Effective 10 July 2026
We process account identity, authentication records, consent, portfolio data you enter, watchlists, notes, product activity, subscription state and security logs. We do not request broker passwords, TOTP values, PINs or TPINs.
Data is used to provide research tools, protect accounts, deliver alerts and email, administer subscriptions, meet legal duties and diagnose incidents.
Depending on enabled features, data is processed by the VPS and PostgreSQL host, Razorpay, the configured SMTP provider, OAuth providers, Telegram and the configured AI provider. Payment card details remain with Razorpay.
AI prompts contain the minimum research evidence required and exclude authentication secrets and unrelated tenant data. Retrieved documents and user text are treated as untrusted input.
Account deletion disables sign-in immediately and schedules research-data removal after 30 days. Security, transaction and compliance records may be retained where required by law or fraud-prevention duties.
Controls include HTTPS, restricted cookies, token hashing, tenant authorization, encryption-aware backups, rate limits, audit logs and production monitoring. No system is absolutely secure.
You may export your account data, correct portfolio information, cancel renewal and request deletion from the product.