Privacy

Only what the product needs to work. There is no advertising profile here.

• Your account — email address, display name, and an avatar if you upload one.
• Your UPI ID, if you choose to add one. It is optional, it is only visible to people you share a group with, and it is used for one thing: building a payment link your friend's own UPI app opens.
• Your money records — expenses, splits, settlements, collections, budgets, groups you belong to, comments you write, and any receipts or settlement proofs you upload.
• Your preferences — currency, date and number format, timezone, first day of week, theme, language and quiet hours.
• Push subscriptions, if you turn on notifications, so your browser can be sent one.
• Activity logs within a group, so members can see what changed and who changed it.

We never ask for and never store your UPI PIN, any OTP, card numbers, or bank account credentials. No part of Paisa has a field for them. If anything claiming to be Paisa ever asks you for one, it is not us.

We are not a payment processor. Money moves directly between your bank and the other person's through UPI. We never hold funds, never take a cut, and are not told whether a payment succeeded — which is why someone still has to confirm a settlement by hand.

• You, always.
• People in your groups — a shared ledger only works if the people sharing it can read it. They see the expenses, splits, balances and comments in that group, plus your display name, avatar and (if set) your UPI ID.
• Anyone holding a share link you created. Share links are unguessable but public: treat one like a password. You can set an expiry, protect it with a password, and revoke it at any time from the group's settings.

Your personal, non-group expenses and your own preferences are visible to you alone. Database-level access rules enforce this on every read and write, not just in the interface.

We do not sell your data and we do not share it for advertising. We rely on a small number of processors to run the service:

• Supabase — database, authentication and file storage.
• Vercel — hosting, plus privacy-friendly aggregate analytics and performance metrics. These measure page traffic and speed, not individuals.
• Resend — transactional email only (invitations, reminders, password resets). No marketing mail.

Deleting an expense or a group is a soft delete: the record is hidden and excluded from every balance, but retained briefly so an accidental deletion can be undone and so the other people in a shared ledger are not left with a hole in their history.

You can delete your account at any time. Ask us and we will remove your profile, preferences, personal expenses and uploaded files. Entries you created inside a shared group are handled carefully: removing your half of a split retroactively would change what everyone else is owed, so those are anonymised rather than erased unless the whole group is deleted.

• Leave the UPI ID field blank, and no payment details of yours exist in the system at all.
• Turn push and email notifications off individually in settings.
• Set quiet hours so reminders never reach your phone at night.
• Revoke any share link you have created, at any time.
• Export everything you can see as CSV, Excel or PDF.

Questions, corrections, or a deletion request: get in touch. Paisa is built by Scriptix Labs.