Privacy Policy | RateScan.in

Overview

RateScan.in is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights under India's Digital Personal Data Protection Act, 2023 (DPDPA).

RateScan.in does not use cookies, does not serve advertising, and does not sell or share your personal data with third parties for marketing purposes.

What we collect

Data	Source	Purpose	Retention
Page URL, referrer	Umami Analytics	Understand which pages are visited and how users arrive at the site	24 months
Browser type, OS	Umami Analytics	Understand device and browser distribution for compatibility	24 months
Country (from IP)	Umami Analytics	Understand geographic reach	24 months
How you use pages: the sections you view and for how long, text typed into the bank search (shortened, long numbers removed), calculator settings (amounts as ranges), page loading speed and script errors	Umami Analytics	Improve the site: find banks people look for that we do not cover yet, see which information helps, and fix slow or broken pages	90 days
Approximate location (your state, from IP)	Cloudflare Workers	Start the State filter on your own state; you can switch it back to All India	Not stored
Email address and the banks you follow (rate alerts)	Cloudflare Workers, Resend	Send the rate change emails you signed up for	Until you unsubscribe
Feedback form submissions	Web3Forms	Respond to error reports and user messages	Until resolved

No cookies are set. Umami Analytics is a cookieless analytics platform; it does not use browser cookies or local storage to track users, and does not build individual user profiles. IP addresses are not stored in full; only the derived country is retained.

What we do not collect

We do not collect names, phone numbers, or any account information. We hold an email address only if you send it through the feedback form or sign up for rate change alerts.
We do not collect financial data, investment preferences, or any sensitive personal information.
We do not use third-party advertising networks, social media trackers, or fingerprinting scripts.
We do not sell, rent, or share personal data with third parties for commercial purposes.

Third-party processors

Service	Purpose	Privacy policy
Umami (self-hosted)	Cookieless, privacy-friendly analytics, run by RateScan.in on Google Cloud (US) with its database at Supabase (US)	Google Cloud privacy notice supabase.com/privacy
Cloudflare Workers	Approximate-location lookup (your state, worked out from your IP address; nothing is stored)	cloudflare.com/privacypolicy
Cloudflare Workers KV	Stores rate change alert subscriptions (your email address and the banks you follow)	cloudflare.com/privacypolicy
Resend	Sends rate change alert emails (your email address and the rate changes in each email)	resend.com/legal/privacy-policy
Web3Forms	Feedback form submission relay	web3forms.com/privacy
GitHub Pages	Static site hosting	GitHub Privacy Statement
Google Fonts	Web font delivery (Inter, Sora)	Google Fonts Privacy FAQ

Your rights under DPDPA 2023

Under India's Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:

Right to access: You may request confirmation of what personal data we hold about you.
Right to correction: You may request correction of inaccurate personal data.
Right to erasure: You may request deletion of your personal data where we have no legitimate basis to retain it.
Right to grievance redressal: You may raise a grievance with us, and we will respond within a reasonable time.

Because we collect minimal data (no accounts, no profiles), most of these rights have limited practical scope for anonymous site visitors. For feedback form submissions that include your contact details, we will delete them on request.

To stop rate change alerts, use the unsubscribe link in any alert email. That deletes your email address and bank choices straight away.

Data security

The Site is served over HTTPS. Analytics data is processed by RateScan.in's own Umami installation on Google Cloud, with its database at Supabase, both over encrypted connections. Feedback form submissions are relayed via Web3Forms using encrypted transport. We do not store credit card numbers, passwords, or sensitive financial data.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page reflects when the policy was last updated. Continued use of the Site after any changes constitutes acceptance of the revised policy.

Contact & grievance officer

For privacy-related queries, data requests, or grievances under DPDPA 2023, please use the feedback form on this Site or open an issue on GitHub. We aim to respond within 30 days.