Canada)

* We use **Plaid Inc.** ("Plaid") to connect to your bank. Plaid is a regulated financial-data aggregator.
* When you connect a bank, you authenticate directly with Plaid (and, through Plaid, your bank). **Recontrol never sees or stores your bank login credentials.**
* On your behalf, Plaid provides us the data listed in Section 3.2, including up to **730 days (two years)** of transaction history so your account history can be reconstructed.
* Plaid is a **United States-based** service provider, and Plaid processes your banking data on infrastructure located in the United States before it reaches Recontrol. See Section 8 (International data transfers).
* We store a Plaid access token so we can refresh your data — periodically on a schedule, in response to secure webhooks from Plaid, and when you open the App. This token is **encrypted at rest using AES-256-GCM**.

**How Plaid uses your data.** When you connect a financial account, Plaid collects information from you and from your financial institution — including identifiers (such as your name and contact details), your account and routing information, account balances, and transaction history — and uses, stores, and processes that information to provide the account-connection service and for the purposes described in Plaid's own privacy policy. Plaid is an independent data controller of the information it collects through this process; its handling of your data is governed by the **[Plaid End User Privacy Policy](https://plaid.com/legal/#end-user-privacy-policy)**, which we encourage you to read.

**Your consent to Plaid.** By connecting a financial account through Plaid, **you grant Recontrol and Plaid the right, power, and authority to access and transmit your personal and financial information from the relevant financial institution, on your behalf**, for the purpose of providing the account-connection feature you have chosen to use. **You also agree that your personal and financial information may be transferred, stored, and processed by Plaid in accordance with the [Plaid End User Privacy Policy](https://plaid.com/legal/#end-user-privacy-policy).** You can withdraw this authorization at any time by disconnecting the integration (Section 4.3), which revokes the token with Plaid and deletes it from our systems.

### 4.2 Zerodha (investment holdings — India)

* We use **Zerodha's Kite Connect API** to import your investment holdings if you connect your Zerodha (demat/trading) account.
* You authenticate directly with Zerodha. **Recontrol never sees your Zerodha password or two-factor codes.**
* On your behalf, Zerodha provides us the holdings data listed in Section 3.2.
* We store a **daily** Zerodha access token, **encrypted at rest using AES-256-GCM**. It expires every day, after which you must re-authorise to continue syncing.
* Your use of Zerodha is also governed by [Zerodha's privacy policy](https://zerodha.com/privacy/).

### 4.3 Disconnecting an integration

You can disconnect any integration at any time from within the App. When you disconnect:

* We **revoke** the access token with the provider (Plaid or Zerodha), and
* We **delete** the stored encrypted token from our systems.

Accounts, transactions, and holdings already imported into your Space remain in your Space until you delete them or delete your account. Disconnecting stops all further syncing. We recommend disconnecting all integrations before deleting your account.

***

## 4A. AI Chat

AI Chat is an **optional** feature that lets you ask questions about your own finances in plain language. It is available only on a paid plan. The same permission, **AI features**, also lets the Service ask a model to sort a linked bank's new kinds of transaction into your categories (Section 4A.7). If you never turn AI features on, none of your information is sent to the model provider described below.

### 4A.1 Who processes it, and your permission

The model is **Claude**, provided by **Anthropic PBC**, in the **United States**. Anthropic acts as our processor for these features.

The first time you ask AI Chat a question, the App asks you to turn on **AI features**. The request names Anthropic and lists what is sent, and nothing reaches Anthropic until you agree. Your choice is recorded with your account, so it applies in the mobile and web applications alike. It is never a condition of subscribing. You can turn AI features off at any time in **Settings** (mobile) or **Profile and settings** (web); after that, AI Chat sends nothing and imported transactions are sorted without the model.

Under Anthropic's commercial terms, **Anthropic does not train its models on data sent through its API**, and prompt and response content sent to the messages endpoint is not retained by default once the response has been returned. Anthropic may retain content flagged by its automated trust-and-safety systems, or where retention is required by law. Anthropic's handling of this data is governed by the [Anthropic Privacy Policy](https://www.anthropic.com/legal/privacy) and its published [API data-retention documentation](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention).

### 4A.2 What AI Chat sends to the model

AI Chat sends your question, a short orientation, and the results of the look-ups the question needs:

* your question, and the earlier turns of the same on-device session;
* the Space's name, reporting currency and today's date;
* the Space's assets and liabilities — names, types, currencies and today's balances — and the names of its categories and income sources;
* the Space's headline totals for the current month;
* caveats: whether some money has no category, whether an amount could not be converted, and which connections have stopped syncing, named by institution;
* the permissions your role holds in the Space;
* as the question needs: spending by category over any period; lists of matching transactions, each with its note (or its accounts), amount, date and direction; balances on a date; the Space's budgets, goals and watchlists with their figures; and the results of projections computed from figures you provide;
* opaque internal record identifiers for the records named above.

