Privacy Policy

• Account and profile: email address, your chosen display name, account identifier, plan, registration details, and account security information. Passwords are handled by our authentication provider; the app uses the resulting session to keep you signed in.
• Workspace and trading activity: saved strategies, chart and market preferences, watchlist, auto-trading settings, simulated balance, paper orders and positions, and related activity needed to resume your workspace.
• Community content: messages, strategy listings, reports, and the profile information shown alongside content you submit.
• Optional broker connection: if you connect Delta Exchange or Angel One SmartAPI, the API credentials you enter and the account, market-data or trading information needed for the requested feature.
• Technical information: essential session data and information your browser sends with requests, such as IP address, browser details, and request time, which may be recorded in operational or security logs.

We use this information to create and protect accounts, verify email addresses, provide the features you request, save your settings and paper account, display market and strategy results, operate member chats, respond to support or compliance messages, and maintain the reliability and security of the service.

When you connect a broker, the app uses the supplied credentials to make the account, market-data or trading requests you initiate or enable. Angel One MPIN and TOTP are used for login and are not stored. Paper trading is simulated; it does not place a real order.

We process account and optional broker information to provide the features you request, protect the service, meet legal obligations and respond to support or grievance requests. Optional broker connection and auto trading remain off until you choose to enable them.

You can withdraw optional broker access by disconnecting the broker and can switch auto trading off from the platform. You can also request account-data access, correction or erasure using the contact below. Withdrawal does not affect processing already lawfully completed and may stop the related feature from working.

We use service providers to run the platform, including Supabase for authentication and stored account data, email delivery for account messages, hosting infrastructure, and market or broker services needed for the features you use. Those providers receive the information needed to perform their role. Data may be processed in the locations where those services operate.

We may disclose information when required by applicable law or to protect the service and its users. We do not publish your broker API secret or password in community features.

Essential cookies keep your account signed in and, where you choose to connect one, keep an encrypted copy of your broker connection in your browser session. Browser storage remembers settings such as your last market and timeframe, chart indicators, strategy selection, sidebar layout, watchlist, and local paper-account state. Some of these preferences are device-specific; your paper account is also saved to your signed-in account.

You can sign out, disconnect the broker, or clear browser site data to remove local copies. Clearing site data may also remove device-only preferences and sign you out.

We keep information for as long as it is needed to provide the account and requested features, resolve issues, meet legal obligations, or protect the service. Browser-stored preferences remain on that device until you or your browser clears them. Backups and operational records may remain for a limited period after account data is removed.

We use access controls and secure connections. Authentication cookies are HTTP-only, and broker credentials are encrypted before they are stored. When you connect a broker, the encrypted credentials are saved to your account so you do not have to enter them again, and a copy is kept in an HTTP-only browser cookie. Disconnecting the broker deletes the saved credentials. No online system can guarantee absolute security, so please use a strong password and keep broker API permissions limited.

If a personal-data breach creates a risk to affected users, we will provide legally required notices describing what happened, likely consequences, mitigation steps and a business contact for questions, and will notify the competent authority where applicable.

You can update your display name and password in Settings, manage your saved strategies and preferences, and disconnect an optional broker account. Subject to applicable law, you may request a summary of personal data and sharing, correction, completion, updating or erasure; withdraw consent; raise a grievance; and nominate another individual to exercise rights in the event of death or incapacity.

Send the request from your registered email and describe the right you want to exercise. We may verify account ownership before acting. We aim to acknowledge privacy grievances within 48 hours and resolve them within 30 days; complex or legally restricted requests may require more time, and we will explain the status.

If you withdraw permission needed for a feature, that feature may stop working. Where a legal obligation requires us to keep a record, we may retain only what is necessary.