How FinLens protects your data

Sign-in

• A mobile number that was invited, a 6-digit PIN, and then a one-time code sent to your verified e-mail address or a one-tap confirmation on WhatsApp. The PIN and the codes are stored only as hashes; codes expire after 5 minutes.
• Five wrong PINs or three wrong codes block sign-in for that account until the administrator lifts the block.
• A sign-in lasts 5 days and is not extended by use. The session cookie is HttpOnly, Secure and SameSite=Strict, so other sites cannot use it.
• Seeing a stored document or an identity number asks for your PIN again; exporting your data or erasing your account needs a new one-time code.

Data on the way

• Every connection is encrypted, and browsers are told to use nothing else.
• On top of that, the portal encrypts each request and reply itself with AES-256, under a key your browser and the server agree when you sign in. A copied session cookie is useless without the browser that signed in, and the network panel, proxies and saved traffic files show only ciphertext.

Data at rest

• Everything we store (the database, the files, the cache) is encrypted with AES-256; every file is kept encrypted, never as a plain file.
• Uploaded files, the text read from them, identity numbers and the passwords of your locked statements are encrypted again with AES-256 under a data key of your own account, which is itself wrapped by a master key kept as a secret of the service.
• Accounts and cards are saved with only the last 4 digits of their numbers, never the full number; a statement you upload is kept as you sent it, encrypted. The body of an e-mail is never stored.
• The database keeps its own 30-day point-in-time history, encrypted like the database.

The Personal Repository

• Documents and notes you keep there are locked in your browser before they are sent: a key made from your passphrase unlocks a repository key, and every item has its own AES-256 key.
• The server holds only the locked copies. It can see that an item exists, its size and when it was added, not what it is. If you forget the passphrase and lose your recovery code, nobody can open the files, including us.

What the page loads

• A strict content security policy: the portal runs only its own scripts, and these public pages run none. Nothing is loaded from another site: no advertising, no analytics, no trackers, no fonts from elsewhere.
• No advertising or profiling cookies: the cookies keep you signed in, keep your place while you ask for an invitation, or, on the public pages only, let the Trusted Origin badge remember that you have seen it.

AI, within limits

• Mail text is never sent to an AI model, with one exception: when no rule opens a locked statement attached to a mail, the mail's one sentence about its password, masked, may be read to find the rule. A file the fixed rules cannot read is read once by an AI model with your name and identifying numbers replaced by placeholders, with the provider asked not to store the answer; a photo or a scan cannot be masked and is sent as it is.
• Ask FinLens works out every figure itself; the model that reads your question never receives your mobile number, e-mail, account or card numbers, PAN or PRAN.

India only

• FinLens is made in India, for India, and access to it is limited to India: a request from outside the country is refused before it reaches the sign-in, the app or your data. Three things answer from abroad: the address WhatsApp delivers your messages to, the pictures used in WhatsApp messages, and these public pages, for search engines' verified crawlers only. Access can also be limited to approved networks.

Records and your control

• An audit log records sign-ins, reveals, changes, consents, exports and erasures, and is kept for 2 years.
• Request limits on every sign-in step and on uploads.
• You can download your data, delete any file, withdraw a permission or erase your account at any time; withdrawing the storing of identity or account numbers deletes the stored numbers.

Who touches your data

FinLens is built and run with the best and latest technology, and everything it stores is encrypted with AES-256. An AI model reads a file the fixed rules cannot read, once, with names and numbers replaced by placeholders. WhatsApp delivers your notices, and Google provides Gmail access only if you connect it. The Privacy Policy names each party that processes your data; nobody else receives it, and other members cannot see it.

Access to FinLens is limited to India.

Keeping and deleting

Deleting a file removes what it imported; erasing your account removes your records, files, stored numbers and sessions, and keeps one audit entry of counts. The policy's retention and your rights sections have the detail.