The names you have given your accounts, categories, sources and plans, and individual transactions where a question needs them, therefore form part of what is sent. A shared Space's records include those entered by its other members.

### 4A.3 What is never sent to the model

Your name, email address, or phone number; account numbers, including the last four digits imported from a bank; any banking or brokerage credential; individual investment holdings (security names, quantities and prices); and any data from a Space other than the one you are asking about.

### 4A.4 What we store

We store **the text of your question** and the outcome of the exchange, attributed to your account, in our own database. **We do not store the answer, and we do not store the data sent with it.** There is no server-side conversation history; the transcript you see exists only on your device, for that session, and is discarded when the App closes.

Your questions are deleted when you delete your account, and you may ask us to erase them at any time (Section 10). Question text is never sent to our analytics provider.

### 4A.5 Voice input

If you ask by voice, the audio is transcribed by **your device's own speech recognition** — Apple's on iOS, Google's on Android — or, in the web application, by your browser's. Whether that transcription is performed on the device or on the provider's servers is determined by the platform and varies by language and device; it is not a choice we control. While the microphone is open, the mobile App supplies your **institution and account names** to the platform recogniser as vocabulary hints so it can transcribe them correctly. The microphone is active only while you are dictating, and a dictated question is never sent without your confirmation. Recontrol does not record, store, or transmit audio.

### 4A.6 Limits on what the model can do

AI Chat can **propose** a change to the Space — recording or correcting a transaction, updating a balance, adding an account, category or income source, setting or changing a budget, goal or watchlist, or deleting one of these. The proposal is computed and checked by our backend and shown to you on a card drawn by the App; **nothing is changed unless you confirm it**, and a confirmed change is made under your own permissions. AI Chat cannot move money, connect or disconnect institutions, change members, roles or invitations, delete a Space or your account, or change a subscription or sponsorship. Every figure it states must come from figures our backend computed — it is instructed not to calculate, estimate, or infer figures of its own, and to state that it does not have a figure rather than produce one. AI Chat does not make any decision about you, and nothing in it constitutes financial, investment, or tax advice (see the [Terms of Service](https://recontrol.money/docs/legal/terms.md#14-financial-disclaimers)).

### 4A.7 Sorting imported transactions

When a bank you linked brings a kind of transaction your Space has not seen before, and the Service cannot place it from your Space's own history or category names, it may ask the model to choose among your Space's categories. It sends the names of the Space's categories, the institution's category for the transaction, and up to three merchant names — **never an amount, a note, or anything that identifies you**. This happens only if the person who linked the bank has turned on AI features.

### 4A.8 Your own AI tool

The web application lets you connect an AI assistant of your own, such as Claude or ChatGPT, to your Recontrol data. That connection is made by you, in your tool. When you use it, the data it reads is sent to that tool's provider at your direction, under that provider's terms and privacy policy. You can remove the connection in your tool's settings at any time.

***

## 4B. Subscriptions and payments

Recontrol offers an optional paid subscription. The core ledger is free and remains free.

> [!WARNING]
>
> **We never receive, see, or store your payment details.** All purchases are made and processed entirely inside the **Apple App Store** or **Google Play**, under their own terms and privacy policies. Your payment method belongs to your store account.

### 4B.1 What we receive

We use **RevenueCat, Inc.** to reconcile store purchases into an entitlement. What reaches our systems is limited to: whether an active subscription exists, when it expires, and an opaque customer identifier. We do not receive card numbers, billing addresses, or transaction amounts.

RevenueCat processes, on our behalf and as our processor: an app-generated user identifier, your device type and operating system, and the store's own purchase receipt (Apple) or purchase token (Google). RevenueCat stores this data on Amazon Web Services **in the United States**. See the [RevenueCat Privacy Policy](https://www.revenuecat.com/privacy).

### 4B.2 Sponsorship in shared Spaces

If you put your subscription behind a Space so its bank connections can sync ("sponsoring"), we record that you have done so. Other members of that Space can see that the Space is sponsored. Sponsoring is always your own act — no role and no administrator can commit your subscription on your behalf, and you can withdraw it at any time.

### 4B.3 Deleting your account does not cancel your subscription

Because your subscription belongs to your Apple or Google account rather than to Recontrol, deleting your Recontrol account removes our record of it but **does not cancel it**. Cancel through your store's subscription settings before deleting your account. See Section 11.

