Privacy Policy

Last updated: March 17, 2026

AlgoCharting ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our algorithmic trading platform at algocharting.com. This policy complies with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA) of India.

1. Information We Collect

1.1 Information You Provide

  • Account information: Username, email address, and password (hashed, never stored in plain text).
  • Profile information: Trading preferences, risk level settings, dashboard layout preferences.
  • Exchange credentials: API keys and secrets for connected exchanges (DhanHQ, Delta Exchange, Fyers). These are encrypted at rest using AES-256 encryption.
  • Communications: Any messages, feedback, or support requests you send to us.

1.2 Information Collected Automatically

  • Usage data: Pages visited, features used, strategies configured, orders placed (paper and live).
  • Device information: Browser type, operating system, screen resolution, IP address.
  • Trading data: Order history, position records, portfolio snapshots, strategy performance metrics, P&L records.
  • Log data: Server logs, error logs, and performance metrics for platform monitoring.

1.3 Information from Third Parties

  • Market data: Real-time and historical price data from DhanHQ, Delta Exchange, and other data providers.
  • Exchange account data: Portfolio holdings, order status, and account balances retrieved via your connected exchange APIs.

2. How We Use Your Information

We use your information for the following purposes:

  • Platform operation: Executing trades, running automated strategies, building charts, generating portfolio reports.
  • Account management: Authentication, session management, profile settings.
  • Paper trading: Simulating trades, tracking virtual portfolio performance, generating analytics.
  • AI advisory: Processing market data and your portfolio context to generate AI-powered trading insights. Your data may be sent to third-party AI providers (OpenAI, Anthropic, DeepSeek, xAI) as part of API requests for generating analysis. These providers process data according to their respective privacy policies.
  • Platform improvement: Analyzing usage patterns, fixing bugs, improving features, and optimizing performance.
  • Security: Detecting and preventing unauthorized access, fraud, and abuse.
  • Communication: Sending service-related notifications, security alerts, and platform updates.
  • Monitoring: System health monitoring via Prometheus and Grafana for maintaining platform reliability.

3. Data Storage and Security

3.1 Storage

  • Your data is stored on secure cloud servers hosted in India (DigitalOcean Bangalore region).
  • Database: PostgreSQL with encrypted connections (SSL/TLS).
  • Time-series data: QuestDB for high-frequency tick and candle data.
  • Caching: Redis with authenticated connections.
  • Backups: Encrypted daily backups with AES-256-CBC encryption, stored in DigitalOcean Spaces (Singapore region) with 30-day retention.

3.2 Security Measures

  • All data in transit is encrypted using TLS 1.2+.
  • Exchange API credentials are encrypted at rest using industry-standard encryption.
  • Passwords are hashed using Django's PBKDF2 algorithm with SHA-256 (never stored in plain text).
  • CSRF protection on all forms.
  • Rate limiting on authentication endpoints.
  • Regular security monitoring and automated alerting.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

  • Exchange APIs: Your API credentials are used to communicate with connected exchanges (DhanHQ, Delta Exchange, Fyers) to execute trades and retrieve account data on your behalf.
  • AI service providers: Anonymized or contextual market data may be sent to AI API providers (OpenAI, Anthropic, DeepSeek, xAI) for generating trading insights. No personally identifiable information is included in these requests.
  • Legal obligations: We may disclose information if required by law, regulation, legal process, or governmental request.
  • Security: To investigate, prevent, or address fraud, security issues, or technical problems.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

5. Data Retention

  • Account data: Retained for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
  • Trading data: Paper and live trading history is retained for up to 3 years for analytics, compliance, and dispute resolution purposes.
  • Log data: Server and application logs are retained for up to 90 days.
  • Backup data: Encrypted backups are retained for 30 days on a rolling basis.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable laws, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Erasure: Request deletion of your personal data (subject to legal retention requirements).
  • Data portability: Request your trading data in a machine-readable format.
  • Withdraw consent: Withdraw consent for data processing at any time (this may limit Platform functionality).
  • Grievance redressal: Lodge a complaint with us or the Data Protection Board of India.

To exercise any of these rights, contact us at privacy@algocharting.com.

7. Cookies and Tracking

  • Session cookies: Essential for authentication and maintaining your login session. These are strictly necessary and cannot be disabled.
  • CSRF cookies: Security cookies to prevent cross-site request forgery attacks.
  • Preference cookies: Store your dashboard layout, theme, and notification preferences.

We do not use third-party advertising cookies or trackers. We do not serve ads on the Platform.

8. Third-Party Services

The Platform integrates with the following third-party services:

  • DhanHQ: Indian equity market data and trading execution.
  • Delta Exchange: Cryptocurrency derivatives data and trading execution.
  • Fyers: Additional Indian market data and trading (optional).
  • TradingView: Charting library (Lightweight Charts) — no user data is shared with TradingView.
  • AI providers (OpenAI, Anthropic, DeepSeek, xAI): AI-powered market analysis — only market context is shared, not personal data.
  • Google Fonts: Inter font family loaded from Google's CDN.
  • Bootstrap CDN: UI framework loaded from jsDelivr CDN.

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

9. Children's Privacy

AlgoCharting is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete that data promptly.

10. International Data Transfers

Your data is primarily stored and processed in India. However, when using AI advisory features, market context data may be processed by AI providers whose servers are located outside India (United States). By using these features, you consent to this transfer. We ensure that appropriate safeguards are in place to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or Platform notification. The "Last updated" date at the top indicates the most recent revision. Continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and DPDPA, 2023, the Grievance Officer for AlgoCharting can be contacted at:

13. Contact Us

For any questions or concerns about this Privacy Policy, contact us at: