Privacy Policy — TradeCal

TradeCal ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. What We Collect

Information you provide voluntarily:

Email address (when you subscribe to our newsletter)
Account information (if you create an account for premium features) — email, hashed password, optional name
Trade data you choose to save in our trade journal feature
Messages you send via our contact form

Information collected automatically:

IP address, browser type, device type, operating system
Pages visited, time spent, referrer URL
Cookies (see Section 5)

We do not collect: PAN, Aadhaar, bank account numbers, demat account details, or any KYC documents. We do not need this information to operate.

2. How We Use Your Data

To send you newsletters you've subscribed to (you can unsubscribe anytime)
To provide and maintain account features (saved trades, preferences)
To analyze how the Site is used so we can improve it
To respond to your inquiries
To prevent fraud and abuse
To comply with legal obligations

We do not sell your personal data to third parties. Ever.

3. Legal Basis (DPDP Act)

Under the DPDP Act, 2023, we process your personal data based on:

Consent — for newsletter subscription and account creation
Legitimate use — to provide the service you've requested
Compliance with law — if required by Indian authorities

4. Third-Party Services

We use the following third-party services. Each has its own privacy policy:

Google Analytics — anonymized usage analytics
Google AdSense — displays ads, may use cookies for personalization
Mailchimp / ConvertKit — newsletter delivery (we share only your email)
Vercel / Netlify — website hosting (server logs)
Cloudflare — CDN and DDoS protection (IP addresses)

These services may transfer data outside India. We rely on standard contractual clauses or equivalent safeguards.

5. Cookies

We use cookies for:

Essential — login sessions, preferences (cannot be disabled)
Analytics — understanding how the Site is used
Advertising — Google AdSense personalization (you can opt out at adssettings.google.com)

You can control cookies through your browser settings.

6. Your Rights (DPDP Act)

You have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Erase your personal data (subject to legal retention requirements)
Withdraw consent at any time
Nominate someone to exercise your rights in your absence
Lodge a complaint with the Data Protection Board of India

To exercise any of these rights, email us at privacy@tradecal.in. We will respond within 30 days.

7. Data Retention

We retain personal data only as long as necessary:

Newsletter emails — until you unsubscribe
Account data — until you delete your account
Server logs — 90 days
Analytics — 26 months (Google Analytics default)

8. Security

We use industry-standard security measures: HTTPS encryption in transit, password hashing (bcrypt), access controls, and regular security updates. However, no system is 100% secure. If we become aware of a breach affecting your personal data, we will notify you and the Data Protection Board as required by the DPDP Act.

9. Children

This Site is not intended for users under 18. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us immediately for deletion.

10. Changes to This Policy

We may update this Privacy Policy. Material changes will be announced on the Site and via email (if you've subscribed). Continued use after changes constitutes acceptance.

11. Contact

Data Fiduciary: TradeCal
Email: privacy@tradecal.in
Address: Jaipur, Rajasthan, India