Privacy Policy

1. Who we are

InEx (“we”, “us”) is an income and expense tracking product operated by RohitWebCo. This policy explains what we collect when you use the InEx website and app, and why.

If you have privacy questions, use the Contact page or email the address shown in our website settings when configured.

2. Information we collect

Depending on how you use InEx, we may process:

Account details such as name, email, country, timezone, currency, and password (stored hashed).
Ledger data you enter: transactions, banks, payment methods, categories, recurring rules, investments, loans, and related notes.
Billing and subscription records: plan, amounts, GST breakdown, currency, payment status, and gateway references when payments are processed.
Technical data such as IP address, browser/user agent, approximate location derived from IP, and device hints used for security and support.
Contact-form messages and associated visitor metadata (for spam control and follow-up).
Session cookies and security tokens needed to keep you signed in and protect forms (CSRF).

3. How we use information

We use personal and account data to:

Provide and improve the InEx service (dashboard, reports, plan limits, trials).
Verify email addresses, reset passwords, and send transactional messages (OTP, reset links).
Detect abuse, rate-limit forms, and secure accounts.
Process or record subscription payments and apply the correct regional pricing.
Respond to support requests and contact-form enquiries.

4. Legal bases & consent

We process data to perform our contract with you (providing the ledger and account), to meet legitimate interests (security, product improvement, spam prevention), and where required for tax or accounting related to paid plans.

Where local law requires consent for optional communications, we will ask before sending marketing messages. Transactional mail about your account does not require marketing consent.

5. Sharing

We do not sell your personal data. We may share limited data with:

Infrastructure and email (SMTP) providers that help us run InEx.
Payment gateways (for example Razorpay or Stripe) when you pay for a plan.
Authorities when required by law.
Our parent company RohitWebCo for operations and support of the product.

6. Retention

We keep account and ledger data while your account is active and for a reasonable period afterward if needed for security, disputes, or legal obligations. Contact messages are retained so we can support you and improve anti-spam measures. You may request deletion subject to legal retention needs.

7. Security

We use industry-standard measures such as hashed passwords, session controls, CSRF protection, and access limits on portals. No method of transmission or storage is perfectly secure; please use a strong unique password and sign out on shared devices.

8. Your choices

You can update profile details in the app, reset your password, and contact us to ask about access or deletion. Downgrading a plan does not delete your historical ledger data; it only changes feature access and limits.

9. Children

InEx is not directed at children under 18. If you believe a minor has created an account, contact us so we can take appropriate action.

10. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of InEx after updates means you accept the revised policy.