Privacy Policy

ethro is operated by Aryai LLP, which is the data controller for the information described below. This policy explains what we do and don't keep.

Your statements are never kept

The two Interactive Brokers Flex Query files you upload are not collected, stored, or retained. They exist on the server only for the seconds it takes to generate your Schedule FA, OS, and CG reports — in an isolated, request-specific temporary location — and are deleted the moment those reports have been generated, before you even download them. The generated reports themselves are then kept briefly, only so you can download them (more than once) during your working session; they're removed when you start another run, after a short period of inactivity, or when the session ends. The contents of your statements and reports are never written to a database, never logged, never analyzed for any other purpose, and never shared. We keep a small record that a run happened (see "Usage records" below), but it holds none of your financial data.

Producing the reports does involve fetching public market data — daily exchange rates, stock prices, company addresses — but those lookups carry no information about you at all: not your identity, not your account, not your holdings.

What we do store

Your account. Signing in with Google gives us your email address and name, which we store to operate your account — recognizing you when you return, tying any purchase to you, and replying if you write to us. We never see your Google password, and we don't request access to anything else in your Google account.

Feedback. If you submit the feedback form, we store your message together with your account email so we can reply.

The only cookie we set is the session cookie that keeps you signed in. There are no advertising or cross-site tracking cookies.

Usage records

Each time you generate reports, we store a small usage record so we can operate the service responsibly. This record contains only: the account you were signed in with (your user ID and email), a timestamp, which pipeline you used (currently Interactive Brokers), the financial year the run was for, and simple counts — how many reports were produced and how many rows they contained. That's it.

To support per-account licensing without ever handling your brokerage account number, the record may also include an irreversible token derived from that account ID — never the account ID itself, and never anything from which it could be recovered.

This record deliberately contains none of your financial data: no holdings, no amounts, no gains, no dividends, no tax figures, and nothing from the files you uploaded. It tells us that a run happened and how big it was — not what was in it.

We keep these records to guard against abuse and enforce rate limits, to understand how much the tool is used and where it fails, and to underpin licensing when paid downloads launch. They are tied to your account for as long as your account exists; ask us via the contact page to have them deleted.

Payments

When paid downloads launch, payment will be handled by a payment provider — your card or UPI details go to them directly and never touch our servers; we receive only a confirmation that the payment succeeded. To enforce per-account licensing, we will store an irreversible token derived from your brokerage account ID — never the account ID itself.

Retention

As described above, your uploaded statements are deleted as soon as your reports are generated. The reports are kept only for your working session so you can download them, then removed when you start another run, after a short period of inactivity, or when the server restarts. Your account record (email and name) is kept while your account exists; write to us via the contact page to have it deleted.

Security

Each run is isolated to its own temporary, request-specific storage location — one upload never has access to another's files. The service is served over HTTPS.

Children's privacy

This tool is a tax-filing utility intended for adults and isn't directed at children.

Changes

If what we collect or how we handle it ever changes, this page will be updated and the "last updated" date above will reflect it.

Contact

Questions about this policy? Reach us through the contact page.