Legal

Privacy Policy

What we collect, why, and how to get it deleted.

Last updated 9 September 2026
Draft for review. Replace every [bracketed placeholder] with your registered details and have this checked by a lawyer before you rely on it. This is not legal advice.

1. Who is responsible

[Legal entity name], [registered address], India, is the data fiduciary for personal data processed through Dalal Journal. Contact [your@email.com] for any privacy question.

2. What we collect

  • Account: email address and a hashed password. We never store your password in readable form.
  • Access requests: name, phone, email, broker, years trading, capital range and your message.
  • Trading data: the trades you enter or import — instrument, strike, prices, quantity, P&L, notes.
  • Broker credentials: API tokens and client ids you choose to connect.
  • Technical: IP address and basic request logs, used for rate limiting and debugging.

We do not collect your bank details. Payments, where applicable, are handled by the payment gateway.

3. Why we use it

  • To run the Service — analytics, backtests, alerts and, if you enable it, order placement.
  • To contact you about your account and your access request.
  • To keep the Service secure and within rate limits.

We do not sell your data, and we do not use your trades to advertise to you.

4. Broker credentials

Broker tokens are stored so the Service can call your broker on your behalf. They are used for no other purpose, are never shared, and can be removed by you at any time from Settings or by invalidating the token with your broker.

5. AI processing

Features such as trade review, the daily brief and the co-pilot send the relevant trade or market context to a third-party AI provider to generate a response. Only what is needed for that request is sent. Do not paste anything into those fields you would not want processed externally.

6. Sharing

We share data only with processors needed to run the Service: hosting, your chosen broker, the SMS and WhatsApp gateway used for alerts, the AI provider above, and (for paid plans) the payment gateway. We disclose data if legally required.

7. Retention

Account and trading data are kept while your account is open. Access requests are kept for [24] months. On deletion, your account and trades are removed; backups roll off within [30] days.

8. Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent for optional processing. Write to [your@email.com] and we will respond within [30] days.

9. Security

Passwords are hashed, traffic is encrypted in transit, and access is limited to what is required to operate the Service. No system is perfectly secure; tell us immediately if you suspect a problem.

10. Cookies

We use a session cookie to keep you signed in. The marketing pages set no advertising or tracking cookies.