Privacy Policy | RightBonds

The short version

RightBonds does not collect, transmit, or store any personal or financial data on its servers. Your portfolio holdings never leave your browser. All data you upload is processed locally and saved only in your device's localStorage. You can delete it instantly at any time.

1. Who we are

RightBonds (rightbonds.com) is an independent bond yield aggregator for the Indian fixed-income market. We aggregate publicly available bond listings from multiple investment platforms — GoldenPi, Jiraaf, Grip Invest, BondScanner, Wint Wealth, NSE, and BSE — and present them in a single, filterable interface to help investors compare options.

RightBonds is not a registered investment adviser, broker, or financial institution. Nothing on this site constitutes investment advice.

2. Data we collect — and what we do not

2.1 Bond listings (server-side scraper)

Our automated scraper runs once daily. It fetches publicly available bond data from partner platforms (prices, yields, maturity dates, ISIN numbers) and writes the result to a static JSON file. This scraper processes only public market data and never interacts with any user account or personal information.

2.2 Portfolio analysis (entirely in-browser)

The Portfolio feature lets you upload a holdings statement (CDSL or NSDL depository export) to analyse your bond portfolio. This feature is built with a privacy-first architecture:

Parsing happens locally. Your uploaded file is parsed entirely within your browser using a self-hosted copy of the SheetJS library. The raw file bytes never leave your device.
No data is transmitted. Extracted holdings data (issuer names, quantities, maturity dates, ISIN codes) is stored only in your browser's localStorage. Nothing is sent to RightBonds servers, analytics services, or any third party.
No server component. The portfolio page is a static HTML file with no backend API. There is no server that could receive your data even if we wanted to.
You are in full control. Clicking Clear All permanently erases all portfolio data from localStorage. You can also clear it from your browser's developer tools at any time.

2.3 What we do NOT collect

Category	Status	Detail
User accounts / registration	Not collected	No sign-up, no login, no email required
Portfolio or holdings data	Not collected	Stays in your browser's localStorage only
Analytics / page views	Not collected	No Google Analytics, no Plausible, no tracking pixels
Cookies	Not used	No cookies set — localStorage is used only for portfolio data you explicitly upload
IP addresses	Infrastructure only	Cloudflare CDN may log IPs for DDoS protection per their own policy; we do not access or retain these logs
Device / browser fingerprinting	Not collected	No fingerprinting scripts of any kind
Search queries / filter state	Not collected	Filter and search state is in-memory only, never persisted remotely

3. Third-party libraries and vendor dependencies

To protect user privacy, all JavaScript libraries used in the Portfolio feature are self-hosted on our servers. We do not load any scripts from external CDNs during the portfolio session, eliminating the possibility of a CDN operator logging your IP address while you analyse your holdings.

Library	Version	Purpose	Hosted
Chart.js	4.5.1	Portfolio charts and graphs	Self-hosted
SheetJS (xlsx)	0.18.5	Parse NSDL .xls and CDSL .xlsx / .csv files	Self-hosted

Both libraries have been reviewed: neither version contains telemetry, outbound network calls, or data collection of any kind. SheetJS 0.18.5 is the final open-source release and performs all spreadsheet parsing synchronously in memory without any network activity.

What "self-hosted" means for you: When you open the portfolio page, your browser downloads Chart.js and SheetJS from rightbonds.com/vendor/ — our own domain. No request is made to cdn.jsdelivr.net, cdnjs.cloudflare.com, Google Fonts, or any other external service.

4. How your portfolio data is stored

When you upload a holdings statement, the following data is parsed from the file and stored in your browser's localStorage:

ISIN codes of your holdings
Quantity (number of units held)
Issuer names (as they appear in your depository statement)
A portfolio label you optionally assign

localStorage is a browser-native storage mechanism. It is:

Local only — data never leaves the device unless you explicitly export it
Origin-scoped — accessible only to pages served from rightbonds.com
Not shared between browsers or devices
Persistent until cleared — survives browser restarts until you choose to remove it

Deleting your data

To remove all portfolio data:

Click the Clear All button on the Portfolio page. This immediately deletes all rb:portfolio:* keys from localStorage.
Alternatively, use your browser's "Clear site data" or developer tools (Application → Local Storage → rightbonds.com) to delete individual keys or all data for the site.

5. Hosting and infrastructure

RightBonds is hosted on Cloudflare Pages. Cloudflare operates as a CDN and DDoS protection layer. When you visit RightBonds, your request is handled by Cloudflare's edge network. Cloudflare may process your IP address and basic HTTP headers as part of their infrastructure service. This processing is governed by Cloudflare's Privacy Policy.

RightBonds does not have access to, and does not retain, any logs from Cloudflare's infrastructure. We do not run any web analytics, session recording, heatmapping, or A/B testing services.

The daily scraper runs on an automated CI/CD pipeline. It accesses only public bond platform APIs and writes a static JSON file to the repository. No user data is processed in this pipeline.

6. Referral links

Some bond listings on RightBonds include referral links to investment platforms (GoldenPi, Jiraaf, Grip Invest, Wint Wealth, BondScanner). These links contain referral codes appended as URL parameters (e.g., ?ref=RIGHTBONDS). If you click a referral link and subsequently register on a partner platform, RightBonds may receive a referral commission from that platform.

Referral links are only used when you do not have portfolio data loaded. When portfolio data is present, bond links navigate directly to the specific bond's detail page on the respective platform — without any referral code — so you can quickly verify your holdings.

Clicking any external link will share your IP address and browser information with the destination platform, governed by that platform's own privacy policy.

7. Children's privacy

RightBonds is intended for adult investors. We do not knowingly collect personal information from individuals under 18 years of age. If you wish to delete any locally stored data, use the Clear All button on the Portfolio page or clear site data from your browser settings.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will post a notice on the RightBonds homepage.

9. Contact

If you have questions about this Privacy Policy or how RightBonds handles data:

Email: contact@rightbonds.com