***

## 5. How we use your information

* Creating and managing your user account
* Authenticating your identity and managing sessions
* Enabling you to create, view, edit, and delete financial accounts, transactions, goals, and Spaces
* Importing and refreshing data from financial institutions you choose to connect
* Converting and displaying balances in your chosen currency
* Computing totals, balance history, budgets, goals and watchlists
* Answering the questions you ask in AI Chat, preparing the changes you ask it to propose, and understanding which questions are asked so we can build them into the product (Section 4A)
* Sorting imported transactions into your categories (Section 4A.7)
* Providing paid features, determining your entitlement to them, and applying fair-use limits (Section 4B)
* Enabling collaborative features, including memberships, roles, and permissions
* Providing customer support
* Identifying and fixing bugs and performance issues
* Detecting and preventing unauthorised access and abuse
* Complying with applicable law
* Sending essential service communications (security alerts, policy updates)

**We do not use your personal information for advertising, marketing to third parties, or building advertising profiles. We do not sell your personal information.**

***

## 6. How we share your information

### 6.1 Service providers and processors

| Service provider | Data shared | Purpose | Location |
| - | - | - | - |
| **Nhost** (Backend-as-a-Service) | Account data, authentication data, session tokens, email, display name, phone number, financial data | Authentication, user management, database hosting (PostgreSQL via Hasura) | **United States (AWS us-east-1, Northern Virginia)** |
| **Amazon Web Services (AWS)** via Nhost | All data stored in the Service's database | Cloud infrastructure and data storage at rest | **AWS us-east-1 (Northern Virginia, United States)** |
| **Railway** | Data in transit through our API as it is processed (requests, financial data being computed) — not stored there | Hosting our application/API server | **United States** |
| **Vercel Inc.** | Requests to the web application, including IP addresses and request logs, and data in transit through the web application's own server, including your sealed sign-in session (only if you use the web application) | Hosting the web application at app.recontrol.money | **United States** |
| **Plaid Inc.** | The bank data described in Section 3.2 (only if you connect a bank) | Bank-account aggregation | **United States** |
| **Zerodha** (Kite Connect) | The brokerage data described in Section 3.2 (only if you connect Zerodha) | Investment-holdings aggregation | India |
| **Anthropic PBC** | Your AI Chat question and the data described in Section 4A.2; for sorting, the names described in Section 4A.7 (only after you turn on AI features) | Generating AI Chat answers and sorting imported transactions | **United States** |
| **RevenueCat, Inc.** | An opaque customer identifier, device type and operating system, and the store purchase receipt or token (only if you subscribe) | Subscription management | **United States** |
| **Apple Inc. / Google LLC** (payments) | Your purchase and payment details, handled entirely by them — we receive none of it | Processing in-app purchases | Per Apple / Google |
| **Apple Inc. / Google LLC** (speech) | Spoken audio and vocabulary hints (your institution and account names), while you dictate an AI Chat question | Converting speech to text — on-device or provider-side, per platform | Per Apple / Google |
| **Resend** | Email addresses and the contents of transactional emails (e.g. sign-in codes, Space invitations, account-deletion confirmation) | Sending transactional email | United States |
| **Expo** (push) → **Apple APNs / Google FCM** | Your device push token and the notification content, once your phone allows notifications | Delivering push notifications | United States |
| **PostHog** | Pseudonymous usage events, stripped crash reports, an app-generated user identifier, and device/app metadata — no financial data (only if analytics is on) | Product analytics and error tracking | **United States (PostHog US Cloud)** |
| **Grafana Labs** | Server-side traces, metrics and logs — opaque internal identifiers, timings, route names and error codes. No names, monetary amounts, balances, email addresses or free text | Infrastructure monitoring (Grafana Cloud) | **United States** |
| **exchangerate-api.com** | Currency codes only (e.g. "USD", "INR") — no personal or financial data | Foreign-exchange rates for currency conversion | — (no personal data) |

Recontrol's **database is hosted in the United States** (AWS us-east-1, Northern Virginia, via Nhost), and our **application/API server is also hosted in the United States** (Railway). Your data is therefore stored and processed in the same country. The supporting and optional providers above operate in the United States, with the exception of Zerodha (India, only if you connect it). See Section 8 for the international-transfer disclosure.

**Telemetry is filtered before it leaves us.** Server-side traces, metrics and logs are pushed to a collector we operate ourselves, which forwards them to Grafana Cloud. Sensitive fields are removed at the source under a deny-by-default allowlist: only explicitly permitted technical fields may be emitted, so a field added to the product later cannot silently begin flowing to a monitoring vendor.

### 6.2 Collaborative Space members

When you participate in a shared Space, other members of that Space may see the financial data within that Space (accounts, transactions, goals, imported balances and holdings) in accordance with the permissions assigned to their role. Your display name and email may be visible to other Space members.

### 6.3 Legal requirements

We may disclose your information if required to do so by law, court order, or other legal process initiated by competent authorities.

