Privacy Policy

1. Information We Collect

We only collect information strictly necessary to provide journaling, analytics, and billing services:

• Account Identifiers: Your name, email address, password hash (encrypted via bcrypt with salt factor 10), and profile preferences.
• Trading Data: Trade entry/exit dates, symbols, asset class, trade types (Equity/F&O/Crypto), buy/sell prices, quantity, net P&L, screenshots, strategy tags, and psychology checklists.
• Broker API Tokens: When you connect brokers like Fyers or Zerodha, API keys and session tokens are encrypted client-side and stored in our database via AES-256-GCM cipher encryption.
• Payment Telemetry: Subscription invoices, transaction timestamps, and UPI UTR reference numbers. We do not store credit card numbers or UPI PINs.

2. How We Protect Your Data

TradeLogic Pro employs enterprise-grade cryptographic standards across our entire infrastructure:

• In-Transit Encryption: All data is encrypted with TLS 1.3 / SSL across modern global Edge CDN networks.
• At-Rest Encryption: PostgreSQL databases on Tokyo AWS instances are encrypted with AES-256 block ciphers.
• Zero Plaintext Storage: Passwords and API secrets are never stored in plaintext format.

3. Data Retention & Right to Erasure (GDPR / DPDP Compliance)

In full compliance with the European Union General Data Protection Regulation (GDPR) and the India Digital Personal Data Protection (DPDP) Act 2023, you have the following irrevocable rights:

• Right to Export: You can export your entire trading history at any time in CSV or JSON format.
• Right to Deletion: You can request permanent cascading deletion of your account and all associated trades by contacting support@tradelogicpro.com.

4. Cookies & Local Storage

We use strictly necessary HTTP-only authentication cookies to maintain your login session and local browser storage to save your UI preferences (dark theme, pinned broker selections). We do not use intrusive third-party cross-site advertising cookies.

5. Data Privacy Officer & Contact

For data privacy inquiries, GDPR rights execution, or data deletion requests, contact: