Your personal finance workspace

Back to home

Privacy Policy

A product of Swaram Technologies · budgzy.com

Effective date: 8 June 2026

Last updated: 8 June 2026

This Privacy Policy explains how Swaram Technologies (“we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you visit budgzy.com, create an account, or use the budgzy web application (the “Service”).

We process personal data in accordance with applicable Indian law, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDPA”), as and when it becomes fully effective and applicable to us.

By using the Service, you acknowledge that you have read this Privacy Policy.

1. Who we are

Swaram Technologies owns and operates budgzy (budgzy.com). Swaram Technologies website: swaramtech.com.

Registered address: India.

For privacy-related questions, use our contact form on budgzy.com.

2. Scope

This policy applies to:

  • Visitors to our public website and marketing pages;
  • Registered users of the budgzy workspace;
  • Users who sign in with Google or connect a Gmail inbox for bank-alert import;
  • Invitees who join split groups through Budgzy invite links.

It does not apply to third-party websites, banks, email providers, or app stores that we do not control. Your use of Google services is also subject to Google’s own policies.

3. Personal data we collect

Depending on how you use the Service, we may collect the following categories of data:

3.1 Account and identity data

  • Name, email address, and optional phone number;
  • Hashed password (if you register with email and password);
  • Profile photo (if you upload one);
  • Google account identifier and basic profile information (name, email) if you choose “Continue with Google”;
  • Email verification and account status information.

3.2 Financial and expense data you provide

  • Daily expenses, categories, amounts, payment methods, and remarks;
  • Recurring payments, due dates, banks, and payment history;
  • Budget limits, master lists (categories, banks, payment methods), and cashflow records;
  • Split-group bills, settlements, receipts, and member display names within groups you join.

Much of this information may constitute personal data and, in context, sensitive personal data or information under Indian law because it relates to your finances.

3.3 Gmail and bank-alert import data

If you connect Gmail for bank-alert import, we collect and process:

  • The Gmail address you connect (which may differ from your Budgzy login email);
  • OAuth access and refresh tokens (stored in encrypted form);
  • Email metadata and content needed to identify and parse Indian bank debit-alert messages, including sender, subject, date, and relevant message body fields;
  • Parsed transaction details (date, amount, merchant, bank) and import review status;
  • Merchant category rules you create from imported transactions.

We request Gmail read-only access. We do not send email on your behalf, delete your emails, modify mailbox labels, or access Gmail except as needed to provide import functionality you initiate.

3.4 Support and communications

  • Support ticket subject, description, comments, and attachments you submit;
  • Transactional emails we send (verification, password reset, payment reminders, split invites);
  • In-app notification records.

3.5 Technical and usage data

  • Session identifiers, authentication cookies, and CSRF tokens;
  • IP address, browser type, device information, and timestamps in server and application logs;
  • Local storage preferences you set on the public site (for example, dismissing the beta notice).

We do not use third-party advertising trackers on the Service.

4. How we use personal data

We use personal data only for legitimate purposes connected to the Service, including to:

  • Create and manage your account and authenticate you;
  • Provide expense tracking, recurring payment management, budgeting, cashflow reporting, and split-group features;
  • Import and review bank debit alerts from Gmail when you connect an inbox and run sync;
  • Send service-related emails and in-app reminders you expect (such as payment due alerts);
  • Respond to support requests and improve reliability and security;
  • Comply with law, enforce our Terms, and protect users and the Service from fraud or abuse.

5. Legal bases and consent

We process personal data on one or more of the following grounds:

  • Consent: when you register, connect Google or Gmail, upload content, or enable optional features;
  • Performance of a contract: to provide the Service you sign up for;
  • Legitimate uses permitted under applicable law, including security, fraud prevention, and improving core functionality, where not overridden by your rights.

Where consent is required, you may withdraw it by disconnecting Gmail, deleting your account, or contacting us. Withdrawal does not affect processing already lawfully performed and may limit features that require the withdrawn data.

6. Google sign-in and Gmail — limited use disclosure

budgzy’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

  • Google sign-in is used only to authenticate you and populate basic profile fields.
  • Gmail access is used only to read bank-alert emails and convert them into expense import records for your review or auto-import according to your settings.
  • We do not sell Google user data, use it for advertising, or transfer it to third parties except as described in this policy (for example, infrastructure providers bound by confidentiality).
  • Human access to Gmail content is limited to security, support, and compliance needs on a need-to-know basis.