### 6.4 Business transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any change in ownership.

### 6.5 What we do not do

* We do not sell your personal information to third parties
* We do not share your data for advertising or marketing by third parties
* We do not share your data with data brokers
* We do not track you across other apps or websites

***

## 7. Data security

We implement appropriate technical and organisational measures to protect your personal information, as described in detail in our [Information Security Policy](https://recontrol.money/docs/legal/security.md):

* **Encryption in transit:** All data is transmitted over TLS/HTTPS
* **Encryption at rest:** Data stored in our databases is encrypted at rest using AES-256, provided by AWS
* **Application-level token encryption:** Access tokens for connected integrations (Plaid, Zerodha) are additionally encrypted at rest using **AES-256-GCM** before being stored
* **Secure credential storage:** On mobile devices, authentication tokens are stored using platform-native secure storage (iOS Keychain / Android Keystore via Expo Secure Store). In the web application, your sign-in is sealed with encryption in a cookie that page scripts cannot read, and the short-lived access token is held in memory only; you are signed out after an hour without activity and asked to sign in again a day after signing in
* **Password hashing:** You sign in with Google, Apple or your email address. A password, where your account has one, is stored only as a one-way hash; we cannot read it. A one-time sign-in code expires after 10 minutes
* **JWT authentication:** All API requests are authenticated using signed JSON Web Tokens
* **Role-based access control:** Collaborative Spaces enforce granular permissions (see our [Access Controls Policy](https://recontrol.money/docs/legal/access.md))
* **Input validation:** All API requests are validated using Protocol Buffer schema validation (protovalidate)
* **Webhook verification:** Incoming webhooks from Plaid and our subscription provider are verified cryptographically as well as by a shared secret, so a forged or replayed payload is rejected
* **Telemetry redaction:** Monitoring data is filtered at the source by a deny-by-default allowlist before it leaves our systems, so names, amounts, balances, email addresses, tokens and free text are never exported to a monitoring vendor
* **Access controls:** Internal access to user data is restricted to authorised personnel on a need-to-know basis

No method of transmission over the Internet is 100% secure. If you become aware of any security issue, please contact us immediately at [support@recontrol.money](mailto:support@recontrol.money).

### 7.1 Data breach notification

In the event of a personal data breach, we will notify affected users and the relevant authorities in accordance with the laws that apply to them:

* **India:** the Data Protection Board of India and affected users, under the DPDP Act and the Digital Personal Data Protection Rules, 2025, and applicable requirements under the Information Technology Act, 2000.
* **United States:** affected residents (and, where required, state Attorneys General) under applicable state data-breach-notification laws.
* **Canada:** the Office of the Privacy Commissioner of Canada and affected individuals where a breach creates a "real risk of significant harm" (PIPEDA), and the Commission d'accès à l'information for Quebec residents (Law 25); we maintain a record of breaches as required.

See our [Information Security Policy](https://recontrol.money/docs/legal/security.md) for our incident-response process.

***

## 8. Data storage location and international data transfers

> [!NOTE]
>
> **Changed on 29 July 2026.** Recontrol's database was migrated from **AWS ap-south-1 (Mumbai, India)** to **AWS us-east-1 (Northern Virginia, United States)**. The categories of data we collect, the purposes we use them for, and the providers we share them with are unchanged except as separately described in this version. What changed is the country in which your data is **stored at rest**. Versions of this policy before 29 July 2026 described storage in India and remain accurate for the period they were in force.

Recontrol's **database is hosted on Amazon Web Services in the us-east-1 (Northern Virginia, United States)** region, via Nhost. The data you enter into Recontrol, and the data we import on your behalf, is **stored at rest in the United States**.

Our **application/API server is also hosted in the United States** (on Railway), so your data is stored and processed in the same country. Our other supporting and optional providers also operate in the United States (see Section 6.1): Vercel (the web application), Plaid (if you connect a bank), Anthropic (if you turn on AI features), RevenueCat (if you subscribe), Resend (transactional email), push-notification delivery (Expo, Apple, Google), PostHog (analytics, if enabled) and Grafana Labs (infrastructure monitoring). The one exception is **Zerodha**, which operates in India and receives data only if you connect a Zerodha account.

There is no secondary or offsite copy of your data in any other region.

### 8.1 If you are outside the United States

If you access the Service from Canada, India, or anywhere else outside the United States, **your personal data is stored and processed in the United States**. We want you to understand what this means:

* **Comparable protection.** We protect your data with the technical and organisational safeguards described in Section 7 and our [Information Security Policy](https://recontrol.money/docs/legal/security.md), and we remain accountable for that protection regardless of where the data is processed — consistent with the accountability principle under Canada's PIPEDA and with our obligations as a Data Fiduciary under India's DPDP Act.
* **Access by authorities.** While your data is in the United States, it is subject to United States law and may be accessible to United States courts, regulators, and law-enforcement or government authorities under lawful process. Data processed by a provider operating in another country may be subject to that country's laws.
* **Your consent.** By creating an account and using the Service, you consent to the transfer, storage, and processing of your personal data in the United States as described here.

For residents of **Quebec**, this constitutes a communication of personal information outside Quebec; we conduct the privacy impact / transfer assessment required by Law 25 in respect of this transfer. See Section 10 for region-specific rights.

### 8.2 If you are in India

We are established in India and remain the **Data Fiduciary** for your personal data wherever it is stored. The **Digital Personal Data Protection Act, 2023** permits the transfer of personal data outside India except to territories restricted by the Central Government; the **United States is not currently a restricted territory**. Our obligations to you under the DPDP Act — including security safeguards, breach notification, your rights under Section 10, and grievance redressal under Section 17 — are unaffected by where the data is stored.

