Privacy policy

Your account. Your email address, a display name, and — if you sign in with a password — a one-way hash of that password. We never store the password itself and cannot recover it. If you sign in with Google instead, we store the account identifier Google gives us, not your Google password.

What you put in your portfolio. The transactions you enter or import, the holdings derived from them, your watchlists, and the alerts you configure. This is financial information about you, and it is the main thing the service exists to hold.

Documents you upload. If you import a contract note or a broker statement, the original file is stored so the import can be re-checked or undone. Those documents typically contain your name and your broker client code.

Your devices, if you turn on push. A notification token issued by Google for each device you sign in on, so alerts can reach it. Removing the device, or signing out, removes the token.

A record of administrative actions. Changes made by an administrator to an account — including creating or deleting one — are written to an audit log, with who did it and when.

No advertising identifiers, no analytics or tracking scripts, and no third-party trackers of any kind. We do not sell or rent anything about you, and we do not share your portfolio with anyone.

We never hold your broker credentials. VistaFund does not connect to your broker on your behalf and cannot place trades. Positions arrive because you enter or upload them.

Your IP address is used momentarily to rate-limit requests — so one client cannot flood the service — and is not written to the database.

To run the service you asked for: to sign you in, to compute your valuations and returns, to show you research, and to send the alerts you set up. Your email is also used for account mail — verification, password changes, and alerts you asked to receive by email. We do not send marketing.

Only the providers needed to operate the service, and only the minimum each one needs:

• Resend delivers our email, so it processes your address and the contents of messages we send you.
• Google Firebase Cloud Messaging delivers push notifications, so it processes your device token and the text of the notification.
• Google is involved only if you choose to sign in with a Google account.
• Cloudflare carries traffic between your device and our server.

Market data providers receive no information about you. Prices and fundamentals are fetched for the whole market and served from our own copy, so looking at an instrument does not tell anyone outside VistaFund that you looked.

During the beta, data is stored on a server we operate in India, with off-site encrypted backups. Traffic between your device and the service is encrypted in transit. We intend to move to Google Cloud in the Mumbai region; this page will be updated before that happens.

We keep your data for as long as your account exists. Deleting your account deletes your portfolios, transactions, holdings, watchlists, alerts, uploaded documents and devices. Backups are retained on a rolling schedule and age out; a deletion reaches them as they expire rather than immediately.

You can see and correct everything in your portfolio from within the app. You can ask us for a copy of your data, or to delete your account entirely, by writing to the address below — there is no self-service delete during the beta, so a request is handled by hand, and we will confirm when it is done.

Push notifications can be turned off on the device, and alerts can be disabled or deleted in the app without affecting anything else.

Passwords are hashed with argon2id. Sessions use short-lived access tokens with longer-lived refresh tokens that rotate on every use; presenting a refresh token twice revokes the whole chain, so a stolen token has a short and self-limiting life. Every query for your data is keyed to your account at a single enforced point in the code, so one user’s data cannot be returned to another.

No system is perfectly secure. If something goes wrong in a way that affects you, we will tell you.

VistaFund is not intended for anyone under 18, and we do not knowingly hold their data.

Signals, scores, model portfolios and IPO verdicts published by VistaFund are quantitative research output — educational analytics, not recommendations to buy or sell any security. Nothing here accounts for your circumstances or risk tolerance.

If this policy changes in a way that affects what we collect or who sees it, we will update the date at the top and tell account holders by email.

Questions, a copy of your data, or a deletion request: privacy@vistafund.in.