Privacy Policy
Last updated: 2026
This policy explains what personal data ("we") collects through Auto Trading Journal, why, and your rights under India's Digital Personal Data Protection Act, 2023.
What we collect
- Account data: name, email address and a securely hashed password.
- Trading data you provide: tradebook files, and (if you connect Zerodha) orders, trades, positions, holdings, charges and chart data, plus the notes, tags and screenshots you add.
- Broker credentials: if you connect a Kite Connect app, its API key, API secret and daily access token. Secrets and tokens are encrypted at rest.
- Billing data: plan and subscription status. Card, UPI and bank details are handled by Razorpay; we never see or store them.
- Technical data: basic logs (IP address, browser, timestamps) for security and troubleshooting.
Why we use it
Only to provide and secure the service: to build your journal, run the checks you configure, process your subscription, send account emails (like password resets), and prevent abuse. We do not sell your data, use it for advertising, or share it with data brokers.
Who we share it with
Service providers that help us run Auto Trading Journal, under confidentiality obligations: our hosting provider, Razorpay (payments) and our email provider. We disclose data to authorities only when legally required.
How long we keep it
For as long as your account exists. When you delete your account, your journal, files and credentials are deleted immediately. Limited billing records are retained as required by tax law.
Your rights
You can access and export your data (Account → Export), correct it, withdraw consent by disconnecting your broker, and delete your account at any time (Account → Delete). For anything else, or to raise a grievance, contact our Grievance Officer at support@autotradingjournal.com. We respond within 30 days.
Security
Each trader's data is stored separately, connections use HTTPS, passwords are hashed, and broker secrets are encrypted. No system is perfectly secure; we will notify you and the authorities of any breach as required by law.
Cookies
We use one essential cookie to keep you signed in. No advertising or tracking cookies.