Privacy Policy

At LockMyTrades ("we", "us", "our", "the Service"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use our Software-as-a-Service (SaaS) productivity application. This policy is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

1. Information We Collect

1.1 Account & Identity Data

• Email address (required for account creation and authentication)
• Full name (if voluntarily provided)
• Authentication tokens and session data

1.2 Behavioral & Activity Data

• MetaTrader account identifiers (used for software license binding only)
• Account status (demo/live, used solely for feature unlocking)
• Activity logs (for displaying YOUR own historical activity in the journal feature)
• Rule violation events (when YOUR pre-defined rules trigger software blocks)
• Pre-trade check responses (emotions, risk inputs, setup tags you voluntarily provide)

1.3 Technical Data

• IP address (for security and abuse prevention)
• Browser type, device information, operating system
• Usage analytics (page views, feature usage, performance metrics)

1.4 Payment Data

Payment processing is handled exclusively by RBI-licensed Payment Aggregators and PCI-DSS compliant international payment service providers. We do not store credit card numbers, CVV codes, UPI PINs, or full payment instrument details on our servers. Our payment partners provide us only with transaction confirmation, subscription status, and minimal billing metadata.

2. How We Use Your Data

We use the collected data strictly for the following purposes:

• Service Delivery: Operating the LockMyTrades software, enforcing your self-defined rules, syncing your journal, and providing analytics dashboards
• Account Management: Authentication, subscription billing, license verification
• Support: Responding to your support queries and troubleshooting issues
• Service Improvement: Aggregated, anonymized analytics to improve product features (you can opt out)
• Legal Compliance: Meeting tax, GST, and regulatory requirements under Indian law
• Security: Detecting fraud, abuse, and unauthorized access

We do NOT sell, rent, or trade your personal or behavioral data to third parties, brokers, prop firms, advertisers, or data brokers.

3. Data Sharing & Third Parties

We only share your data with:

• Cloud Infrastructure Providers: Hosting and database services (data stored in secure data centers with industry-standard encryption)
• Payment Processors: RBI-licensed Payment Aggregators for processing subscription payments
• Email Service Providers: Transactional emails (account confirmations, password resets, billing notices)
• Optional Integrations: If you voluntarily enable Telegram alerts or TradingView webhooks, relevant connection metadata (Chat IDs, Webhook URLs) is processed solely to deliver those features
• Legal Authorities: Only when required by valid Indian law, court order, or regulatory subpoena

4. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit (HTTPS-only)
• Encryption at rest for sensitive database fields
• Row-Level Security (RLS) policies ensuring you can only access your own data
• Regular security audits and vulnerability assessments
• Access controls limiting employee access on a strict need-to-know basis
• Two-factor authentication (2FA) available for all accounts

However, no method of internet transmission or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy:

• Active Account Data: Retained while your subscription is active
• Activity Logs & Journal Entries: Retained for up to 12 months after your last login or until you delete them
• Payment Records: Retained for 7 years (mandatory under the Indian Income Tax Act and GST Act)
• Communication Records: Support emails retained for up to 2 years for quality and dispute resolution
• Account Deletion: Upon written request to support@lockmytrades.com, your personal data is permanently deleted within 30 days, except where retention is legally required

6. Your Rights Under DPDP Act, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request a copy of personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Grievance Redressal: Lodge a complaint about how we handle your data
• Right to Nominate: Nominate another individual to exercise your rights in case of incapacity
• Right to Withdraw Consent: Withdraw consent for data processing at any time (may affect service availability)

To exercise any of these rights, please email support@lockmytrades.com with the subject line "DPDP Request". We will respond within the timeframes prescribed by law.

7. Cookies & Tracking Technologies

We use essential cookies to maintain your session and remember your preferences. We may also use limited analytics cookies (e.g., privacy-focused tools like Plausible or self-hosted analytics) to understand aggregate usage patterns. We do NOT use cross-site tracking cookies, advertising cookies, or third-party tracking pixels.

8. Children's Privacy

LockMyTrades is not directed at and not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at support@lockmytrades.com.

9. International Data Transfers

Your data is primarily stored on servers located in India. If we transfer data internationally (e.g., to cloud providers with global infrastructure), we ensure such transfers comply with applicable laws and that data remains protected by equivalent security standards.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, regulatory requirements, or service offerings. Material changes will be notified via email to registered users at least 7 days before taking effect. Continued use of the Service after such changes constitutes acceptance of the updated policy.

11. Grievance Officer & Contact

For any privacy concerns, data subject requests, or grievances, please contact:

This Privacy Policy is governed by the laws of India and any disputes shall be subject to the exclusive jurisdiction of competent courts in Mumbai, Maharashtra, India.