1. Who we are

Topsheet (topsheet.in) is an educational mutual fund analysis platform operated as an independent project. We are not a registered investment adviser, broker, or financial institution. References to "we", "us", or "our" throughout this policy refer to the operators of topsheet.in.

If you have any questions about this policy, please reach out via the Contact page.

2. What data we collect

We collect only the minimum data necessary to operate the platform:

We do not collect payment information. Topsheet is currently free to use.

3. How we use your data

Your data is used exclusively to:

We do not use your data for advertising, profiling, or any commercial purpose beyond operating the platform.

4. We do not sell your data

We will never sell, rent, or trade your personal data or portfolio inputs to any third party. This is an absolute commitment. Your financial inputs and account information are not a product.

We do not share your data with advertisers, data brokers, marketing platforms, or any external commercial entities.

5. Third-party services

Topsheet uses a small number of third-party services to operate:

We do not use third-party analytics (e.g., Google Analytics), advertising networks, or social media tracking pixels.

6. Data storage and security

Account data and portfolio inputs are stored on secured servers. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse.

No system is completely secure. We recommend using a strong, unique password for your Topsheet account.

7. Cookies and local storage

Topsheet uses browser local storage (not cookies) to store your authentication token after login. This token is used to authenticate your API requests and is cleared when you log out. We do not use tracking cookies or third-party cookie-based analytics.

8. Your rights

You have the right to:

To exercise any of these rights, use the Contact page or the in-app account settings.

9. Data retention

We retain your account data for as long as your account is active. If you delete your account, your email address, hashed password, and saved portfolios are permanently removed from our systems within 30 days. Server logs are retained for up to 90 days for debugging purposes.

10. Changes to this policy

We may update this policy as the platform evolves. Material changes will be noted on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the revised policy.

If you have questions about this policy, please contact us via the Contact page.