Privacy Policy

1. What we collect

Account. Your full name, email address and password. The password is stored only as a salted hash; we cannot read it. You may add a profile picture, which you can remove at any time.

Trading activity. Your paper orders, positions, closed trades and their reviews, watchlists, price alerts, replay sessions, risk settings and notifications. This is the core of the product, and it is what your dashboard and performance pages are built from.

Discipline Points. The points your account earns, what each award was for (a trade, a replay or a battle) and when, the passes you redeem with them and when each is used, and any correction made to them by our support team, with the reason for it. They are stored with your account to show you your balance, streak and history.

Battles. The battles you create or join, your standings, and the chat messages you send in a room. Voice in a room is streamed live between participants and is not recorded or stored by TradhaLab.

Plan and payments. Which plan you are on, and for a Pro subscription: whether it is monthly or yearly, when the paid period ends, whether you have cancelled, and the reference numbers our payment provider gives each subscription and payment, so we can match its notices to your account. We never receive or store your card number, UPI id, bank details or CVV. Those are entered on the payment provider's checkout and stay with it.

Technical. Your IP address, browser type and the time of each request, in server logs we keep for security and debugging, and the active sessions on your account so you can review and sign them out. If you report a problem from our contact page, the message you send may include the time, your screen size and browser, which help us find it.

2. How we use it

• To run the service: sign you in, fill your paper orders, compute your P&L, send alerts and show your history.
• To run battles: show your name, avatar and standing to the other traders in the same room.
• To run your subscription: apply the right plan limits, keep your Pro access in step with your payments, and show your subscription in Settings.
• To keep the service safe: detect abuse, investigate problems and protect accounts.
• To contact you about your account, such as a significant change to these terms, a change to Pro's price, or a payment that could not be collected. We do not send marketing email.

We do not use your data to train models, build advertising profiles, or make decisions about real-money trading.

3. Cookies and local storage

TradhaLab sets one cookie, a session token that keeps you signed in for 24 hours. It is sent only to TradhaLab and cannot be read by scripts. Your browser also keeps a few preferences in local storage, such as your light or dark theme and your chart layout. There are no analytics or advertising cookies. During a Pro checkout, the payment provider's page may set its own cookies, under its own policy.

4. Who we share it with

We never sell or rent your data. We share it only with the providers that run the service, each bound to use it only for that:

• Hosting and database providers that store the application and its data.
• Voice infrastructure that relays live audio between the traders in a battle room.
• Our payment provider, which collects Pro payments. When you subscribe we pass it your name and email, so your receipt reaches you and your payment can be matched to your account. It tells us whether a payment succeeded, and when a subscription renews, fails or ends. It handles your payment details under its own privacy policy, shown at the checkout.

Market data is fetched by TradhaLab from a licensed provider; your account details and trades are not sent to it. We may also disclose information if the law requires it.

5. How long we keep it

Your data stays for as long as your account exists. Deleting your account from Settings permanently removes your account, paper trades, trade history, watchlist and Discipline Points. Server logs are kept for a short period for security and then discarded. Chat messages in battles you took part in may remain visible to other participants of that battle.

Records of payments you made (the amount, date, plan and the provider's reference numbers, never your payment details) are kept after your account is deleted for as long as tax and accounting law requires, and then discarded.

6. Your rights

Under India's Digital Personal Data Protection Act, 2023, and similar laws, you can

• access your data: your trades and settings are visible in the app, your plan and subscription in Settings › Plan, and Trade History exports every closed trade as a CSV file;
• correct your name, email and profile picture from Settings;
• erase everything by deleting your account from Settings;
• raise a grievance by writing to hello@tradhalab.app. We aim to respond within 30 days.

7. Security

Passwords are hashed, sessions are HTTP-only cookies sent over HTTPS, and the keys we use to talk to our providers never reach the browser. Payment details never reach TradhaLab at all. No system is perfectly secure, so please use a strong, unique password and sign out devices you no longer use.

8. Children

TradhaLab is for adults. You must be at least 18 to create an account, and we do not knowingly collect data from anyone younger. If you believe a minor has an account, write to us and we will remove it.

9. Changes to this policy

We may update this policy as the product changes. The date at the top shows when it last changed, and we will tell you in the app or by email about significant changes. Our Terms of Service explain the rest of the relationship, including Pro's billing and cancellation.