Privacy Policy

Legal Compliance

Last updated: June 02, 2026. WealthPath's commitment to protecting your financial and personal data assets.

1. Data Storage & Firestore

WealthPath uses Google Firebase Authentication and Google Cloud Firestore to store and synchronize user watchlists, portfolio buy/sell transactions, and customized index parameters. All database read/write queries are protected by Firebase Firestore Security Rules.

2. No Credentials Stored

WealthPath does NOT connect to bank accounts directly or store real financial passwords, credentials, bank account IDs, or debit card tokens. All transactions (buying prices, quantities, stock choices) are logged manually by the user, keeping your real assets fully isolated and safe.

3. Third-party APIs & Local Storage

We use external services like Yahoo Finance, Moneycontrol, and Google News RSS parsing nodes to query index charts and company headlines. We store cached equity checklists in your local browser's LocalStorage (`wealthpath_equities_nse_bse_v1`) to accelerate loading times and minimize network traffic.

4. Tracking & Cookies

We do not sell user data to advertising aggregators. We only utilize local tokens for authentication session verification and user settings persistence (such as saving Dark Mode preferences).

5. Security Audits

We continuously audit our serverless Next.js functions and Firebase rule scripts to protect against cross-site scripting (XSS) and injection vulnerabilities.