Privacy Policy

Last Updated: September 15, 2026

Introduction

Keeevo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.

1. Information We Collect

1.1 Personal Information You Provide

  • Account Information: Name, email address, phone number, date of birth, and address
  • Financial Information: Bank account details, investment holdings, insurance policies, liabilities, and net worth data
  • Authentication Data: Passwords, OTP, 2FA settings, and trusted device information
  • Beneficiary Information: Details of your nominated beneficiaries and their contact information

1.2 Email Integration (Gmail OAuth)

We collect and process emails from your Gmail account only when you explicitly authorize us through Gmail OAuth. Specifically:

  • Zerodha Demat Statements: We search for and extract Zerodha monthly demat/holding statements to automatically import your securities portfolio
  • Financial Emails: We scan for emails from financial institutions (banks, brokers, insurance companies) to extract account information, holdings, and valuations
  • Email Metadata: We store sender, subject, and date information for audit and recovery purposes
  • OAuth Tokens: Your Gmail access token and refresh token are encrypted and stored securely to enable ongoing email access
Important: We do NOT store your Gmail password. We use OAuth 2.0, which means Google verifies your identity, and we only receive permission to read your emails. You can revoke our access at any time through your Google Account security settings.

1.3 Automatically Collected Information

  • Device Information: IP address, browser type, device type, and operating system
  • Usage Data: Pages visited, features used, time spent, and interaction patterns
  • Cookies & Tracking: Session cookies for authentication and device fingerprinting for security

2. How We Use Your Information

  • Providing and improving our services
  • Processing financial data and generating wealth reports
  • Authenticating your identity and securing your account
  • Importing financial documents and emails (with your permission)
  • Sending transactional emails (OTP, password reset, notifications)
  • Complying with legal obligations
  • Preventing fraud and abuse
  • Analyzing usage patterns to improve user experience

3. Data Security & Encryption

  • Encryption at Rest: All financial data, passwords, and tokens are encrypted using Fernet (symmetric encryption)
  • Encryption in Transit: All communications use HTTPS/TLS encryption
  • Access Controls: Role-based access control limits who can view your data
  • Audit Logging: All data access is logged and can be audited by you
  • OAuth Security: Gmail tokens are refreshed regularly and encrypted before storage

4. Data Retention

  • Account Data: Retained as long as your account is active. You can request deletion anytime.
  • Email Metadata: Gmail email metadata is retained for up to 2 years to support recovery and auditing
  • Extracted Financial Data: Financial data extracted from emails/documents is retained indefinitely (you own this data)
  • Authentication Logs: Retained for 6 months for security auditing
  • Transactional Emails: Email sending logs retained for 30 days

5. Gmail & Email Integration Details

Our Gmail integration is governed by Google's OAuth policy. When you connect your Gmail:

  • You grant us permission to read your Gmail only (read-only scope)
  • We search for specific emails from Zerodha and financial institutions
  • We extract data from attachments (PDFs) using Azure Document Intelligence (OCR)
  • Extracted data is processed by Azure OpenAI to classify and structure financial information
  • Your email account credentials are never shared with us; Google handles authentication
  • You can disconnect Gmail anytime, and we immediately delete stored OAuth tokens

6. Third-Party Services

  • Google (Gmail OAuth, Google Cloud): Authentication and email access
  • Azure (OpenAI, Document Intelligence): Email OCR and financial data extraction
  • Resend (Email Service): Transactional email delivery (OTP, notifications)
  • Railway (Hosting): Application hosting and database
  • AlphaVantage (Metal Prices API): Real-time precious metal prices

7. Your Rights & Choices

  • Access: You can request all data we hold about you
  • Correction: You can update or correct your personal information
  • Deletion: You can request account deletion (with data purge options)
  • Portability: You can export your financial data in standard formats
  • Disconnect Services: You can disconnect Gmail, remove beneficiaries, or delete specific assets
  • Opt-Out: You can disable non-essential communications in settings

8. Children's Privacy

Keeevo is not intended for children under 18. We do not knowingly collect information from children. If we discover we have collected data from a child, we will promptly delete it.

9. International Data Transfers

Your data may be processed and stored in multiple countries (including US, India, EU). By using Keeevo, you consent to such transfers under applicable data protection laws.

10. Policy Changes

We may update this Privacy Policy periodically. Significant changes will be communicated via email or in-app notification. Your continued use of the service constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

  • Email: privacy@keeevo.com
  • Support: support@keeevo.com
  • Address: Keeevo, India