Privacy Policy

1. Information We Collect

In operating our institutional algorithmic trading platform, we collect only the minimum information necessary to provision servers and ensure operational reliability:

• Registration Details: Your name, email address, and mobile phone number for onboarding and Telegram group verification.
• Broker Identifiers: Your Broker Client ID (e.g., Zerodha, Angel One) strictly for mapping to your dedicated cloud node.
• System Telemetry: CPU utilization, RAM usage, disk storage, bot process heartbeat, network latency, and daily consolidated trading P&L metrics.
• Log Files & Diagnostics: Execution timestamps, API response codes, and error logs generated during automated trading hours.

2. Information We Never Collect or Store

To preserve absolute user autonomy and confidentiality:

• We NEVER have access to your bank account funds, demat stock holdings, or trading capital. All funds remain strictly within your personal broker account.
• We NEVER store your Broker Login Password or MPIN. All trading access is established solely through official broker API authentication.
• We NEVER sell, monetize, lease, or distribute your personal trading logs or algorithmic configurations to any third-party broker or marketing agency.

3. How We Use Your Information

Information gathered is utilized strictly for technical and operational purposes:

• Provisioning and maintaining dedicated AWS EC2 sub-servers.
• Transmitting real-time automated order alerts and trailing stop notifications to our Telegram channel (`@pre_vip_signals`).
• Monitoring system health to prevent bot crashes, memory leaks, and broker token expiries.
• Providing prompt technical support and infrastructure upgrades.

4. Data Encryption & Security Standards

SmartAlgo Signal enforces defense-in-depth security across all software tiers:

• Transport Layer Security (TLS 1.3 / HTTPS): All communications between user browsers, the Master Hub, and sub-server nodes are encrypted with high-grade SSL/TLS certificates.
• HMAC-SHA256 Digital Signatures: Every telemetry packet sent between nodes includes a cryptographic nonce and SHA256 digest to prevent spoofing or replay attacks.
• Server Access Restrictions: Production servers operate with password authentication disabled, accessible only through 4096-bit RSA SSH keys. Local Linux UFW firewalls restrict incoming traffic strictly to required ports.

5. Cookies & Local Browser Storage

Our web applications (`smartalgosignal.in`) do not use tracking or advertising cookies. We utilize:

• Local Storage (`localStorage`): To temporarily preserve your authenticated session token (`sa_master_token`) for the Command Center.
• Session Cookies: Standard HTTP-only cookies to maintain administrative state while logged in. These tokens expire automatically upon logout or after 24 hours.

6. Compliance with Indian Data Protection Laws

Sidshlok Venture operates in strict compliance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act (DPDP Act), 2023. We disclose personal data only when strictly mandated by a lawful order from a competent Indian court, law enforcement agency, or the Securities and Exchange Board of India (SEBI).

7. Data Retention & Right to Erasure

Upon subscription termination or account decommissioning, all temporary environment files, broker session tokens, and virtual machines are securely destroyed and deleted from our AWS cloud infrastructure. Users may request permanent deletion of their registration records by emailing our support desk.

8. Grievance Officer & Privacy Contact

For any questions, data modification requests, or privacy concerns regarding this policy, please reach out to our designated Data Protection desk:

• 📧 Support Email: support@smartalgosignal.in
• ✈️ Telegram Support: t.me/pre_vip_signals
• 🏢 Technology Publisher: Sidshlok Venture (Pune / Mumbai, Maharashtra, India)