7. Encryption and security

We apply reasonable technical and organizational safeguards, including encryption of sensitive financial fields and Gmail OAuth tokens at rest using application-level encryption, access controls, authenticated sessions, and scoped user data isolation in the workspace.

No method of transmission or storage is completely secure. You are responsible for keeping your password confidential and for activity under your account.

8. How we share personal data

We do not sell or rent your personal data. We may share data only in these circumstances:

  • Service providers: hosting (Hostinger), email delivery, and infrastructure necessary to operate the Service, under contractual confidentiality obligations;
  • Split-group members: information you choose to share inside a split group (such as bill names, amounts, and settlement details) is visible to active members of that group;
  • Legal requirements: when required by law, court order, or governmental authority, or to protect rights, safety, and integrity of users and the Service;
  • Business transfers: in connection with a merger, acquisition, or asset sale, subject to continued protection consistent with this policy.

9. International storage and transfers

Our primary hosting is intended for production deployment in India. If data is processed or stored outside India through subprocessors, we take steps reasonably required under applicable law for such transfers, including contractual safeguards where appropriate.

10. Data retention

  • Active accounts: we retain data while your account is active and as needed to provide the Service.
  • Gmail connection: OAuth tokens and import data remain until you disconnect Gmail or delete your account. On disconnect, you may choose to keep or delete imported data.
  • Deleted accounts: when you delete your account, we delete or anonymize personal workspace data, revoke Gmail access where connected, and retain only minimal records required by law or legitimate operational needs (for example, anonymized audit entries).
  • Split groups: if you delete your account, your name in shared groups may appear as “Deleted User” while group financial records remain for other members.
  • Logs: server logs are retained for a limited period for security and troubleshooting.

11. Your rights

Subject to applicable law (including the DPDPA), you may have the right to:

  • Access personal data we hold about you;
  • Correct inaccurate or incomplete data through Profile and Master Data settings or by contacting us;
  • Withdraw consent where processing is consent-based;
  • Erase personal data by deleting your account or disconnecting integrations;
  • Nominate another person to exercise rights on your behalf in permitted circumstances;
  • Grieve to us if you believe your data has been processed unlawfully.

To exercise these rights, use in-app settings where available or submit a request through our contact form. We may need to verify your identity before responding.

12. Grievance redressal

If you have concerns about how we process your personal data, submit a grievance through our contact form (mark the subject as “Privacy grievance”) . We will endeavour to respond within timelines prescribed under applicable law.

If your concern is not resolved satisfactorily, you may have the right to lodge a complaint with the Data Protection Board of India once operational under the DPDPA.

13. Children’s privacy

The Service is not directed to children under 18 years of age, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

14. Cookies and similar technologies

We use essential cookies and session technologies to:

  • Keep you signed in;
  • Protect forms against cross-site request forgery;
  • Remember limited client-side preferences on the public site.

These are strictly necessary for the Service to function. You can control cookies through your browser settings, but disabling essential cookies may prevent login.

We also use Google Tag Manager to load Google Analytics (GA4) for understanding how visitors and signed-in users use the public site and workspace (for example, which pages are viewed). This helps us improve performance and usability. Google may set analytics cookies or use similar technologies; see Google's Privacy Policy. You can opt out of Google Analytics in your browser using Google's Analytics Opt-out Browser Add-on or your browser's cookie controls.

15. Beta service notice

budgzy is currently offered as a beta service. Features, data handling practices, and availability may change as we prepare for full launch. Material changes to this Privacy Policy will be posted on this page with an updated effective date.

16. Third-party links

The Service may link to third-party sites (such as Google OAuth). We are not responsible for their privacy practices. Review their policies before providing personal data to them.

17. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” at the top indicates when the current version took effect. Continued use of the Service after changes become effective constitutes acceptance of the updated policy, to the extent permitted by law.

18. Contact

Swaram Technologies owns and operates budgzy (budgzy.com). Swaram Technologies website: swaramtech.com.

Registered address: India.

Privacy enquiries and grievances: budgzy.com contact form

Signed-in users with workspace issues: Settings → Support in the app.