Privacy Policy

2. Browser-Only Calculators (Zero Server Transmission)

Over 100 core statutory and everyday calculators on India Utility Hub operate with a strict client-side execution model:

• Verified Browser-Only Tools: Salary Calculator, Old vs New Tax Regime Comparator, Loan EMI Calculator, Home Loan EMI, EPF Corpus Solver, Gratuity Calculator, PPF Compounding, NPS Wealth Accumulator, GST & Reverse GST, Electricity Bill Slabs, HRA Exemption, Capital Gains, Fixed Deposit (FD), Recurring Deposit (RD), and dozens more.
• No Input Transmission: When you enter your annual CTC, basic pay, loan tenure, EMI amount, or savings figures, the mathematical formulas run synchronously in your browser. Your financial numbers are not transmitted to our servers or any third-party services.
• No Account Required: You do not need to register, log in, or provide an email address to use any of our core calculators.
• No Telemetry of Financial Inputs: We explicitly prohibit logging calculation numbers to our analytics or error monitoring systems.

3. Document Generators & On-Device Storage (Local Drafts)

Our document generation tools (including the Resume Generator, Marriage Biodata Maker, Rent Agreement Generator, Rent Receipt Generator, and Celebration Invitations) run entirely in your web browser:

• In-Browser PDF & Image Rendering: PDF generation, print formatting, and image cropping (such as biodata photos) take place inside your browser using standard HTML Canvas and print stylesheets. Your uploaded photos and personal text are never uploaded to our servers.
• Local Auto-Save: To prevent accidental data loss if your browser crashes or reloads, draft form data is saved into your browser's localStorage. This data resides solely on your computer or mobile device.
• Clearing Local Data: You can wipe your saved drafts at any time by clicking "Reset Form" within the tool or by clearing your browser cache/cookies.

4. External Services & Optional Features Disclosures

In order to maintain strict accuracy and trustworthiness, we openly disclose any tool that interacts with external APIs or uses optional cloud features:

• Bank IFSC & MICR Code Finder: Searches first against our curated client directory. If an IFSC code is not present locally, a secure query is sent through our API endpoint to the public RBI IFSC directory (via Razorpay Open IFSC API). Only the 11-character bank branch code is sent; zero personal or financial information is transmitted.
• Optional AI Insights (e.g. SIP Calculator): While compound mathematical computations run 100% in your browser with zero latency, users may optionally click "Explain with AI". When explicitly triggered, only the numeric scenario parameters (monthly amount, expected return, tenure) are sent to our secure backend AI route to generate educational explanations. No personal identity, bank details, or account identifiers are ever included.

5. Contact Us, Feedback & Tool Request Forms

When you voluntarily submit a message to us through our website:

• Contact Us Form: Collects your name, email address, topic category, and message text to address your inquiry or technical issue. This is saved to our secure database and transmitted via email for our support team to respond.
• Tool Feedback & Feature Requests: Collects tool rating, suggestions, and optional contact details to prioritize engineering improvements.
• No Marketing Spam: We never sell, rent, or share contact details with advertisers or data brokers. Submitted information is used strictly to answer your question or fix reported bugs.

6. Optional User Accounts & Authentication

An account is entirely optional. If you choose to create one for profile management or future synchronized preferences:

• Email & Password Sign-Up: Passwords are never saved in plaintext; they are securely hashed using bcrypt before database storage in MongoDB.
• Google OAuth Sign-In: When authenticating via Google, we receive only the verified profile information you permit (full name, email address, Google account ID, and profile picture URL). We do not request or access your Gmail, Google Drive, or phone contacts.
• Session Security: Authenticated sessions use secure, HTTP-Only cookies (auth_token) with cryptographic JWT signing, preventing token access from third-party scripts.

7. 100% Free Core Suite Guarantee — No Paid Unlocks

India Utility Hub is built on the belief that everyday utility math and statutory calculators should be accessible to all Indian citizens without financial barriers:

• Zero Paywalls: All 110+ calculators and utilities are free to use in their entirety.
• No Subscriptions: There are no recurring charges, memberships, or tier-based calculation limits.
• No Payment Gateways: We do not integrate credit card processors, payment gateways, or banking aggregators for calculation usage.
• No Forced Account Creation: We do not require sign-up or registration to access results or download PDFs.

8. Anonymous Telemetry & Google Analytics

To understand which calculators are helpful, monitor site performance, and detect technical issues, we use Google Analytics (GA4):

• Aggregate Usage Metrics: GA4 collects technical details such as pages visited, general browser and device categories, referring sites, and interaction events (such as calculation triggered or PDF download clicked).
• Automated URL PII Redaction: Our implementation actively sanitizes URL paths prior to transmission to GA4, stripping and redacting sensitive query parameters, OAuth tokens, and email strings with [REDACTED] placeholders.
• Strict Financial Privacy: We strictly prohibit and do not send salary numbers, tax amounts, loan values, investment yields, UPI IDs, payee names, or personal financial inputs to Google Analytics.
• Consent Respect: Analytics tracking respects your preferences selected in our Cookie Consent banner. If you choose "Reject Non-Essential", optional analytics tracking is completely disabled.

9. Reasonable Security Safeguards

We implement administrative and technical security measures designed to protect information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS / TLS encryption across all network communications
• Bcrypt salted password hashing for credential storage
• HTTP-Only and SameSite cookie attributes to prevent token theft
• Content Security Policy (CSP) and security headers preventing injection attacks
• CSRF state token validation during Google OAuth redirects

While we apply rigorous security protocols, no internet transmission or digital storage system is completely invulnerable. We encourage you to use unique passwords and safeguard your credentials.

10. Data Retention & Your Rights

We retain account and communication information only as long as necessary to fulfill legitimate operational, security, and support purposes:

• Calculation Inputs: Zero retention on our servers. Discarded immediately when you close the browser tab.
• Local Drafts: Persist in your device's localStorage until you reset the tool or clear your browser data.
• Account Records: Maintained while your account is active. If you delete your account, your profile is permanently purged from MongoDB.
• Contact Submissions: Retained for technical support and bug tracking records.

To request deletion of your account or inquire about your data, contact our engineering team at indiautilityhub05@gmail.com or prasuramkumar05@gmail.com.

11. Third-Party Service Providers

We rely on established technology providers for core infrastructure:

• Vercel: Cloud hosting, DNS routing, and static asset distribution
• MongoDB Atlas: Managed database hosting for account records
• Google Identity (OAuth 2.0): Optional federated sign-in authentication
• Google Analytics (GA4): Aggregated and anonymized site telemetry

We do not sell, rent, or trade your personal information to marketing brokers, data aggregators, or advertising networks.

12. Children's Privacy

India Utility Hub is designed for adult professionals, taxpayers, property owners, and citizens. We do not knowingly solicit or collect personal information from individuals under the age of 18. If you believe a minor has registered an account, contact us for prompt removal.

13. Policy Updates & Contact Information

We may update this Privacy Policy periodically to reflect enhancements to our tools, security features, or legal requirements. Material modifications will be indicated by revising the "Last Updated" date at the top of this page.