Privacy Policy

1. Information We Collect

We collect the following categories of data:

• Account data — your name, email address, hashed password, and profile preferences provided at sign-up.
• Broker-connection data — when you link a brokerage account, we receive access tokens and read your market data, positions, orders, holdings, and account identifiers via the broker's official API. We do not collect or store your broker login password.
• Usage and platform data — charts you view, watchlists, strategies, automation workflows, AI agent configurations, journal entries, paper-trade and backtest history, and other content you create.
• Technical data — IP address, device and browser type, operating system, timestamps, and log/diagnostic data generated when you interact with the Platform.
• Communications — messages you send to support and feedback you provide.

2. How We Use Your Information

• To operate, maintain, and secure your account and the Platform;
• To display market data, positions, and analytics, and to run the features you enable;
• To execute orders with your broker only when you explicitly instruct or authorize automation;
• To provide AI-assisted research, agents, and workflows that you configure;
• To improve, debug, and develop the Platform, including aggregated and de-identified analytics;
• To communicate service updates, security alerts, and support responses;
• To comply with legal obligations and prevent fraud or abuse.

3. Cookies and Local Storage

We use cookies and browser storage (such as localStorage and sessionStorage) to keep you signed in, remember your preferences, and understand how the Platform is used. Essential cookies are required for the Platform to function. You can clear or block cookies through your browser settings, but some features may not work correctly if you do.

4. Broker Connections

Broker connections use the broker's official OAuth or API key mechanisms. Access tokens are stored in encrypted form and used solely to provide the features you enable. You can disconnect a linked broker at any time from your account settings; doing so revokes our access going forward. Bheem.Trade does not sell or share your broker data with third parties for marketing.

5. How We Share Information

We do not sell your personal information. We share data only as needed:

• Service providers — hosting, cloud infrastructure, AI model providers, analytics, and email delivery vendors that process data on our behalf under confidentiality obligations;
• Brokers and exchanges — to the extent required to display data or route orders you authorize;
• Legal and safety — when required by law, regulation, or valid legal process, or to protect the rights, safety, and security of users and the Platform;
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.

6. Data Storage and Security

Your data is stored on secured cloud infrastructure. We apply technical and organizational safeguards including encryption in transit, encryption of sensitive tokens, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

7. Data Retention

We retain your personal information for as long as your account is active and for as long as necessary to provide the Platform, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymize it.

8. Your Rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may:

• Access and obtain a copy of the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your account and associated data;
• Withdraw consent or disconnect linked broker accounts;
• Object to or restrict certain processing, and raise a grievance with us.

To exercise these rights, contact us at [support email]. We may need to verify your identity before acting on a request.

9. Children's Privacy

The Platform is not directed to individuals under 18 years of age, and we do not knowingly collect personal information from children. If we learn that we have done so, we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by email, and the "Last updated" date above will reflect the latest revision.

11. Contact and Grievances

For privacy questions or grievances, contact our Grievance Officer at [support email] or by writing to [Registered Entity Name], [Address].