Privacy Policy

1. Introduction

Trade Canify Pvt Ltd ("Trade Canify", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the Trade Canify platform and associated services.

This policy applies to all Users of the Platform, including those on the free trial and paid subscriptions. By using the Platform, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

• Name and email address provided during registration
• Password (stored in encrypted, hashed form — never in plain text)
• Phone number, if provided optionally
• Payment information collected by Razorpay (we do not receive or store full card numbers or bank account details — only transaction identifiers and status)

2.2 Trading and Strategy Data

• Strategy configurations, condition trees, indicator parameters, and risk management settings you create
• Backtest inputs, configurations, and result summaries
• Strategy execution logs: order timestamps, order types, execution status, and associated trade metadata
• Exchange Account connection status (we do not store your exchange balance, portfolio value, or trade history — only what is necessary to operate your strategies)

2.3 API Key Data

• Encrypted API Keys you provide to connect your Exchange Account
• API Keys are encrypted at rest using AES-256 encryption and are used exclusively for placing and cancelling orders on your Exchange Account
• We do not use your API Keys to access your account balance, trade history, or any data not required for strategy execution

2.4 Usage and Technical Data

• IP address, browser type, and operating system
• Pages visited, features used, and interaction patterns on the Platform
• Error logs and diagnostic data for platform stability and debugging
• Device identifiers for session management and security

3. How We Use Your Information

• To create and manage your account and provide the Platform's core functionality
• To process subscription payments through Razorpay and manage billing
• To execute automated trading strategies on your connected Exchange Account using your API Key
• To send transactional emails: trial expiry reminders, payment receipts, payment failure notifications, and security alerts
• To diagnose and resolve technical issues and improve platform performance
• To respond to your support queries and feedback submissions
• To comply with legal obligations under applicable law

We do not use your data for advertising, profiling for third-party marketing, or any purpose beyond what is listed above.

4. Third-Party Services

We use the following third-party services that may process your data:

4.1 Razorpay

Razorpay (Razorpay Software Pvt Ltd) processes all subscription payments. Your payment card details and UPI information are handled directly by Razorpay under their Privacy Policy and PCI DSS compliance framework. Trade Canify receives only transaction IDs and payment status — not card numbers, CVVs, or bank account details.

4.2 Amazon Web Services (AWS)

Our Platform is hosted on Amazon Web Services (AWS) infrastructure located in the Mumbai (ap-south-1) region, within India. AWS processes data in accordance with their Privacy Policy and ISO 27001 certification. Your data is stored in India.

4.3 Supported Exchanges

When you connect your Exchange Account via API, your trade orders are transmitted to the exchange for execution. The exchange receives only the order parameters required to execute your strategy (pair, quantity, order type, price). Trade Canify does not transmit any other personal data to the exchange beyond what is inherent in the API order request.

5. Data Storage and Security

All User data is stored on AWS infrastructure in the Mumbai (India) region. We implement the following security measures:

• AES-256 encryption for all API Keys stored at rest
• TLS 1.2+ encryption for all data transmitted between your browser and our servers
• Secure, hashed password storage — passwords are never stored in plain text
• Access controls limiting internal access to personal data on a need-to-know basis
• Regular security audits and monitoring for unusual access patterns

No method of electronic transmission is 100% secure. While we implement industry-standard security measures, we cannot guarantee the absolute security of your data.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:

• With Razorpay, to process your subscription payments
• With AWS, as our hosting infrastructure provider
• With connected exchanges, only the API order data required to execute your strategies
• With law enforcement, courts, or regulatory authorities when required by applicable law, court order, or government directive
• In connection with a merger, acquisition, or sale of assets, provided the acquiring entity agrees to protect your data in accordance with this policy

7. Cookies

The Platform uses essential cookies for session management, authentication, and security. These cookies are strictly necessary for the Platform to function and cannot be disabled.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies that share your data with external parties. We may use first-party analytics to understand how features are used — this data is aggregated and does not identify individual Users.

8. Data Retention

• Active account data: retained for as long as your account remains active
• Strategy configurations and execution logs: retained for 90 days following account termination or deletion
• Payment records: retained for 7 years as required under applicable accounting and tax law
• API Keys: deleted immediately upon account termination or when you remove the connection from your account
• Support correspondence: retained for 2 years

9. Your Rights

As a User, you have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated personal data, subject to legal retention requirements
• Portability: Request your strategy data in a standard exportable format
• Withdrawal of Consent: Disconnect your Exchange Account API at any time, which stops all automated trading immediately

To exercise any of these rights, contact us at anandhu@tradecanify.com. We will respond within 30 days.

10. Children's Privacy

The Platform is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has registered an account, we will promptly delete all associated data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered Users of material changes by email and by posting the updated policy on the Platform. The date at the top of this page indicates when the policy was last updated. Continued use of the Platform after any update constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions, concerns, or requests, contact: