Privacy Policy

1. Overview

This Privacy Policy explains how TradeCraft (“TradeCraft”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects information about you when you use our website, applications, and services (together, the “Service”). The Service lets you build, backtest, and deploy trading strategies and mirror trades across broker accounts you connect.

By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

2. Information we collect

Account information

When you create an account we collect your name, email address, and authentication identifiers. If you sign in with Google, we receive your basic Google profile (name, email, and profile image) through Google OAuth; we do not receive your Google password.

Broker connection credentials

To place and mirror orders on your behalf, you connect one or more broker accounts (for example, Zerodha or Dhan). Depending on the broker, this includes API keys, client identifiers, and access tokens. These credentials are used solely to interact with your broker on your instruction and are never sold or used to trade for our own account.

Trading and usage data

• Strategies, backtest configurations and results, deployments, and mirror-trading configurations you create.
• Records of orders we place or replicate on your behalf, including instrument, quantity, price, timestamps, and status.
• Product usage, feature interactions, and diagnostic logs used to operate and improve the Service.

Technical data

We automatically collect device and connection information such as IP address, browser type, and pages visited, and we use privacy-respecting analytics to understand aggregate usage.

3. How we use your information

• Provide, operate, and maintain the Service.
• Execute, monitor, and mirror the trades and strategies you configure.
• Authenticate you, secure your account, and detect and prevent fraud or abuse.
• Provide customer support and send service-related communications.
• Analyse usage to debug, improve reliability, and develop new features.
• Comply with legal and regulatory obligations.

We do not sell your personal information, and we do not use your broker credentials or trading data for advertising.

4. How we share your information

We share information only as needed to run the Service:

• Brokers. We transmit order and account instructions to the brokers you connect, using the credentials you provide.
• Service providers. Trusted vendors that host our infrastructure, send transactional email, and provide analytics, bound by confidentiality and data-protection obligations.
• Legal and safety. Where required by law, regulation, legal process, or to protect the rights, property, or safety of TradeCraft, our users, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Data security

We use administrative, technical, and organisational measures designed to protect your information, including encryption in transit, access controls, and restricted handling of broker credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, maintain audit and transaction records, and enforce our agreements. When no longer needed, information is deleted or anonymised.

7. Your choices and rights

Subject to applicable law, you can access, correct, export, or delete your personal information, disconnect any broker account at any time, and close your account. To exercise these rights, contact us using the details below.

Disconnecting a broker removes our ability to place new orders on that account; it does not affect orders already placed at the broker.

8. Third-party services

The Service integrates with third parties such as Google (sign-in), your connected brokers, our email provider, and our analytics provider. Their handling of your data is governed by their own privacy policies, which we encourage you to review.

9. Children's privacy

The Service is intended for adults and is not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised Policy.

11. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at [email protected].