Vyay

Privacy Policy

Last Updated: May 29, 2026

1. Introduction

Welcome to Vyay, operated by Vyay Technologies ("we," "our," or "us"). We are committed to protecting your privacy and ensuring your financial data is handled with the highest standards of security. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered credit card tracking application and its associated Chrome Extension.

2. Data Collection & Minimization

We operate on a strict Privacy by Design principle. We only collect the data necessary to provide our services to you:

Account Information: Your name, email address, and optionally your date of birth for account verification and communication.
Financial Statements: We process the credit card statement PDFs you upload. We extract transaction data (amount, date, merchant) to provide analytics and categorisation.
No Bank Credentials: We never ask for, collect, or store your bank login credentials, passwords, or PINs.

3. Chrome Extension — Data Use Disclosure

This section is the complete and required data use disclosure for the Vyay Chrome Extension, in accordance with the Chrome Web Store User Data Policy. If you install and use the Vyay Chrome Extension, the following practices apply.

3a. What the Extension Does

The Vyay Chrome Extension runs a content script inside your Gmail tab (matching https://mail.google.com/*). When you explicitly click the "Extract" button, it scans the page to locate credit card statement attachments (PDF or Excel format) and sends them to the Vyay web application for parsing. The extension does not perform any automatic or background scanning.

3b. Complete Data Disclosure Table

Data Type	Collected?	How Used	Stored Where?	Shared?
Gmail email bodies, message metadata	Never	N/A — never accessed	Not stored	Never
Credit card statement PDF / Excel attachments	Yes — only on explicit user action	Parsed to extract transactions (amount, date, merchant) for spending insights and cashback analytics	Temporarily on Vyay's own servers over HTTPS; deleted after processing	Never with any third party
Browser authentication token	Yes	To authenticate your session with Vyay	Browser `chrome.storage.local` only; cleared on logout	Never
Account info (name, email)	Yes — via account registration	Account management and communication	Vyay secure cloud servers	Never

3c. Prohibited Uses — Data Is Never Used For:

Advertising, remarketing, or behavioural profiling of any kind
Building user profiles for third-party commercial purposes
Sale, transfer, or licensing to any third-party data brokers or advertisers
Any purpose other than delivering the Vyay statement-parsing service to you

3d. Data Transmission & Security

All statement files are transmitted exclusively to Vyay's own servers, never to any third-party service.
All transmissions are encrypted using industry-standard HTTPS/TLS.
Extracted files are never cached or stored locally on your device by the extension.
The extension stores only your secure session authentication token in the browser's sandboxed chrome.storage.local. This token is cleared immediately upon logout.

3e. Google API Limited Use Compliance

Vyay's use of data obtained via access to Google user data is limited to providing and improving the features of the Vyay service to the user. We do not use this data for any other purpose, including serving ads. This is in full compliance with Google's API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Data (Purpose Limitation)

Your data is used strictly for the following purposes:

To parse your uploaded statements and display your spending insights.
To use AI to categorise your transactions and identify cashback opportunities.
To maintain and secure your account.

We do not and will never sell your personal or financial data to third parties, advertisers, or data brokers.

5. Data Storage and Retention

Your transaction data is securely stored in our cloud infrastructure. We retain this data as long as your account is active to provide you with historical insights. If you delete your account, your data will be permanently purged from our active databases within 30 days.

Important: Deleting your account will result in the immediate forfeiture of any remaining AI credits or wallet balances, which cannot be recovered or transferred to a new account.

6. Your Rights

You have the following rights regarding your personal data:

Access the personal data we hold about you.
Request correction of any inaccurate data.
Request deletion of your account and all associated financial data (Right to be Forgotten).

7. Security

We implement industry-standard security measures to protect your data, including encrypted transmission (HTTPS/TLS), secure cloud storage, and strict access controls. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security, but we continuously work to protect your information.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, notifying you via email. The "Last Updated" date at the top of this page reflects when the policy was last revised. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

9. Contact & Grievance Officer

If you have any questions, concerns, or wish to exercise your data rights, please contact our Grievance Officer:

Email	support@vyay.in
Company	Vyay Technologies