### 8.3 International processing through Plaid

If you choose to connect a bank using Plaid (available for United States and Canadian institutions), your banking data is processed by **Plaid Inc. in the United States** before it is transmitted to, and stored by, Recontrol. By connecting a bank through Plaid, you consent to this processing, which is necessary to provide the bank-connection feature you have chosen to use. Plaid's handling of your data is governed by [Plaid's End User Privacy Policy](https://plaid.com/legal/#end-user-privacy-policy).

### 8.4 International processing through Anthropic

If you turn on AI features, the data described in Sections 4A.2 and 4A.7 is processed by **Anthropic PBC in the United States**. This happens only when you use those features. See Section 4A for what is and is not sent, and what Anthropic does with it.

***

## 9. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy, in line with our [Data Retention and Disposal Policy](https://recontrol.money/docs/legal/data.md) and the storage-limitation principle of the DPDP Act.

| Data type | Retention period |
| - | - |
| **Account and profile data** | Retained while your account is active. Deleted upon account deletion — see Section 11. |
| **Financial data** (accounts, transactions, goals) | Retained while your account is active. Deleted upon account deletion. |
| **Imported data** (bank accounts/transactions, investment holdings) | Retained while your account is active or until you delete the data. Disconnecting the source stops further imports and keeps what was already imported (Section 4.3). Deleted upon account deletion, as described in Section 11. |
| **Integration access tokens** | Retained while the integration is connected. Revoked and deleted on disconnect or account deletion. Zerodha tokens additionally expire daily. |
| **Authentication tokens** | Short-lived; expire automatically. Refresh tokens invalidated on logout or account deletion. |
| **Session data** | Retained for the duration of the active session. Cleared on logout. In the web application, the session cookie expires within a day of signing in. |
| **Country / region** | Retained while your account is active. Deleted on account deletion. |
| **Device push tokens** | Retained while registered. Removed when you disable notifications, sign out, or delete your account. |
| **AI Chat questions** | Retained while your account is active. Deleted on account deletion, or earlier on request. **Answers are never stored.** |
| **Feedback messages** | Retained while your account is active. Deleted on account deletion. |
| **Notifications** | Retained while your account is active. Deleted on account deletion. |
| **Subscription status and usage counters** | Retained while your account is active. Deleted on account deletion. Your monthly AI-usage counter resets on the 1st of each calendar month. Deleting your account does not cancel the subscription itself (Section 4B.3). |
| **Product-analytics and crash-report events** | Pseudonymous; held by PostHog under our analytics retention settings and not stored in your account record. Collection stops when you opt out. |
| **Server-side telemetry and operational logs** | Retained for up to 12 months for infrastructure monitoring, then deleted or anonymised. Not linked to individual user profiles. |
| **Support communications** | Retained for up to 24 months after last communication. |

***

## 10. Your rights

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the following rights:

* **Access:** Request a summary of the personal data we hold about you and how we process it
* **Correction:** Request correction of inaccurate or incomplete personal data, and completion or updating of your data
* **Erasure:** Request deletion of your personal data (see Section 11)
* **Data portability / export:** Request a copy of your data in a portable format, or export your transactions, accounts and balances yourself as CSV from the web application
* **Withdraw consent:** Where processing is based on consent, withdraw your consent at any time (including by disconnecting an integration, or by turning off **AI features** in Settings — Section 4A.1)
* **Opt out of analytics:** Turn off product analytics and crash reporting at any time from **Settings** in the mobile application or **Profile and settings** in the web application
* **Erase your AI Chat questions:** Ask us to delete the questions you have asked in AI Chat. We never store the answers
* **Grievance redressal:** Raise a complaint with our Grievance Officer (Section 17), which we will address within the timeframe required by law
* **Nominate:** Nominate another individual to exercise your rights in the event of your death or incapacity

To exercise any of these rights, you may:

* Use the account settings within the App
* Visit [Delete your data](https://recontrol.money/docs/data/delete.md)
* Email us at [support@recontrol.money](mailto:support@recontrol.money)

We will respond to your request within thirty (30) days.

The rights above are available to all users. The following sections add rights specific to your region. **Across every region, we do not sell your personal information, we do not "share" it for cross-context behavioural advertising, and we do not use it for third-party advertising.**

### 10.1 United States (California and other states)

These rights apply to residents of US states with comprehensive privacy laws (including California's CCPA/CPRA, and the laws of Colorado, Connecticut, Virginia, Texas, Oregon and other states). We extend the core rights below to all US users regardless of whether we currently meet a given law's applicability thresholds.

**Categories of personal information we collect** map to these statutory categories: *identifiers* (email, display name, phone number); *financial information* (account balances, transactions, goals; and, if you connect a bank, imported account and transaction data); *commercial information* (your subscription status and the fact of a purchase — never payment details, which we do not receive); *audio/electronic information* (the text of AI Chat questions you ask; we do not receive audio); *internet/network activity* (limited request metadata such as IP address, pseudonymous product-analytics events, and crash reports); and *sensitive personal information* (financial-account information and account log-in credentials). Sources, purposes, and recipients are described in Sections 3–6.

