Privacy Policy

This Privacy Policy explains what information Trade Connector Indian Market (“we”, “us”) collects when you use the Trade Connector Indian Market platform (the “Platform”), how we use it, and the choices you have. By creating an account or using the Platform, you agree to this policy.

1. What we collect

• Account information — name, email address, phone number, and password (stored hashed, never in plain text).
• Broker connection details — when you connect a Dhan or Zerodha account, we store the access tokens/API credentials needed to place, monitor and manage orders on your own brokerage account, along with identifying details of the connected account (client ID, account label).
• Strategy and trading activity — the strategies you deploy, the inputs you configure, and logs of the orders, fills, and copy-trading activity generated on your connected accounts.
• Copy-trading relationships — if you follow another user’s strategy or master account (or others follow yours), we store the follower/master link and the settings that govern it (e.g. lot multiplier, risk caps).
• Payment records — wallet deposit/withdrawal amount, method, and a reference/transaction ID. We do not collect or store your card, UPI PIN, or net-banking credentials — those are entered directly with our payment gateway partner, never on our servers.
• Usage data — basic technical logs (IP address, browser, device) used for security, debugging and abuse prevention.
• Telegram details — if you enable the Telegram auto-executor, the chat/channel identifiers needed to read signals and confirm executions on your behalf.

2. How broker credentials are stored

Broker API tokens and other trading credentials are encrypted at rest using industry-standard authenticated symmetric encryption (AES-256-GCM) before they are written to our database, with a server-side key that never leaves our infrastructure. Credentials are decrypted only in memory, at the moment they are needed to call your broker’s API on your behalf, and are never displayed back to us or to any user in plain text. We never receive or store your broker account login password.

3. How we use your information

• To create and secure your account, and verify it’s really you.
• To connect to your broker’s API and execute the strategies you configure, on your own account.
• To run the copy-trading relationships you set up, and to show you live status, positions and history.
• To process wallet deposits/withdrawals and keep an accurate transaction record.
• To send service emails/SMS/Telegram messages (verification codes, execution alerts, support replies) — never marketing without your consent.
• To detect fraud, abuse, or violations of our Terms of Service.

4. Sharing and disclosure

We do not sell your personal data. We share the minimum necessary information with:

• Dhan and Zerodha (via their official APIs) — to place and manage orders on the brokerage account you connect. This is the core function of the Platform and happens only for accounts you have explicitly linked.
• Payment gateway partners — to process a wallet deposit you initiate. They receive your name, email, phone and the amount; card/UPI credentials go directly to them, never to us.
• Email/SMS/Telegram providers — to deliver verification codes, execution alerts and account notifications.
• Law enforcement or regulators, only when legally required.

5. Data retention

We keep account, strategy-activity and transaction records for as long as your account is active, and for a reasonable period after (typically up to 7 years for payment and trade records) to meet accounting and legal obligations. You can request deletion of your account and personal data at any time — see Contact below — subject to what we must legally retain.

6. Your choices

• Access, correct, or request deletion of your data via Support.
• Disconnect a broker account at any time from the Brokers page; this revokes the stored credentials for that account.
• Stop following, or remove a follower from, a copy-trading relationship at any time.
• Close your account at any time; historical trade and transaction records remain visible for your own reference where we are required to retain them.

7. Security

Passwords are hashed, sessions are signed and expire, broker credentials are encrypted at rest as described above, and payment confirmations are cryptographically verified before any wallet balance is credited. No method of transmission or storage is 100% secure, but we take reasonable technical and organizational measures to protect your data.

8. Changes to this policy

We may update this policy as the Platform evolves. Material changes will be reflected by updating the “Last updated” date above.

9. Contact

Questions about this policy, or a request to access or delete your data? See our Contact page.