← Back to Home
Privacy Policy
Last updated: July 2026
1. What We Collect
- Email address and name — from Google Sign-In, used to identify your account
- Profile picture — from Google, displayed in your dashboard
- Trade history data — from CSV files you upload (symbol, date, price, quantity)
- Analysis results — DNA scores, patterns detected, generated from your data
2. What We Do NOT Collect
- We do NOT access your broker account
- We do NOT store passwords (Google handles authentication)
- We do NOT collect payment information (free tier)
- We do NOT track your browsing behavior outside this site
- We do NOT use cookies for advertising
3. How We Store Your Data
- Server-side: Your account info and upload history are stored in an encrypted database hosted on Railway (cloud infrastructure, servers in US)
- Browser-side: Your latest report data is stored in your browser's localStorage for fast loading. This stays on YOUR device only.
- CSV files: We process your CSV in memory during analysis. The raw file is NOT permanently stored. Only the computed analysis results are saved.
4. Data Encryption
- In transit: All data is encrypted via HTTPS/TLS (SSL certificate provided by Railway)
- At rest: Database is stored on Railway's infrastructure with standard filesystem encryption
- Passwords: Not applicable — we use Google OAuth (no passwords stored)
5. Who Can See Your Data
- Only you. Your trade data and analysis are private to your account.
- We (the developers) may access aggregate, anonymized statistics for product improvement. We will never look at individual user trade data without explicit permission.
- We do NOT sell, share, or provide your data to any third party.
6. Data Retention
- Your data is retained as long as your account exists
- You can delete your account and ALL associated data at any time from the Dashboard
- Upon deletion, all data (email, trade history, analysis results) is permanently removed within 7 days
7. Your Rights (DPDPA Compliance)
Under India's Digital Personal Data Protection Act (2023), you have the right to:
- Access all data we hold about you
- Correct inaccurate data
- Delete your data ("Right to Erasure")
- Withdraw consent for data processing
To exercise any of these rights, email us at [email protected]
8. Third-Party Services
- Google Sign-In: We use Google's OAuth for authentication. Google's privacy policy applies to the sign-in process.
- Railway: Our hosting provider. Their infrastructure is SOC 2 compliant.
- No analytics tools: We do not use Google Analytics, Facebook Pixel, or any tracking scripts.
9. Children
This platform is intended for users aged 18 and above. We do not knowingly collect data from minors. If you are under 18, please do not use this service.
10. Changes to This Policy
We may update this policy as the product evolves. Significant changes will be communicated via email to registered users.
11. Contact
For privacy concerns: [email protected]
For general feedback: [email protected]
12. Grievance Officer (IT Act Compliance)
Name: Data Protection Officer, Options Tycoon
Email: [email protected]
If you have any complaints regarding the processing of your personal data, you may contact our Grievance Officer. We will acknowledge your complaint within 24 hours and resolve it within 30 days.