Loading…
Legal
Privacy Policy
AdarshTradeX values your privacy. This page explains what data we collect, how it's used, and the choices you have — written to be read, not just filed.
Last Updated25 July 2026
Version1.0
Effective Date25 July 2026
1. Introduction
AdarshTradeX ("we", "us", "our") operates a subscription platform for trading education, market performance reporting, and a moderated Telegram community. This Privacy Policy explains what information we collect when you visit this site or use an AdarshTradeX account, how it's used, and the choices available to you. It applies to visitors, registered users, and subscribers alike.
2. Information We Collect
We collect a limited set of information needed to operate the platform, secure your account, and process subscriptions.
| Category | Examples | Purpose |
|---|---|---|
| Account information | Email address or mobile number (whichever you sign in with), display name, profile photo | Create and secure your account; identify you when you sign in |
| Session and security data | IP address, browser/device information, sign-in timestamps | Keep your session secure, detect suspicious sign-in activity, and enforce rate limits against abuse |
| Billing information | Subscription plan, payment status, transaction and invoice records | Process and manage your subscription — card and UPI details are collected and processed directly by our payment processor (Razorpay); we never see or store your card number |
| Community information | Telegram account ID and username, if you link Telegram for community access | Grant and manage your access to the members' Telegram community |
| Communications | Support messages and enquiries you send us | Respond to your questions and requests |
3. How We Use Data
Data collected above is used only for the following purposes:
- Providing and securing your account and access to the platform
- Processing subscription payments and maintaining accurate billing records
- Sending service-related communications — sign-in codes (OTP), login notifications, and payment receipts
- Granting and managing Telegram community access tied to an active subscription
- Responding to support and business enquiries
- Detecting and preventing fraud, abuse, and unauthorized account access
5. Security
We apply the following technical measures to protect your account and data:
- Passwords are never stored in plain text — they're hashed with a memory-hard algorithm (scrypt), a unique random salt per password, and a server-side secret
- Sign-in codes (OTP) are stored as a one-way hash, never in plain text, and expire after a short window with a limited number of attempts
- Session tokens are stored as a one-way hash — the actual token in your browser's cookie is never persisted on our servers — and the session cookie is set with httpOnly and secure flags so it can't be read by page scripts or sent over an unencrypted connection
- Sign-in and account-sensitive actions are rate-limited to slow down automated abuse
- Security-relevant account events are recorded in an append-only audit log
6. Third-party Services
Certain functions rely on third-party providers, each processing only what's needed for their function and bound by their own privacy terms:
- Razorpay — payment processing for subscriptions; collects and handles your card/UPI details directly
- Telegram — community access, if you choose to link your Telegram account
- Cloudinary — hosts course video and PDF lesson content (not your profile photo)
- Supabase — our database and file storage infrastructure
- Google — Sign in with Google, if you choose that sign-in method
- Vercel — hosting and site performance monitoring
7. Data Retention
Financial records (payments, invoices, refunds) and security audit logs are retained indefinitely, as is standard for accounting and security accountability purposes. Community-related operational data (completed link requests, used invite links, processed delivery records) is automatically cleaned up on a rolling 30–90 day basis. Other account data — your profile, session history, and verification records — is retained for as long as your account exists, or until you request its deletion.
8. User Rights
You may request to access, correct, or delete the personal data we hold about you, or ask us what we hold. Session and device management (viewing and signing out active sessions) is available directly from your Dashboard's Settings page. Account deletion and data-export requests aren't yet a self-service dashboard feature — reach out using the contact details below and our team will handle the request directly. These rights may be subject to limits under applicable law (for example, we may need to retain financial records regardless of a deletion request).
9. Contact
Questions about this policy can be sent to the team directly — see the contact card below, or visit the Contact page.
Have questions?
Privacy questions?
Reach out directly and the right team will follow up.