**We do not use AI Chat to profile you or to make any decision about you.** It answers a question you asked, using figures we computed, and produces no score, ranking, eligibility determination, or automated decision of any kind.

**Your rights:**

* **Know / access** the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
* **Delete** the personal information we hold about you (see Section 11).
* **Correct** inaccurate personal information.
* **Portability** — receive a copy in a portable format.
* **Opt out of "sale" or "sharing"** of personal information and of targeted advertising — **we do not do any of these**, so there is nothing to opt out of, but we honour browser opt-out preference signals such as the **Global Privacy Control (GPC)**.
* **Limit the use of sensitive personal information** — we use sensitive personal information only to provide the Service and for purposes that do not trigger the right to limit.
* **Non-discrimination** — we will not deny service, charge different prices, or provide a different quality of service because you exercised a right.

**California "Shine the Light"** (Civil Code § 1798.83): we do not disclose personal information to third parties for their own direct-marketing purposes.

To exercise these rights, email [support@recontrol.money](mailto:support@recontrol.money). You may use an **authorised agent**; we may need to verify your identity (and the agent's authority) before acting. We do not knowingly sell or share the personal information of consumers under 16.

### 10.2 Canada (PIPEDA and Quebec Law 25)

For users in Canada, we comply with the federal Personal Information Protection and Electronic Documents Act (**PIPEDA**) and, for Quebec residents, the Act respecting the protection of personal information in the private sector (**Law 25**).

* **Accountability.** Our designated **Privacy Officer** (Section 17) is accountable for our handling of your personal information and for responding to your requests and complaints.
* **Consent.** We collect, use, and disclose personal information with your knowledge and consent. Because financial information is sensitive, we rely on your **express consent** for it; you may **withdraw consent** at any time (including by disconnecting an integration or deleting your account), subject to legal or contractual limits.
* **Limited collection, use, and retention.** We collect only what we need for the purposes in Section 5 and retain it only as described in our [Data Retention and Disposal Policy](https://recontrol.money/docs/legal/data.md).
* **Cross-border storage.** Your personal information is stored and processed **in the United States** and may be accessible to authorities there under lawful process (see Section 8). We remain accountable for its protection.
* **Your rights:** access your personal information, request correction, withdraw consent, and — for Quebec residents — **data portability** and **de-indexing** of certain information.
* **No solely automated decisions.** We do not use your personal information to make decisions based exclusively on automated processing that produce legal or similarly significant effects about you.
* **Complaints.** You may complain to our Privacy Officer. If unsatisfied, you may contact the **Office of the Privacy Commissioner of Canada**, or, in Quebec, the **Commission d'accès à l'information**.
* **Electronic messages (CASL).** We send transactional and service messages necessary to operate the Service. We will send commercial electronic messages only with your consent and will always include a way to unsubscribe.

***

## 11. Account deletion and data erasure

### 11.1 How to delete your account

You have the right to delete your account and all associated personal data at any time:

* **In-app:** In the mobile application, **Settings → Delete My Recontrol Account**; in the web application, **Profile and settings → Delete my Recontrol account**
* **Instructions:** Visit [Delete your data](https://recontrol.money/docs/data/delete.md)
* **Email:** Send a deletion request to [support@recontrol.money](mailto:support@recontrol.money)

### 11.2 What gets deleted

> [!WARNING]
>
> **Deletion is permanent and irreversible. We do not maintain backups of user data. Once your deletion request is processed, your data cannot be recovered by you or by us under any circumstances.**

Upon processing your deletion request, we permanently delete:

* Your user account and profile information (email, display name, phone number)
* Every Space in which you are the only member, with all of its records, including data imported into it (see Section 11.6 for shared Spaces)
* All stored integration access tokens (which are also revoked with the provider before deletion)
* All AI Chat questions attributed to you (answers were never stored)
* Your feedback messages and your notifications
* Our record of your subscription, your usage counters, and any Space sponsorships
* Your currency preferences, country/region, and other settings
* Your Space memberships and role assignments
* Your registered device push tokens
* Session tokens and authentication data

We send a confirmation email to your account email address once deletion completes. See our [Data Retention and Disposal Policy](https://recontrol.money/docs/legal/data.md) for the technical detail.

Pending Space invitations are addressed to an email address or phone number rather than to your account, so an invitation that someone else sent to you is not part of your account record; you can decline it, and it expires on its own terms.

### 11.2A Your subscription is not deleted with your account

> [!WARNING]
>
> **Deleting your Recontrol account does not cancel your subscription.** Your subscription is held by your Apple or Google account, not by us, so we have no ability to end it. Cancel it in your app store's subscription settings **before** deleting your account, or you will continue to be charged. The App displays this warning during deletion and links to your store's settings.

### 11.3 Processing timeframe

In-app deletions are processed immediately. Email requests are processed within **thirty (30) days** of receipt.

