Privacy Policy

Last updated: 11 October 2026

This Privacy Policy explains what personal data TradeLite collects, why, how it is protected, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act), the DPDP Rules, 2025, and the Information Technology Act, 2000 and its rules.

1. Who we are

TradeLite (tradelite.in) is operated by TRADELITE FINTECH PRIVATE LIMITED (CIN U66301TN2025PTC187440) ("TradeLite", "we", "us"), registered office Shop No. 33, 1st Floor, Gemini Parsn Manere, New No. 442 (Old No. 602), Anna Salai, Chennai, Tamil Nadu 600006, India. For the purposes of the DPDP Act we are the Data Fiduciary for the personal data described here.

2. What we collect

Category	Examples	Source
Account data	Email address, password (never stored in plain text), name and profile photo if you sign in with Google, phone number if you add one	You / Google
Broker connection data	Broker name, client code, API key, API secret and the daily session token your broker issues after you log in on the broker's own page	You / your broker
Trading data	Watchlists, chart settings, strategies and their rules, orders, positions, trade history, journal entries, risk limits (loss limit, trade caps, profit lock)	You / your broker
Alert settings	Email addresses or mobile numbers you choose to receive alerts on	You
Technical data	IP address, browser type, device and log data (login times, requests, errors)	Automatically

Where your broker supports it, you log in on the broker's own page and we receive only the session token the broker issues; we never see your broker login password. For brokers that require other credentials (such as a client code or PIN), what you enter is stored encrypted and used only to connect to that broker. We do not collect payment card or bank details. Advertising on our website is described in section 11.

3. Why we use it

To provide the service: run your account, show charts and data, place and track the orders you or your strategies send to your broker, enforce the risk limits you set, and keep your journal.
To keep it secure: authenticate you, detect misuse, investigate incidents and keep audit logs.
To meet legal duties: keep records required by law or by stock exchanges and brokers, and respond to lawful requests from authorities.
To contact you about your account, security, alerts you asked for, and changes to these terms.

We process your personal data on the basis of your consent, given when you create an account and when you connect a broker, and for the legitimate uses permitted under Section 7 of the DPDP Act (such as complying with law). You can withdraw consent at any time (see section 8). Withdrawal does not affect processing already done, but we will not be able to provide the parts of the service that depend on it.

Your broker, only when you connect it: order details and the credentials the broker needs to accept your orders.
Service providers who process data for us under contract: cloud hosting (Amazon Web Services, Mumbai region, India), Google (only if you choose Google sign-in), Google Analytics, which measures visits to our website and the trading app, Google AdSense, which shows ads on our website, and Google Ads and Meta (Facebook and Instagram), which show TradeLite's own ads to people who visited our website (see section 11).
Stock exchanges, regulators, law enforcement or courts, when the law requires it.

We do not sell your personal data. Your account, broker and trading data are never shared with advertisers or used for advertising.

5. Where it is stored

Your data is stored on servers in India (AWS Mumbai). Where a service provider processes data outside India, we do so only as permitted under the DPDP Act.

6. How we protect it

All traffic uses HTTPS (TLS).
Passwords are never stored in plain text. Broker API keys, secrets and session tokens are encrypted at rest.
Broker sessions expire daily and must be re-approved by you on the broker's own page.
Orders to brokers are sent only from our registered static IP address, as brokers require.
Access to production systems is limited to authorised personnel and logged.

No system is completely secure. If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as the DPDP Act requires.

7. How long we keep it

We keep account and trading data while your account is active. After you delete your account, we erase your personal data within 30 days, except records we must keep by law (for example order and audit logs, which we keep for up to 5 years or as long as the law requires). Broker session tokens are discarded when they expire. You can delete your account at any time in the app (avatar → Log out → Delete account) or at tradelite.in/delete-account.

8. Your rights

Under the DPDP Act you can:

ask for a summary of the personal data we hold about you and how we use it;
ask us to correct, complete or update it;
ask us to erase it, or delete your account;
withdraw consent, for example by disconnecting a broker or deleting your account;
nominate another person to exercise these rights if you die or become incapacitated;
raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

To exercise any of these, write to our Grievance Officer (section 10). We respond within 30 days.

9. Children

TradeLite is only for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

10. Grievance Officer and contact

In line with the Information Technology Act, 2000 and the rules under it, and the DPDP Act:

Grievance Officer: Dhakshnamoorthy Shanmugam, Director
Email: tradeliteofficial@gmail.com
Address: TRADELITE FINTECH PRIVATE LIMITED, Shop No. 33, 1st Floor, Gemini Parsn Manere, New No. 442 (Old No. 602), Anna Salai, Chennai, Tamil Nadu 600006, India

We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

11. Cookies and local storage

We use only what the service needs to work: a sign-in session, a short-lived cookie that protects the broker connection step, and browser storage that remembers your chart settings. On our website and in the trading app we also use Google Analytics, which sets cookies to count visits and show which pages are used. It records the pages viewed, not your account, broker or trading data. You can block these cookies in your browser settings or with Google's opt-out add-on at tools.google.com/dlpage/gaoptout.

Advertising. We show ads from Google AdSense on our website. Google and its partners use cookies and similar technologies to show ads and measure them, based on your visits to this and other websites. Google's use of advertising cookies lets it and its partners show ads to you based on those visits. Ads are served by Google, not by TradeLite, and your account, broker and trading data are not shared with Google for advertising. You can turn off personalised ads in Google Ads Settings or opt out of some third-party vendors' cookies at aboutads.info/choices. How Google uses this data: policies.google.com/technologies/partner-sites. Visitors from the European Economic Area, the UK and Switzerland are asked for consent before advertising cookies are used.

Our own ads. Our website also uses the Google tag (Google Analytics and Google Ads) and the Meta Pixel (Facebook and Instagram). They set cookies so that Google and Meta can show TradeLite ads to people who visited our website, and tell us how many of those visitors later created an account. The Meta Pixel is not used inside the trading app. We do not send Google or Meta your name, email, broker or trading data. You can turn off these ads in Google Ads Settings and in Meta's ad preferences. How Meta uses this data: facebook.com/privacy/policy.

12. Changes to this policy

We may update this policy. If the changes are significant, we will tell you by email or in the app before they take effect. The date at the top shows the latest version.