Privacy Policy & Data Protection

Last Updated: January 2026

Introduction

StockSaathi ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

By using StockSaathi, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

We collect the following personal information when you register:

  • Full Name
  • Email Address
  • Password (encrypted and hashed)
  • Subscription Status and Payment Information

1.2 Usage Data

We automatically collect certain information when you use our service:

  • Browser type and version
  • Device information (type, operating system)
  • IP address (anonymized)
  • Pages visited and time spent
  • Date and time of visits
  • Referring website addresses

1.3 Portfolio and Watchlist Data

If you use our portfolio tracking features, we store:

  • Stock symbols you track
  • Quantities and purchase prices you enter
  • Purchase dates
  • Watchlist preferences

1.4 Payment Information

We collect UPI transaction IDs for payment verification. We DO NOT store your bank account details, UPI PIN, or any sensitive financial credentials. Payment processing is handled by your UPI app directly.

2. How We Use Your Information

We use your information for:

  • Service Delivery: To provide you with stock recommendations, portfolio tracking, and related services
  • Account Management: To create and manage your account, verify your identity, and process subscriptions
  • Communication: To send you service-related notifications, updates, and educational content
  • Payment Processing: To verify your subscription payments and maintain billing records
  • Service Improvement: To analyze usage patterns and improve our platform
  • Security: To detect and prevent fraud, unauthorized access, and technical issues
  • Legal Compliance: To comply with applicable laws and regulations

3. Data Retention Policy

3.1 Active Accounts

We retain your personal data for as long as your account is active and you continue to use our services.

3.2 Inactive Accounts

If your account becomes inactive (no login for 24 consecutive months), we will:

  • Send you email notifications at 18 months and 22 months of inactivity
  • Archive your account data after 24 months
  • Delete archived data after 36 months of total inactivity

3.3 Account Deletion

If you request account deletion:

  • We will delete your personal information within 30 days
  • Portfolio and watchlist data will be permanently removed
  • Transaction records may be retained for 7 years for tax and legal compliance
  • Anonymized usage statistics may be retained for analytical purposes

3.4 Legal Requirements

We may retain certain data longer if required by law, for dispute resolution, contract enforcement, or to prevent fraud and abuse.

4. Data Security & Confidentiality

4.1 Security Measures

We implement industry-standard security measures:

  • Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
  • Password Security: Passwords are hashed using bcrypt with salt
  • Secure Database: MongoDB with access controls and authentication
  • Regular Backups: Automated daily backups to prevent data loss
  • Access Control: Strict access controls limiting who can view your data
  • Monitoring: 24/7 system monitoring for suspicious activity

4.2 Confidentiality Commitment

We treat your information as strictly confidential:

  • Your portfolio holdings and investment data are private and never shared
  • Your email and personal details are kept confidential
  • We do not sell, rent, or trade your personal information to third parties
  • Our team members sign confidentiality agreements
  • Access to user data is logged and audited

4.3 Data Breach Protocol

In the unlikely event of a data breach:

  • We will notify affected users within 72 hours via email
  • We will inform relevant authorities as required by law
  • We will take immediate action to secure the breach
  • We will conduct a thorough investigation
  • We will implement additional safeguards to prevent future incidents

5. Data Sharing and Disclosure

5.1 We DO NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.2 Limited Sharing

We may share your information only in these limited circumstances:

  • Service Providers: With trusted third-party services (hosting, email) who help operate our platform
  • Legal Requirements: When required by law, court order, or government request
  • Protection: To protect our rights, property, or safety, or that of our users
  • Business Transfer: In the event of a merger, acquisition, or sale of assets

5.3 Anonymized Data

We may use and share anonymized, aggregated data that cannot identify you personally for research, analytics, and service improvement purposes.

6. Your Rights

You have the following rights regarding your data:

  • Access: Request a copy of your personal data we hold
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your account and personal data
  • Portability: Request your data in a machine-readable format
  • Objection: Object to processing of your data for certain purposes
  • Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, contact us through our website or email. We will respond within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you logged in to your account
  • Remember your preferences
  • Analyze usage patterns
  • Improve user experience

You can control cookies through your browser settings. However, disabling cookies may affect functionality.

8. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information is primarily stored and processed in India. If we transfer data internationally, we ensure appropriate safeguards are in place.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

  • Posting the new policy on this page
  • Updating the "Last Updated" date
  • Sending you an email notification (for material changes)

Your continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

  • Website: stocksaathi.app
  • Email: Contact form on our website
  • Response Time: Within 72 hours

📋 Quick Summary

  • ✅ We protect your data with industry-standard security
  • ✅ We keep your information confidential
  • ✅ We never sell your personal data
  • ✅ You can request deletion anytime
  • ✅ Inactive accounts deleted after 36 months
  • ✅ Data breach notification within 72 hours

Effective Date: January 1, 2026
Version: 1.0
Governing Law: Laws of India