Privacy Policy

Welcome to Tradora. Your privacy matters to us and we are committed to being transparent about how we collect, use, store, share, and protect your personal information. This Privacy Policy applies to all users of tradora.in and any related services, mobile-accessible features, or communications we send to you.

Please read this Policy carefully. By creating an account or using any part of the Tradora platform, you acknowledge that you have read, understood, and agreed to the practices described below. If you disagree with any part of this Policy, you should not use the platform.

1. Who We Are

Tradora is an educational paper-trading simulator operated from India. We are not a stock broker, investment adviser, research analyst, portfolio manager, or any SEBI-registered financial intermediary. Our platform allows users to practice equity and derivatives trading using virtual funds against live National Stock Exchange (NSE) data, strictly for learning and skill-building purposes.

For any privacy-related questions, you can reach us at: support@tradora.in.

2. Information We Collect

We collect only the information needed to provide and improve our service. This falls into two categories:

2.1 Information you provide directly

• Registration data: your name, email address, and a password (stored as a salted cryptographic hash — we never store plain-text passwords).
• Profile information: optional display name, trading experience level, and preferences you set during onboarding.
• Payment information: when you subscribe to a paid plan, billing is handled by our payment processor (Razorpay). Tradora does not store full card numbers, CVV codes, or UPI IDs. We receive only a transaction reference, subscription status, and anonymised billing details.
• Communication data: messages you send to us via email or the contact form, including any attachments or feedback you voluntarily provide.
• KYC data (optional): if you choose to complete optional identity verification for leaderboard or competition features, we may collect a government ID reference. This data is stored securely and is not used for any financial onboarding.

2.2 Information collected automatically

• Usage data: pages visited, features used, virtual trades placed, session duration, and navigation patterns within the platform.
• Device and browser data: IP address, browser type and version, operating system, screen resolution, and referring URL.
• Log data: server-side logs recording request timestamps, response codes, and error messages for security and debugging.
• Cookies and local storage: session identifiers, preferences, and analytics cookies. See Section 6 for full cookie details.

3. How We Use Your Information

We use the data we collect for the following specific purposes:

• Platform operation: to create and manage your account, authenticate you securely, process virtual trades, and display your portfolio data.
• Payment processing: to manage subscription billing, issue invoices, and handle refund requests in accordance with our Refund Policy.
• Educational feedback: our AI learning assistant analyses your simulated trade history to generate personalised educational insights. This processing is performed on anonymised trade data.
• Communications: to send you transactional emails (account verification, password resets, subscription confirmations), and with your explicit consent, periodic product updates or learning resources.
• Safety and compliance: to detect and prevent fraud, abuse, and violations of our Terms and Conditions; to comply with applicable Indian laws and regulations.
• Platform improvement: to analyse aggregate usage patterns, fix bugs, and develop new features. This analysis is performed on anonymised or pseudonymised data wherever possible.

We do not use your personal data to provide investment advice, generate buy/sell recommendations, or make any real-world financial decisions. We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

4. Legal Basis for Processing

Where applicable, our legal basis for processing personal data includes: (a) contractual necessity — processing required to provide the service you signed up for; (b) legitimate interests — security monitoring, fraud prevention, and platform improvement; (c) consent — marketing emails and optional analytics cookies; and (d) compliance with legal obligations under applicable Indian law.

5. Data Sharing and Disclosure

We share personal data only in these limited circumstances:

• Service providers: we use third-party vendors to operate the platform, including Razorpay (payment processing), SendGrid/SMTP providers (email delivery), and cloud hosting providers. Each is bound by contractual data-processing agreements and may not use your data for their own purposes.
• Market data providers: we use the Upstox API for live NSE data. Trade simulation requests use anonymised session tokens — your personal identity is not shared with market data providers.
• Analytics: we use aggregated, anonymised analytics to understand platform usage. No individually identifiable data is shared with analytics platforms beyond IP-anonymised access logs.
• Legal requirements: we may disclose information if required by a court order, government authority, or applicable law. We will notify you of such requests where legally permitted to do so.
• Business transfer: in the event of a merger, acquisition, or asset sale, your data may be transferred to the new entity, who will be required to honour this Privacy Policy.

6. Cookies and Tracking

Tradora uses the following types of cookies and similar technologies:

• Strictly necessary cookies: session authentication tokens required for you to log in and use the platform. These cannot be disabled without breaking platform functionality.
• Preference cookies: store your UI preferences such as chart settings and notification toggles.
• Analytics cookies: collect anonymised data about how visitors use the website to help us improve the platform. These are only set with your consent.
• Third-party advertising: Google AdSense may place cookies to show relevant advertisements on the platform. You can manage ad personalisation at adssettings.google.com.

You can control or disable cookies at any time through your browser settings. For full details, see our Cookie Policy.

7. Data Retention

We retain your personal data for as long as your account is active and for a period of 3 years after account deletion, to comply with our legal and financial record-keeping obligations. Anonymous usage data and aggregated analytics may be retained indefinitely. You may request deletion of your personal data at any time (see Section 9).

8. Data Security

We employ industry-standard security controls to protect your data, including TLS encryption for all data in transit, bcrypt hashing for passwords, access controls limiting data to authorised personnel only, regular security audits, and CSRF/XSS protections across all application endpoints. Despite these measures, no system is 100% secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect any unauthorised access to your account.

9. Your Rights

You have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: update or correct inaccurate information via your Account Settings or by contacting us.
• Deletion: request that we delete your account and personal data. Submit a deletion request from Settings → Account, or email us.
• Data portability: request your virtual trade history and portfolio data in a machine-readable format (CSV/JSON).
• Opt-out of marketing: unsubscribe from marketing emails at any time using the unsubscribe link in any email, or from Settings → Preferences.
• Withdraw consent: where processing is based on consent (e.g., analytics cookies), you may withdraw consent at any time without affecting prior processing.

To exercise any of these rights, email us at support@tradora.in. We will respond within 30 days.

10. Children's Privacy

Tradora is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has created an account, please contact us at support@tradora.in and we will promptly delete the account and associated data.

11. International Users

Tradora is operated from India and its services are intended primarily for Indian residents. If you access the platform from outside India, you acknowledge that your information may be transferred to and processed in India, where data protection laws may differ from those in your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) and by posting a prominent notice on the website with the updated effective date. Your continued use of the platform after changes are posted constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact our support team:

• Email: support@tradora.in
• Contact form: tradora.in/contact
• Response time: within 2 business days