Privacy Policy

• MF Gyan does not require signup and does not use tracking cookies.
• What you type into the chat is sent to a third-party AI provider (currently DeepSeek, based in China) to generate a reply. We do not attach your identity to it.
• Our web server temporarily logs IP addresses and pages visited (Caddy access logs), retained for up to 14 days for security and debugging.
• If you use the (upcoming) portfolio analyser, we will explicitly ask for your consent before storing anything. We only ever want to store your name, email, upload timestamp, and a high-level portfolio summary — never your PAN, DOB, folio numbers, or individual holdings.
• You can request deletion of anything we have about you at any time — see grievance officer below.

MF Gyan is a free, open-source (MIT licensed) research and analytics tool for Indian mutual funds, operated by the maintainers of the project. It is not registered with SEBI as an Investment Adviser, Research Analyst, or Distributor.

Browsing

When you visit the site, our reverse proxy (Caddy) writes an access log containing: IP address, timestamp, requested URL, HTTP status, user-agent, and referer. These logs are kept on the server for up to 14 days for security monitoring and are then rotated out. We do not use these logs for advertising or profiling.

Chat

When you send a message on /chat, your message text is transmitted to our AI provider DeepSeek for processing. It is processed under DeepSeek's privacy policy. We do not attach your identity, IP, or any account information to the message. We do not store your chat history on our server (chat state lives in your browser session only).

Cookies / trackers

MF Gyan does not use analytics cookies, advertising cookies, or third-party trackers. The site uses only the functional cookies required by Next.js for the app to work.

A portfolio analyser is in development. When it launches, you will be asked to tick a consent box before uploading anything. If — and only if — you tick it, we will store:

• Your name (as printed on the CAS)
• Your email (if present on the CAS)
• Timestamp of your upload
• Total portfolio value (as a single ₹ figure)
• Anonymised category breakdown (e.g. "60% small cap, 30% large cap")
• Number of funds matched

We will never store your PAN, date of birth, folio numbers, ISINs, cost basis, individual holdings, or the raw CAS PDF. All of these are used transiently in memory to compute your analysis and are discarded when your session ends (at most 1 hour).

• mfapi.in — public NAV data source. No personal data of yours is sent.
• DeepSeek — AI chat provider (based in China). Your chat message text is sent here to generate replies.
• DigitalOcean — cloud hosting for the site (Bangalore data centre).
• Let's Encrypt — issues the HTTPS certificate. No personal data is shared.

If you are located in India, you have the right to: access what personal data we hold about you; correct any inaccuracies; withdraw consent at any time; request deletion; and nominate someone to exercise these rights on your behalf. To exercise any of these, contact the grievance officer below.

• Access logs: up to 14 days
• Chat message text: not stored on our servers (browser-only)
• Portfolio uploads (once feature ships, with consent): kept until you request deletion

For any privacy question, data access, correction, or deletion request, please contact:

Name: [to be filled by MF Gyan maintainer]
Email: privacy@mfgyan.com
Response time: within 30 days of receipt

We will update this page whenever our practices change and refresh the "Last updated" date at the top. Material changes will also be highlighted on the home page.