This policy explains how CloudPrax ("we") handles personal data when you use PraxAlpha. We intend to process personal data in line with India's Digital Personal Data Protection Act, 2023 and applicable rules.
1. Data we collect
- Access requests: name, email, mobile number, optional Zerodha client ID and your message.
- Account data: email, hashed password, two-factor authentication settings, and preferences.
- Broker data: the Kite Connect access token (encrypted with AES-GCM), your Zerodha client ID, and orders, positions, trades and fund figures needed to operate the Service.
- Trading configuration: strategies, limits, settings and the signals and orders they generate.
- Security and usage data: IP address, device/browser information, login history and audit logs.
- Notification details: a linked Telegram chat ID and the email address you choose for alerts.
We do not collect or store your Zerodha password, PIN or TOTP. You sign in to Zerodha on Zerodha's own page.
2. How we use it
- to review access requests and contact you about the beta;
- to operate the Service: run your strategies, apply your limits and place orders you have configured;
- to secure the Service, prevent abuse and investigate incidents;
- to send the alerts and account messages you have chosen;
- to meet legal and regulatory obligations.
We do not sell your personal data and we do not use third-party advertising or tracking on this website.
3. Sharing
- Zerodha, to place orders and read account data through Kite Connect, as you authorise.
- Service providers that host our infrastructure or deliver email and Telegram messages, under confidentiality obligations.
- Authorities, where required by law or valid legal process.
4. Security
Data is transmitted over HTTPS. Broker tokens are encrypted at rest, secrets are kept out of source code, and access is restricted and logged. No system is perfectly secure. See our Security page for more detail.
5. Retention
We keep account and trading records while your account is active and for as long as needed to meet legal, tax and dispute-resolution requirements. Access requests that are not approved are deleted after a reasonable period. Broker tokens expire daily and are replaced on reconnection.
6. Your rights
Subject to applicable law, you may ask to access, correct or erase your personal data, withdraw consent, or raise a grievance. Some records may need to be retained for legal reasons. Contact us at support@praxalpha.com.
7. Cookies
This marketing site does not set tracking cookies. The web app uses strictly necessary cookies, such as a secure, httpOnly session cookie, to keep you signed in.
8. Changes
We may update this policy and will notify material changes in the app or by email.
9. Grievance officer
[Name and address to be confirmed]. Email: support@praxalpha.com.