Privacy Policy

1. Information We Collect

We collect information to provide, maintain, and secure our automated trading software services:

• Personal Identity Information: Full name, email address, phone number, and billing details collected upon account registration or contact submission.
• Broker API Configuration Data: API Keys, Client IDs, and temporary session authorization tokens issued by your broker. These are encrypted at rest using AES-256 standards.
• Trading Automation Telemetry: Webhook request payloads, alert timestamps, symbol strings, order response payloads, and execution latency logs.
• Technical & Device Data: IP address, browser type, operating system, session duration, and referrers collected automatically when accessing our web dashboard.

2. How We Use Your Information

Your data is processed strictly for the following operational purposes:

• Authenticating your account and routing your webhook triggers to your designated broker API.
• Maintaining real-time execution logs and delivering webhook status notifications.
• Billing subscriptions, issuing tax invoices, and preventing fraudulent transactions.
• Providing customer support and debugging connection errors between charting tools and brokers.
• Complying with statutory reporting, anti-money laundering (AML), and SEBI guidelines where legally mandated.

We never sell, monetize, or rent your personal information or trading logs to third-party advertisers or hedge funds.

3. Data Sharing & Third-Party Service Providers

We share minimal essential data solely with trusted infrastructure vendors:

• Your Connected Broker: Order payloads (symbol, action, price, quantity) are transmitted directly to your broker's API endpoints for execution.
• Cloud Infrastructure: Tier-4 secure data center and server providers located within India or compliant global jurisdictions.
• Payment Gateways: RBI-authorized payment processors (e.g., Razorpay, Cashfree) handle payments over TLS-encrypted connections. We do not store credit card or CVV details.
• Legal & Regulatory Authorities: When required by enforceable court order, SEBI directive, or government statutory body under Indian law.

4. Cookies & Tracking Technologies

We utilize essential cookies to keep you logged in to our dashboard, protect against CSRF attacks, and preserve session state. We do not deploy intrusive third-party cross-site behavioral tracking cookies. You may modify your browser settings to decline cookies, though certain dashboard functionalities may become restricted.

5. Data Security Standards

We employ enterprise-grade technical safeguards to protect your data:

• End-to-end transport layer security (TLS 1.3 / HTTPS) for all web and API communications.
• Military-grade AES-256 encryption for stored API tokens and webhook secrets.
• Strict least-privilege role-based access control (RBAC) across our engineering team.
• Automated intrusion detection, rate limiting, and DDoS mitigation.

6. Data Retention Policy

We retain personal account information as long as your account remains active. Execution telemetry and webhook logs are automatically pruned after 90 days. Invoices and accounting records are retained for the statutory period mandated under the Indian Companies Act and GST rules (typically 8 years).

7. Your Rights Under Indian Data Protection Law

Under the Digital Personal Data Protection Act (DPDPA), 2023, you have the right to:

• Access a summary of personal data being processed by Finovextech.
• Request correction or updating of inaccurate personal data.
• Request erasure of your personal data upon closure of your account (subject to legal retention requirements).
• Revoke API tokens and disconnect broker bridges at any moment via the dashboard.
• Nominate an individual to exercise rights on your behalf in the event of incapacity.

8. Children's Privacy

Our platform is strictly intended for individuals who are 18 years of age or older and eligible to operate demat accounts in India. We do not knowingly solicit or collect personal information from minors. If we discover that a minor has created an account, it will be terminated immediately.

9. Changes to this Privacy Policy

We may update this policy periodically to reflect enhancements in our architecture or changes in Indian data privacy statutes. We will notify active users via email or an in-app banner prior to significant revisions taking effect.