Privacy Policy

Last updated:

Version 1.0 · Effective

1. Data We Collect

Account & Identity

Email address (for login, notifications, and password reset).

Device & Usage

Device fingerprint (hashed, for trial abuse prevention), IP address (for security and rate limiting).

Trading Data

Alerts you create, Vault trades (entry/exit, P&L, remarks, charts), and Broker positions if explicitly connected.

Analytics & Feedback

We collect anonymized website traffic data using self-hosted analytics and gather feature requests via our native feedback board. Your data never leaves our servers.

Payments

Payment processing is handled entirely by secure third-party gateways (e.g., Razorpay). We do not collect, store, or process your credit card or UPI PIN data on our servers.

2. How We Use Your Data

Provide the Service: Deliver real-time alerts, Vault analytics, and optional broker sync.
Trial Abuse Prevention: Email, device, and IP uniqueness checks.
Security: Rate limiting, fraud detection, and login alerts.
Compliance: Mandatory tax records and law enforcement requests.

3. Data Sharing & Infrastructure Architecture

We do not sell your personal data. Your user data remains completely safe; it is not routed to or stored on external servers.

Data is only shared when:

You explicitly consent (e.g., connecting a broker API).
Legally obligated by a court order or regulatory request.

4. Data Retention

Account data: Retained while the account exists, plus 30 days post-deletion.
Payment records: Retained for 7 years to comply with Indian tax regulations.
Logs: Access and error logs retained for 180 days (CERT-In mandate).

5. Your Rights (DPDP Act 2023)

Access & Portability: Export your alerts and trades via CSV in the Dashboard.
Correction & Deletion: Update inaccurate data or permanently delete your account via Settings.
Withdraw Consent: You may disconnect your broker or opt out of non-essential communications at any time.

6. Security & Cookies

We utilize bcrypt password hashing, HTTPS encryption, and secure httpOnly cookies for session management.

We do not use third-party tracking cookies or pixels. All analytics are self-hosted and cookie-free.

7. Children's Privacy

TRACO is strictly for individuals aged 18 and above. We do not knowingly collect data from minors.

8. Contact & Grievance Redressal

In accordance with the Information Technology Act and the Digital Personal Data Protection (DPDP) Act, the contact details of the Grievance Officer are provided below:

Grievance Officer: Amritanshu Singh

Email: support@officialtraco.online

Operations: Gorakhpur, Uttar Pradesh, India