Last updated: [DD Month 2026]
We collect only the data needed to run your account and alerts, and we never sell it. This policy explains how SMD Fincorp ("SMDIQ-FINTECH") processes personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
What we collect
| Data | Purpose |
|---|---|
| Name, email, phone | Account creation, login, support, service messages |
| Billing details (processed by [Razorpay / payment gateway]) | Payments and GST invoices. We do not store full card or UPI details. |
| Telegram user ID (if you link it) | Sending your alerts |
| Watchlists, alerts, settings, paper trades | Providing the features you use |
| Broker connection tokens (if you connect a broker) | Placing orders you initiate. Stored encrypted; we never see your broker password. |
| Device, IP address, browser, usage logs | Security, fraud prevention, fixing errors, improving the product |
| Audit logs of algo decisions and overrides | Record-keeping and dispute review |
Legal basis
We process data on the basis of your consent given at signup, and for legitimate uses permitted by the DPDP Act such as complying with law and responding to your requests.
Sharing
We share data only with service providers who help run the Services (hosting, payment gateway, email, Telegram, analytics), under confidentiality obligations; with your broker, only when you choose to connect it; and with authorities when required by law. We do not sell or rent personal data.
Cookies
We use essential cookies for login and security, and analytics cookies to understand usage. You can block non-essential cookies in your browser.
Storage and security
Data is stored on servers in [India / region]. We use encryption in transit (TLS), encrypted storage for sensitive tokens, access controls and logging.
Retention
Account data is kept while your account is active and deleted or anonymised within [90] days of closure, except records we must keep by law, such as invoices for 8 years under GST rules.
Your rights
You can access, correct or erase your personal data, withdraw consent, nominate a person to exercise your rights, and raise a grievance. Withdrawing consent may mean we can no longer provide the Services. Email privacy@smdiqfintech.com.
Children
The Services are not meant for anyone under 18, and we do not knowingly collect their data.
Changes
We will notify you by email or in-app before material changes take effect.
Contact and grievances
Grievance Officer: [Full Name], grievance@smdiqfintech.com, [address]. If unresolved, you may complain to the Data Protection Board of India. See Grievance Redressal.