Privacy Policy

ExitWiz is operated by Alpha Consultancy Services, Mumbai, Maharashtra, India. Contact: teams@exitwiz.com

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use ExitWiz. By using the Service, you consent to the practices described in this policy.

Account information: When you sign in via Google OAuth, we receive your name, email address, and profile picture URL from Google. We store this to create and manage your account.

Portfolio data: Holdings you add — including stock symbols, quantities, prices, mutual fund scheme codes, FD details, and cash balances — are stored to provide the tracking service.

Usage data: We may collect information about how you use the platform, including pages visited, features used, and session metadata, to improve the Service.

Payment data: If you subscribe to a paid plan, payment processing is handled by third-party payment providers. We do not store your full card details.

• To create and manage your account and authenticate you
• To store and display your portfolio holdings and compute analytics
• To send you transactional emails (account confirmations, plan changes)
• To improve and develop the Service
• To comply with legal obligations

We do not use your data to provide personalised investment recommendations, and we do not sell your personal data to third parties for marketing purposes.

Your data is stored on Supabase (PostgreSQL), hosted on cloud infrastructure within secure data centres. We employ reasonable technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

While we take security seriously, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We retain your account and portfolio data for as long as your account is active. Daily portfolio reports are retained for a rolling 7-day window to minimise storage footprint. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.

ExitWiz integrates with the following third-party services:

• Google OAuth — for authentication
• yfinance / Yahoo Finance — for stock and ETF price data
• mfapi.in — for Indian mutual fund NAV data
• Supabase — for database hosting
• Vercel — for frontend hosting
• Google Cloud Run — for backend API hosting

These services have their own privacy policies. We encourage you to review them. We share only the minimum necessary data with each provider.

We use session cookies for authentication (via NextAuth). We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, but this will prevent you from logging in.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to processing of your data in certain circumstances

To exercise any of these rights, contact us at teams@exitwiz.com. We will respond within 30 days.

ExitWiz is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice at least 14 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

For privacy-related questions or requests: teams@exitwiz.com

Alpha Consultancy Services, Mumbai, Maharashtra, India.