### 11.4 Data that may be retained

After account deletion, we may retain minimal data only where required by applicable law (for example, records required by a court order or law enforcement process). We will not retain any data beyond what is legally mandated.

### 11.5 Written confirmation

You may request written confirmation that your data has been deleted by emailing [support@recontrol.money](mailto:support@recontrol.money).

### 11.6 Effect on shared Spaces

Your erasure is never blocked by a shared Space, and you are not required to hand one over first.

* **Spaces where you are the only member** are deleted with your account, together with all records within them.
* **Spaces with other members are not deleted.** Your membership and role assignment are removed; the Space's own accounts, transactions and history remain, because they are the Space's records and other members' personal data, not solely yours. Transactions you recorded there are shown as recorded by a "Former member". If you were the Space's only administrator, the longest-standing remaining member is automatically granted an administrator role, so the Space is never left unmanageable.
* **Spaces you sponsored** stop syncing their bank connections once your subscription record is removed. Nothing in them is deleted, and any other member may sponsor the Space to resume syncing.

***

## 12. Children's privacy

The Service is not intended for users under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

Because the Service is restricted to adults, we do not knowingly collect personal information from children under 13 (in compliance with the US **Children's Online Privacy Protection Act (COPPA)**) or from minors protected under US state laws or Canadian law. We do not sell or share the personal information of minors.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [support@recontrol.money](mailto:support@recontrol.money).

***

## 13. Third-party services

| Service | Provider | Data processed | Purpose | Privacy policy |
| - | - | - | - | - |
| **Nhost** | Nhost | Email, display name, phone number, sign-in identities, session data, auth tokens, financial data, one-time sign-in codes, and a hashed password for an account that has one | Authentication, user management, database hosting | [nhost.io/legal/privacy-policy](https://nhost.io/legal/privacy-policy) |
| **Amazon Web Services (AWS)** | Amazon (via Nhost) | All data stored in the database (encrypted at rest) | Cloud infrastructure and data storage in Northern Virginia, United States | [aws.amazon.com/privacy](https://aws.amazon.com/privacy/) |
| **Railway** | Railway Corp. | Data in transit through our API while it is processed (not stored) | Hosting our application/API server (United States) | [railway.com/legal/privacy](https://railway.com/legal/privacy) |
| **Vercel** | Vercel Inc. | Requests to the web application, including IP addresses and request logs, and data in transit through its server (only if you use the web application) | Hosting the web application (United States) | [vercel.com/legal/privacy-policy](https://vercel.com/legal/privacy-policy) |
| **Plaid Inc.** | Plaid | Bank account and transaction data (only if you connect a bank) | Bank-account aggregation (US/Canada) | [plaid.com/legal](https://plaid.com/legal/) |
| **Zerodha** (Kite Connect) | Zerodha Broking Ltd. | Investment-holdings data (only if you connect Zerodha) | Investment-holdings aggregation (India) | [zerodha.com/privacy](https://zerodha.com/privacy/) |
| **Anthropic** | Anthropic PBC | The data described in Sections 4A.2 and 4A.7 (only after you turn on AI features) | Generating AI Chat answers and sorting imported transactions (United States) | [anthropic.com/legal/privacy](https://www.anthropic.com/legal/privacy) |
| **RevenueCat** | RevenueCat, Inc. | An opaque customer identifier, device type and OS, and the store purchase receipt or token (only if you subscribe) | Subscription management (United States) | [revenuecat.com/privacy](https://www.revenuecat.com/privacy) |
| **Apple, Google** (payments) | Apple Inc.; Google LLC | Your purchase and payment details — held by them, never by us | Processing in-app purchases | [apple.com/legal/privacy](https://www.apple.com/legal/privacy/), [policies.google.com/privacy](https://policies.google.com/privacy) |
| **Apple, Google** (speech) | Apple Inc.; Google LLC | Spoken audio and vocabulary hints while you dictate an AI Chat question in the mobile application | Speech-to-text (on-device or provider-side, per platform) | [apple.com/legal/privacy](https://www.apple.com/legal/privacy/), [policies.google.com/privacy](https://policies.google.com/privacy) |
| **Resend** | Resend, Inc. | Email addresses and transactional email content | Sending transactional email (sign-in codes, invites, deletion confirmation) | [resend.com/legal/privacy-policy](https://resend.com/legal/privacy-policy) |
| **Expo** (push) | Expo (650 Industries, Inc.) | Device push token and notification content (once your phone allows notifications) | Routing push notifications to Apple/Google | [expo.dev/privacy](https://expo.dev/privacy) |
| **PostHog** | PostHog, Inc. | Pseudonymous usage events, stripped crash reports, an app-generated user identifier, and device/app metadata — no financial data (only if analytics is on) | Product analytics and error tracking (US Cloud) | [posthog.com/privacy](https://posthog.com/privacy) |
| **Grafana Labs** | Grafana Labs | Server-side traces, metrics and logs — opaque identifiers, timings and error codes; no names, amounts or free text | Infrastructure monitoring (Grafana Cloud, United States) | [grafana.com/legal/privacy-policy](https://grafana.com/legal/privacy-policy/) |
| **exchangerate-api.com** | ExchangeRate-API | Currency codes only — no personal or financial data | Foreign-exchange rates | [exchangerate-api.com/terms](https://www.exchangerate-api.com/terms) |
| **Apple, Google** (sign-in) | Apple Inc.; Google LLC | Your name and email, returned to us when you choose "Sign in with Apple" or "Sign in with Google" | Authentication (only if you use that sign-in method) | [apple.com/legal/privacy](https://www.apple.com/legal/privacy/), [policies.google.com/privacy](https://policies.google.com/privacy) |

