Privacy Policy

1. Categories of Personal Data We Collect

Under Section 2(t) of the DPDP Act 2023, "personal data" refers to any data about an individual who is identifiable by or in relation to such data. TradeNov collects only the minimum necessary data to operate our financial research and tip marketplace:

• Contact & Identification Data: Full legal name, verified email address, and 10-digit Indian WhatsApp mobile number.
• Authentication Credentials: Cryptographically salted and hashed passwords, and single-use 6-digit Time-based One-Time Passwords (OTP). We NEVER store plaintext passwords.
• Financial & Transactional Data: Wallet top-up logs, UPI transaction reference numbers, order history (unlocked trade tips, VIP passes, courses), and payout account numbers for expert earnings or trader withdrawals. Complete debit/credit card numbers are processed directly by RBI-licensed payment gateways and are never stored on TradeNov servers.
• Market Preferences & Activity: Segment selections (Nifty, BankNifty, Equity Cash, MCX Commodity, Options), saved watchlists, and research bookmark history.
• Technical & Telemetry Data: IP address, browser fingerprint, operating system, device hardware model, app version, and security access timestamps.

2. Lawful Grounds & Purpose Limitation

In accordance with Section 4 and Section 6 of the DPDP Act 2023, TradeNov processes personal data strictly for specified, lawful purposes under either Explicit Consent or Certain Legitimate Uses:

• Real-time Trade Setup Delivery: Dispatching instantaneous buy/sell signals, entry ranges, stop-loss adjustments, and target exits to your registered WhatsApp, Telegram, or push notification channels.
• Account Security & Fraud Prevention: Detecting unauthorized logins, preventing multi-device signal scraping, and ensuring two-factor OTP verification.
• Billing & Tax Compliance: Generating GST-compliant invoices and maintaining statutory transaction ledgers required under Indian taxation and corporate laws.
• Platform Optimization: Analyzing crash logs, server performance, and user interface responsiveness.

3. Strict Non-Disclosure & Zero-Spam Guarantee

4. Protection of Children's Data (Strict 18+ Requirement)

In compliance with Section 9 of the DPDP Act 2023:

• TradeNov is exclusively designed for adult traders and investors aged 18 years and above. Minors under the age of 18 are legally prohibited from opening an account, funding a wallet, or purchasing trading tips.
• We do not knowingly collect personal data from children. We do NOT engage in behavioral monitoring, tracking, or targeted advertising directed at individuals below 18 years of age.
• For complete details on parent rights and instant scrubbing of minor records, review our dedicated Children's Privacy Policy.

5. Technical & Organizational Security Measures

Under Section 8(5) of the DPDP Act 2023, TradeNov implements robust reasonable security safeguards to prevent personal data breach:

• 256-Bit SSL/TLS Encryption: All data transmissions between your browser, mobile app, and backend APIs are protected via TLS 1.3 encryption.
• AES-256 Storage Encryption: Sensitive database records, authentication tokens, and backup vaults are encrypted at rest using AES-256 algorithms.
• Role-Based Access Control (RBAC): Employee access to production databases is strictly restricted by least-privilege principles, multi-factor hardware keys, and audit logging.
• Read our full Data Security & Protection Standards.

6. Data Retention & Right to Erasure (Data Delete Rules)

In accordance with Section 8(7) and Section 12(1)(d) of the DPDP Act 2023:

• Automatic Purging: We retain personal data only for as long as necessary to satisfy the purpose for which it was collected or to comply with statutory legal mandates.
• Right to Erasure: You have the right to request permanent deletion of your TradeNov account and personal data at any time through our Data Deletion Portal or by emailing our Grievance Desk.
• Statutory Record Keeping: Transaction invoices and financial audit logs required under the Indian Income Tax Act, 1961 and GST regulations must be preserved for statutory audit periods (8 years) in an isolated, encrypted ledger. Review our Data Retention & Record Keeping Rules.

7. Your Statutory Rights Under the DPDP Act 2023

As a Data Principal, you are legally entitled to exercise the following rights:

• Right to Access Information: Obtain a summary of personal data being processed and the identities of any data fiduciaries or processors with whom data has been shared.
• Right to Correction & Updation: Request correction of inaccurate, incomplete, or outdated personal credentials.
• Right to Withdraw Consent: Revoke consent previously granted for marketing notifications or optional analytics cookies at any time.
• Right of Grievance Redressal: Direct complaints to our designated Grievance Officer and escalate to the Data Protection Board of India if unresolved.
• Right to Nominate: Nominate another individual to exercise your data rights in the event of death or incapacity.

8. Grievance Redressal Officer Contact Details

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 32 of the DPDP Act 2023, any concerns, questions, or privacy grievances may be directed to our designated officer: