Privacy Policy

Last updated: September 2026

What we collect

RetailBonds.in collects minimal data:

Server logs — standard web server logs (IP address, user agent, URL, timestamp). Retained for 30 days for security and debugging. Not linked to identities.
Search queries — anonymised search terms typed in the screener. No user ID or IP is stored with these. Used to improve search relevance.
Alert subscriptions — if you subscribe to weekly email alerts, we store your email address and subscription preferences. We do not share this with third parties.
Account (optional) — if you sign in, we store your email address, the date you agreed to this policy, when you last signed in and, if you use Google sign-in, Google's account identifier for you. Nothing else from your Google account.
Watchlist (optional) — if you add bonds or issuers to your watchlist, we store which ones and when you added them, linked to your account. It is private to you and not used for recommendations or advertising. If you watch anything, we email you a daily summary on days when a watched item has new rating or payment information; you can turn this off on your watchlist page or from the link in each email.
Saved screens (optional) — if you save screener filters, we store the name you give them and the filter settings, linked to your account.
Notes (optional) — if you write a note on a bond or issuer, we store its text, linked to your account. It is private to you. Please don't put account numbers or other sensitive details in notes.
NCD issue emails (optional, off unless you turn them on) — we record that you turned them on and which issues we have emailed you about, so none is sent twice. Turn them off on the NCD subscription page or from the link in each email.
CAS statement import (optional, Premium) — if you upload an NSDL/CDSL CAS PDF, it is read in memory only to find your bonds and discarded when the page loads; it is never saved to disk, backups or logs. The PDF password is used only to open the file and is not kept. Nothing from the statement is stored except the bond holdings you confirm (ISIN and units). Your name, PAN, address, demat/DP IDs, transactions, shares, mutual funds and values are never stored.
Client portfolios (Pro) — advisers can keep portfolios for their clients. We store the portfolio names the adviser chooses, the holdings (ISIN and units) and an optional firm name shown on reports. The adviser decides what to enter and is responsible for having their clients' consent. Please use labels or initials rather than full client names. Client portfolios are deleted with the adviser's account or individually at any time.
Payments (Premium) — payments are handled by Polar, our merchant of record, which collects the payment and any GST or sales tax. We never see or store card details. We keep only the subscription's status, plan, currency, amount and renewal date, linked to your account, to switch Premium on and off.
Portfolio (optional) — if you use the portfolio tracker, we store the ISIN of each bond you add and the number of units, linked to your account. Nothing else: no purchase prices, dates, broker, demat or bank details. It is private to you and used only to show your holdings and estimated upcoming payments.
Cookies — first-party only: your light/dark theme choice; an anonymous visit identifier (rb_session, 30 days) used only to count visits in our own analytics; short-lived security tokens that protect forms; and, if you sign in, a sign-in session cookie (30 days). No advertising or cross-site tracking cookies.

What we do not collect

No passwords — sign-in uses a one-time email code or Google.
No financial data, portfolio information, or trading history.
No third-party advertising trackers or pixel tags.
No cross-site tracking.

Analytics

We use basic, privacy-respecting analytics to understand aggregate page traffic (which pages are popular, which search terms are common). This is processed server-side from logs with IPs anonymised. We do not use Google Analytics or similar client-side tracking.

Email alerts

If you subscribe to weekly rating digest emails, your email is used solely to send those digests. You can unsubscribe at any time via the link in each email. We will delete your email within 7 days of unsubscription.

Accounts

Accounts are optional; the site works fully without one. Sign-in codes and links expire after 15 minutes and are stored only in hashed form, as are sign-in sessions. You can delete your account yourself at any time from your account page; this removes the account, its watchlist, its portfolio holdings, its saved screens, its notes, its sessions and pending sign-in codes immediately. You can also remove any item from your watchlist at any time.

Data sharing

We do not sell, rent, or share your data for anyone's marketing, and we do not use it for advertising profiling. Service providers process limited data on our behalf only to run the site: Cloudflare (network and security), Resend (delivering emails you asked for) and, if you choose it, Google (sign-in).

Security

The site is served over HTTPS. We do not store sensitive financial or personal data, which limits the impact of any potential breach.

Your rights

You can delete your account yourself from your account page and stop any alert from the unsubscribe link in its email. You may also request access to or deletion of any personal data we hold about you by emailing [email protected].

Changes

We may update this policy. Material changes will be noted on this page with an updated date.