1. Information We Collect
- Phone number — for WhatsApp OTP authentication
- Email address — for account communication
- Full name — for account identification
- PAN number — for KYC compliance (optional, stored encrypted)
- Broker credentials — API keys stored encrypted, never shared
- Usage data — pages visited, actions taken (for service improvement)
2. How We Use Your Information
- To provide research recommendations and trade execution services
- To send trade alerts via WhatsApp (with your consent)
- To comply with SEBI regulations and maintain audit trails
- To improve our platform and user experience
- To communicate important updates about your account
3. Data Protection (DPDP Act 2023)
In compliance with the Digital Personal Data Protection Act, 2023:
- We obtain explicit consent before collecting your data
- Data is processed only for the stated purposes
- We implement reasonable security safeguards
- You can request deletion of your data at any time
- We do not sell or share personal data with third parties for marketing
4. Data Security
- All sensitive data is encrypted at rest (AES-256-GCM)
- Broker API keys are encrypted and never exposed
- JWT tokens are HttpOnly cookies — not accessible via JavaScript
- All API communication is over HTTPS
- Regular security audits and penetration testing
5. Data Retention
We retain your data for as long as your account is active, plus 5 years as required by SEBI regulations for audit and compliance purposes.
6. Your Rights
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Opt out of non-essential communications
- Data portability upon request
7. Contact
For privacy-related queries, contact our Data Protection Officer at privacy@vaishnavira.in