🔒 Your Data, Protected

Privacy Policy

Effective Date: December 5, 2025 | Last Updated: December 5, 2025

1Introduction

IndXPro ("we", "us", "our", or "Platform") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use our AI-powered stock market analysis platform.

This Privacy Policy is compliant with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("IT Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

By using our Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

2Data Fiduciary Information

Under the DPDP Act, IndXPro acts as a "Data Fiduciary" responsible for determining the purpose and means of processing your personal data.

Data Fiduciary Details:

Name: IndXPro

Email: [email protected]

Address: Bangalore, Karnataka, India

3Information We Collect

📝 3.1 Information You Provide

Account Information:Name, email address, phone number, password
Profile Information:Trading experience level, risk tolerance preferences
Payment Information:Billing address, payment method details (processed securely by Razorpay)
Communication Data:Support queries, feedback, correspondence

🔄 3.2 Information Collected Automatically

Usage Data:Scan history, stocks viewed, strategies used, features accessed
Device Information:IP address, browser type, operating system, device identifiers
Log Data:Access times, pages viewed, referring URLs, crash reports
Cookies and Tracking:Session cookies, analytics cookies, preference cookies

🔗 3.3 Third-Party Information

Broker Integration:If you connect your Upstox account, we receive authentication tokens (NOT your broker credentials)
Social Login:If you sign in with Google, we receive your name and email from Google

4Purpose of Data Collection

We collect and process your personal data for the following purposes:

PurposeLegal Basis (DPDP Act)
Provide and maintain Platform servicesContract performance
Process payments and subscriptionsContract performance
Personalize AI recommendationsConsent
Send alerts and notificationsConsent
Improve Platform and AI modelsLegitimate interest
Prevent fraud and ensure securityLegitimate interest / Legal obligation
Comply with legal requirementsLegal obligation

5Data Sharing and Disclosure

5.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the Platform:

🔐Razorpay: Payment processing (PCI-DSS compliant)
💾Supabase: Database and authentication services
📊Upstox: Market data integration (via OAuth, your credentials are never shared with us)
🤖Anthropic: AI analysis services (anonymized market data only)
📧Resend: Email delivery services

5.2 Legal Disclosures

We may disclose your information if required by law or in response to valid requests by public authorities, including SEBI, Income Tax authorities, or law enforcement agencies.

✓ What We Do NOT Share

  • • We do NOT sell your personal data to third parties
  • • We do NOT share your data with advertisers
  • • We do NOT share your trading patterns or portfolio information with other users

6Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Policy:

Account DataRetained while your account is active and for 3 years after deletion
Transaction DataRetained for 8 years as required by Indian tax laws
Usage DataRetained for 2 years for analytics purposes
Log DataRetained for 1 year for security purposes

7Your Rights Under DPDP Act

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

👁️ 7.1 Right to Access

You have the right to obtain confirmation about whether we process your personal data and access a summary of such data.

✏️ 7.2 Right to Correction

You have the right to correct inaccurate or incomplete personal data. You can update most information directly in your account settings.

🗑️ 7.3 Right to Erasure

You have the right to request deletion of your personal data, subject to legal retention requirements. Account deletion can be requested via [email protected].

🚫 7.4 Right to Withdraw Consent

You may withdraw consent for optional data processing at any time. Note that withdrawal may affect certain Platform features.

⚖️ 7.5 Right to Grievance Redressal

You have the right to file a complaint with our Grievance Officer or the Data Protection Board of India.

👤 7.6 Right to Nominate

You have the right to nominate another individual to exercise your rights in case of your death or incapacity.

8Data Security

We implement reasonable security practices as required under the IT Rules and DPDP Act:

🔒Encryption of data in transit (TLS 1.3) and at rest (AES-256)
🔑Secure authentication with password hashing (bcrypt)
🛡️Regular security audits and vulnerability assessments
👥Access controls and role-based permissions
🚨Incident response procedures for data breaches
📚Employee training on data protection

Data Breach Notification: In the event of a data breach, we will notify affected users and the Data Protection Board within 72 hours as required by law.

9Cross-Border Data Transfers

Some of our service providers operate outside India. We ensure that any cross-border transfers comply with the DPDP Act and only occur to countries permitted by the Central Government or with appropriate safeguards in place.

10Cookies and Tracking

We use the following types of cookies:

  • Essential Cookies: Required for Platform functionality (authentication, security)
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Help us understand how users interact with the Platform

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

11Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete such information immediately.

12Grievance Officer

In accordance with the IT Rules and DPDP Act, we have appointed a Grievance Officer to address your concerns:

Grievance Officer

Name: [To be appointed]

Email: [email protected]

Response Time: Within 30 days of receiving a complaint

13Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on the Platform and updating the "Last Updated" date. Your continued use of the Platform after such changes constitutes acceptance of the updated Policy.

📧Contact Us

For privacy-related inquiries, please contact us:

IndXPro Privacy Team

Email: [email protected]

General Support: [email protected]

Website: https://IndXPro.com

BY USING IndXPro, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL DATA AS DESCRIBED IN THIS PRIVACY POLICY.