Trust & Privacy Architecture

Security and Privacy First

Financial information is sensitive. PaisaPilot is built from the ground up with strict tenant isolation, data minimization, and transparent guardrails.

Zero Credential Access

We will never ask for or store your UPI PIN, ATM PIN, online banking passwords, or OTPs. Statements are parsed only from files you explicitly upload.

Strict Tenant Isolation

Every database query and mutation is strictly scoped to your verified session identifier. Client-provided account IDs are never trusted as proof of ownership.

Restricted AI Gateway

Our AI model has zero direct access to the database. It interacts exclusively through allowlisted backend tools with minimized, anonymized financial aggregates.

Statement Processing & File Lifecycle

How your uploaded statement files are handled with absolute confidentiality.

Private Temporary Storage

Uploaded statements are stored in private, unguessable storage keys with automated TTL lifecycle deletion. Files are never exposed via public URLs.

User-Controlled Export & Deletion

You own your data. Export your entire transaction history and budgets in JSON or CSV at any time, or request complete, permanent account deletion.

Regulatory Notice

PaisaPilot is an analytical budgeting and spending insight application. It is not a registered financial advisor or payment processor. We do not provide regulated investment recommendations. Live bank synchronization is only introduced under formal Account Aggregator regulatory consent.