Batva Back to home
English · हिंदी

Privacy Policy

Last updated: 08 July 2026

This Privacy Policy explains how Vasmaan Fintech Private Limited ("we", "us") collects, uses and protects your personal data when you use Batva (the "Service"). We process personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable law.

1. Data we collect

  • Account data: your name, email address, mobile number, and a securely hashed password. Your mobile number is required to secure your account, enable account recovery, and verify support requests, and it is stored encrypted.
  • Portfolio data you enter: details of your investments — fund/stock names, units, amounts, transactions, valuations, and similar information you choose to record.
  • Subscription data: your plan, trial/billing status and payment confirmations. Card and bank details are handled by our payment processor and are never stored by us.
  • Technical data: basic logs and a session cookie required to keep you signed in.

2. How we use your data

We use your data only to: provide and operate the Service; display your portfolios and computed figures; manage your account, trial and subscription; send essential service emails (verification, password reset, billing); provide support; ensure security; and comply with law. We do not sell your data, and we do not use your portfolio holdings for advertising.

3. Data sharing and processors

We share data only with trusted service providers strictly to run the Service:

  • Razorpay — to process subscription payments (they receive payment details directly; we do not).
  • Resend — to deliver transactional emails (verification, password reset, billing).
  • Cloud hosting and database providers — to securely host the application and store your data.

Messages you send us. If you write to us through the contact form or by email, we keep your name, email address and the message so we can answer you and keep a record of the conversation. We use it for nothing else — no marketing, no profiling, and it is never sold or shared. We delete it once the matter is closed and we no longer need it for our records.

Visitor statistics on our public pages. We count visits to our public pages (not the app) using Umami, a privacy-focused analytics service. It sets no cookies, stores nothing on your device, and does not create a profile or an identifier that can be traced back to you. We see totals — pages viewed, referring site, country, device type — never individuals. This runs on the public pages only; it is not present inside your account, and it never has access to your holdings.

Measuring our ads — only if you opt in. If we advertise, we like to know which of our posts actually bring people to Batva. We do this without a cookie banner and without any advertising cookie on our public pages. Instead, when you create your account, you can tick an optional box — “Help us build Batva”. It is unticked by default, and whether you tick it or not makes no difference to anything in Batva. Your portfolio data is never shared with Meta or any advertiser.

Measurement from our own server. So that this works even when a browser blocks it, we send Meta two events from our server — when you start a free trial, and when a subscription payment succeeds — but only if you opted in with the box above. Each one carries your email address, one-way scrambled (hashed), never in readable form — plus the fact that the event happened. It does not carry your name, and nothing at all about your portfolio. You can turn this off at any time in your Account settings — withdrawing is as easy as giving — and if you never ticked the box, nothing is ever sent.

Product video on our home page. Our home page shows a still image of the product, hosted by us. Nothing is requested from YouTube unless you choose to play the video. If you press play, the video is served by YouTube (Google) from its privacy-enhanced domain (youtube-nocookie.com), and your interaction with that player is governed by Google's privacy policy. You do not need to play it to use any part of Batva.

Market prices and NAVs are fetched from third-party market-data sources — including the BSE via our licensed market-data provider for equity/ETF prices and AMFI for mutual-fund NAVs. These feeds deliver prices to us; we do not send your personal data or holdings to them. We may disclose data if required by law or to protect our rights.

4. Storage and security

Your data is stored on secured cloud infrastructure. Passwords are stored only as bcrypt hashes (never in plain text), connections use HTTPS, and access is restricted. Each account's data is logically isolated so other users cannot access it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

Files you import. When you import a statement — a CAS, a broker tradebook or a spreadsheet — the file is read to create your holdings and then discarded. We do not store the file, and a password you supply to open an encrypted PDF is used only to open it and is never saved. What remains afterwards is the holdings and transactions themselves, which you can export or delete at any time from Account & data.

5. Data retention

We retain your data for as long as your account is active. If your account remains inactive for 24 consecutive months, we may erase your personal data after first giving you notice by email. If you delete your account, we delete your portfolio data, subject to any limited retention required by law or for legitimate business records (e.g. tax/payment records).

What survives a deletion. We keep a dated record that an account was deleted — an internal reference number, how many portfolios it held and how old it was. It does not include your email address or any other detail that identifies you, and the reference points to a record that no longer exists. If you choose to tell us why you left, your comment is kept with that record and sent to our support inbox so we can learn from it; that box is entirely optional and leaving it empty changes nothing about your deletion.

6. Your rights (DPDP Act)

You have the right to access, correct and update your personal data, to withdraw consent, and to request deletion of your account and data. Because all data we process is essential to providing the Service, withdrawing consent means closing your account — deleting your account withdraws your consent and erases your data.

How to exercise your rights: open Account & data in the app to view and edit your name and mobile number (correction), download everything we hold about you including who it is shared with (access), and delete your account (erasure & withdrawal of consent). You can also email our Grievance Officer at support@batva.in — your registered email or mobile number identifies you. We will respond to any grievance as soon as practicable, and in any event within 90 days.

7. Cookies

We use a single, essential session cookie to keep you securely signed in. We do not use third-party advertising or tracking cookies.

8. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from minors.

9. Changes

We may update this Policy from time to time; material changes will be notified via the Service or email.

10. Contact & grievances

For any privacy question or to exercise your rights, contact our Grievance Officer:
Aaditya Gupta, Grievance Officer, Vasmaan Fintech Private Limited — support@batva.in
CIN: U66190HR2026PTC148210 · Registered office: 606, Jasminium Apartment, Block C, Uday Nagar, Sector 45, Gurgaon – 122003, Haryana, India

Please raise your concern with our Grievance Officer first. If you are not satisfied with how we handle it, you have the right to complain to the Data Protection Board of India, which operates as a digital office; you may make a complaint through the Board's official channel once notified by the Government.

© 2026 Vasmaan Fintech Private Limited TermsPrivacyRefund