Privacy Policy

1. Information We Collect

To provide automated trading services, we must collect specific information from you:

• Account Information: Name, email address, phone number, and account credentials created for our app.
• Financial & Trading Data: Demat account details, broker names, trading history, open positions, and margin balances.
• API Keys and Access Tokens: To execute trades automatically, we collect the API keys, secret keys, or OAuth access tokens provided by your broker.
• Device and Usage Data: IP address, device type, operating system, and how you interact with our app (logs and crash reports).

2. How We Handle Demat API Keys and Credentials

The security of your broker API keys is our highest priority.

• No Primary Passwords: We do not ask for, nor do we store, the primary login password to your Demat account. We rely strictly on API keys or secure access tokens generated by your broker.
• Encryption: All API keys and access tokens are encrypted both in transit (using TLS/SSL) and at rest within our databases using industry-standard encryption protocols.
• Restricted Access: Your API keys are used solely by our algorithmic trading engine to execute trades based on the parameters you select. Human staff do not have access to view your unencrypted API keys.
• Revocation: You maintain the right to revoke our API access at any time directly through your broker's dashboard or within our app settings.

3. How We Use Your Information

We use your data strictly to deliver and improve our services:

• To connect to your broker and execute automated trades on your behalf.
• To display your portfolio, trade history, and performance metrics within the app.
• To send you critical alerts regarding trade executions, errors, or margin requirements.
• To troubleshoot technical issues and improve the app's performance and algorithms.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal or financial data. We only share information under the following circumstances:

• Your Broker: We transmit necessary data (order details, API tokens) directly to your designated broker to execute trades.
• Service Providers: We may use secure third-party cloud hosting and infrastructure providers to operate the app. These providers are bound by strict confidentiality agreements.
• Legal & Regulatory Obligations: We may disclose your information if required by law, court order, or a regulatory authority (such as SEBI or other financial regulators).

5. Data Security

We implement robust technical and organizational measures to protect your data against unauthorized access, loss, or alteration. However, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for keeping your Auto Trades app login credentials confidential and for securing the primary access to your Demat account.

6. Your Rights and Data Deletion

You have the right to access the personal data we hold about you, correct inaccurate information, or request deletion of your account and associated data.

Account Deletion: If you choose to delete your Auto Trades account, we will permanently delete your API keys and access tokens from our active databases. (Note: We may retain certain transaction logs as required by law for compliance and audit purposes).

7. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Nashik, Maharashtra.