Privacy Policy

Last updated: 23 April 2026 · Effective immediately.

StockSaathi (“we”, “us”) is an educational paper-trading simulator operated as a personal / student project at no charge to users. This policy explains what personal data we collect, why we collect it, how long we keep it, who we share it with, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the DPDP Rules, 2025.

If you are a minor (under 18 years old in India), a parent or lawful guardian must provide verifiable consent before we process your personal data. Contact details for the grievance officer are at the bottom of this page.

1. Who is the data fiduciary

StockSaathi is the data fiduciary for the information you provide while using this service. The service is hosted on Vercel Inc. (United States) and backed by Supabase Inc. (United States). Those companies act as data processors on our behalf.

2. What personal data we collect

Account data: email address, display name, chosen handle, password (stored hashed), date of account creation.

Profile data you provide: optional avatar, bio, age band, school name (if you add it), interests.

Simulation data: virtual trades, virtual portfolio holdings, virtual cash balance, virtual watchlist, virtual transfers between users. None of this reflects real securities, real money, or a real brokerage account.

Coach interaction data: messages you send to the AI coach, responses the coach returns, behavioural signals (e.g. panic-sell detection, FOMO scoring) we compute from your simulated trades. These are shown back to you as reflection prompts; they are not sold or shared externally.

Technical data: IP address (seen by our hosting provider), user agent, referral URL, session timestamps. We do not set advertising cookies.

3. Why we collect it (purposes)

• To create and maintain your account on the simulator.
• To show your simulated portfolio and watchlist.
• To provide the AI coach’s behavioural reflection and educational prompts.
• To let you transfer virtual money between your friends on the platform.
• To debug the service and prevent abuse (rate limits, spam signup blocks).
• To comply with legal obligations that apply to us as a data fiduciary.

4. Legal basis for processing

We process your personal data on the basis of your consent, given when you tick the acknowledgement at signup and each time you use features (coach, friends) that clearly require that data. You can withdraw consent at any time by deleting your account (Settings → Danger Zone → Delete account).

5. Retention

Account + simulation data: retained while your account is active, deleted within 30 days of you deleting the account. Coach chat history: can be cleared at any time from Settings. Backups may retain data for up to a further 90 days before being fully purged.

6. Third parties we share data with

• Supabase Inc. (US) — stores your account, profile, simulated trades.
• Vercel Inc. (US) — hosts the app and its serverless functions.
• Google (Gemini via Vertex AI) — the LLM that generates coach responses. Coach messages are sent to Google and subject to Google’s enterprise data-retention terms.
• Anthropic (optional, only if the user brings their own key) — alternative LLM backend.
• Yahoo Finance, CoinGecko, AMFI/MFAPI — public price feeds we query anonymously on your behalf; no personal data is shared with them.

We do not sell your personal data. We do not share it with advertisers or data brokers. We do not use it to build advertising profiles.

7. Cross-border data transfer

Because our hosting and LLM providers are based in the United States, your data is transferred out of India for processing. By using StockSaathi you consent to this transfer. The Government of India may notify restricted jurisdictions under Section 16 of the DPDP Act; we will comply with any such restriction as it applies.

8. Children’s data (under 18)

StockSaathi is an educational tool designed to be usable by teenagers learning about markets. If you are under 18, please use the service with the knowledge and consent of a parent or lawful guardian. A parent may email the grievance officer below at any time to request that we erase a minor’s account and all associated data.

We do not use children’s personal data for advertising, tracking across third-party websites, or targeted profiling. The behavioural coach operates only on the user’s own simulated trades inside the app and exists solely to return educational reflection to that same user.

9. Your rights

Under the DPDP Act you have the right to:

• Access the personal data we hold about you.
• Correct or update any inaccurate data.
• Erase your data (by deleting your account).
• Nominate another person to exercise these rights on your behalf if you are unable to.
• Grievance redressal — see the next section.

10. Grievance officer

For any data-protection question, complaint, or a request to exercise the rights above, please write to:

Grievance Officer — StockSaathi
Email: grievance@stocksaathi.co.in
Response SLA: within 7 working days.

If you are not satisfied with our response you may escalate to the Data Protection Board of India once it is operational. See the Ministry of Electronics and Information Technology’s DPDP Board notification for contact details.

11. Changes to this policy

We will update this page when the way we collect or use data materially changes. The “Last updated” date at the top reflects the latest revision.