Legal

Privacy Policy

Last updated: April 9, 2026

XIRR Ledger ("we", "us", or "our") is a financial portfolio analysis tool created by Ankit Bhardwaj. This Privacy Policy explains how we collect, use, store, and protect information when you use our service at xirrledger.com.

By using XIRR Ledger, you agree to the practices described in this policy.

1. Information We Collect

Broker ledger files. When you upload a ledger file (CSV, PDF, or XLSX from Zerodha, Groww, or Fyers), we temporarily store it on AWS S3 to process your XIRR calculation. The file contains your transaction history, account identifiers, and financial amounts.

Email address. Sign-in is required to use XIRR Ledger. We collect and securely store your email address to deliver your PDF report after every calculation. If you sign in with email (rather than Google), we also use it to send a one-time password (OTP) for verification. We will never use your email address for marketing, promotions, or spam — only for transactional messages directly related to your use of the tool.

Google sign-in. If you choose to sign in with Google, we receive your name and email address from Google Identity Services. We do not receive or store your Google password.

Usage data. We use Google Analytics to collect anonymised usage data (pages visited, session duration, device type). This data does not identify you personally.

2. How We Use Your Data

  • To calculate your portfolio XIRR from the uploaded ledger file.
  • To generate and email you a PDF report of your results.
  • To send a one-time password (OTP) for email verification (expires in 10 minutes).
  • To improve the tool through anonymised usage analytics.

We do not use your data for advertising, profiling, or any purpose beyond providing the XIRR calculation service.

3. Data Storage and Retention

Uploaded ledger files. Your uploaded files are stored on AWS S3 (Mumbai region) solely for the duration of processing. Files are deleted from our servers after the calculation is complete.

Generated reports. PDF reports are stored on AWS S3 and are accessible via a secure, time-limited download link sent to your email. Reports are retained to allow you to re-download them.

OTPs. One-time passwords are stored with a 10-minute expiry and deleted automatically after use or expiry.

Session data. A session token is stored in your browser's localStorage with a 7-day expiry. It is cleared when you sign out.

Account data. If you register an account, your email address and sign-in method are stored in a secure database hosted in India.

4. Third-Party Services

We use the following third-party services to operate XIRR Ledger:

  • AWS S3 and Lambda (Mumbai, ap-south-1) — file storage and computation.
  • AWS SES — transactional email delivery (OTPs and reports).
  • Google Analytics — anonymised usage analytics.
  • Google Identity Services — optional Google sign-in.

Each of these services has its own privacy policy. We only share the minimum data necessary for each service to function.

5. Data Security

All data is transmitted over HTTPS. Files are stored in private AWS S3 buckets with no public access. Access to our systems is restricted and protected by IAM policies. We do not sell, rent, or share your personal data with any third party for commercial purposes.

6. Your Rights

You have the right to:

  • Request deletion of your account and associated data.
  • Request a copy of the data we hold about you.
  • Withdraw consent for email communications at any time.

To exercise any of these rights, email us at contact@xirrledger.com.

7. Cookies

XIRR Ledger does not use tracking cookies. Google Analytics uses anonymised cookies to measure usage. Your browser session is stored in localStorage, not cookies.

8. Children's Privacy

XIRR Ledger is not intended for users under the age of 18. We do not knowingly collect personal data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of XIRR Ledger after any changes constitutes your acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at:
contact@xirrledger.com
XIRR Ledger, India