We do not integrate third-party advertising SDKs, cross-app tracking, or social-media tracking pixels. The only analytics tool we use is **PostHog**, which collects pseudonymous usage events and stripped crash reports (never your financial data) and which you can turn off in **Settings** (mobile) or **Profile and settings** (web).

***

## 14. Cookies and local storage

**The mobile application** does not use cookies. It uses:

* **Expo Secure Store:** To securely store authentication credentials using platform-native secure storage (iOS Keychain / Android Keystore)
* **AsyncStorage:** To persist session state and cached data locally on your device, including the way you last signed in on it (Apple, Google or email), so the sign-in screen can name it
* **PostHog local storage:** If analytics is enabled, the PostHog SDK stores a pseudonymous identifier and a small event queue locally on your device
* **RevenueCat local cache:** Your subscription status, so the App knows what you are entitled to without a network round trip
* **AI Chat session memory:** Your current chat transcript is held in memory only, for the duration of the session, and is discarded when the App closes. It is never written to our servers

**The web application** uses:

* **Strictly necessary cookies for signing in:**
  * `__Host-rctrl-session` keeps you signed in. It holds your sign-in, sealed with encryption, is marked `Secure`, `HttpOnly` and `SameSite=Strict`, is sent only to app.recontrol.money, cannot be read by page scripts, and expires within a day of signing in. It is cleared when you sign out
  * `__Secure-rctrl-signed-in` says only that this browser is signed in (its value is `1`), so recontrol.money can offer to open the app instead of signing in. It names no one, opens nothing, and is set and cleared with the session cookie
  * `__Host-rctrl-sign-in` names the way you chose to sign in (Apple, Google or email) while you sign in, so we can count which ways in work. It is `HttpOnly`, holds nothing else, and expires after 15 minutes or when signing in finishes
* **Preference cookies:** `theme` (your Appearance choice), `money` (how amounts are coloured) and `sidebar_state` (whether the sidebar is open), set only when you change those preferences
* **Browser storage (localStorage and sessionStorage):** Preferences such as Hide amounts, the Space you last opened, your analytics choice, recent search-box entries and the transaction views you save; the way you last signed in on this browser (Apple, Google or email), so the sign-in page can name it; the page to return to after signing in; and, for up to 30 minutes, the state of a bank or broker connection you are in the middle of
* **PostHog storage:** Only while usage analytics are on. In the European Economic Area and the United Kingdom they are off, and nothing is stored for them, until you turn them on in **Profile and settings**; elsewhere they are on, and you can turn them off there
* **AI Chat session memory and your access token:** Held in memory only, never written to browser storage

None of these are used for advertising or cross-app tracking. We do not use third-party advertising or tracking cookies.

***

## 15. Governing law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the **Digital Personal Data Protection Act, 2023**, the Digital Personal Data Protection Rules, 2025, and the **Information Technology Act, 2000** (including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011). Any disputes arising under this Privacy Policy shall be subject to the jurisdiction of the courts of Ghaziabad, Uttar Pradesh, India.

If you reside outside India, nothing in this section deprives you of the protection of the **mandatory data-protection and consumer-protection laws of your country, state, or province of residence** (such as the CCPA/CPRA and other US state laws, PIPEDA, and Quebec's Law 25). You may also have the right to lodge a complaint with your local data-protection authority.

***

## 16. Changes to this Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will:

* Update the "Last Updated" date at the top of this policy
* Provide notice within the App
* Send an email notification for significant changes

Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the changes.

***

## 17. Contact us and Grievance Officer

If you have questions, concerns, or requests regarding this Privacy Policy, or wish to exercise your rights or raise a grievance:

* **Grievance Officer:** Mrinal Wahal
* **Email:** [support@recontrol.money](mailto:support@recontrol.money)
* **Mailing Address:** 2005, Yucca, Paramount Symphony, Crossing Republik, Ghaziabad, Uttar Pradesh, India 201016
* **Data deletion requests:** [Delete your data](https://recontrol.money/docs/data/delete.md)

We will acknowledge and respond to all privacy-related inquiries and grievances within the timeframes required by the DPDP Act and its Rules, and in any event within **thirty (30) days**.

***

**By using Recontrol, you acknowledge that you have read and understood this Privacy Policy.**


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.