Privacy Policy
Last updated: 20 July 2026
TradeDiary ("we", "us") is a trading journal and portfolio analytics service at tradediary.app. This policy explains, in plain English, what data we collect, why, and what control you have over it. It is written with India's Digital Personal Data Protection (DPDP) Act in mind.
What we collect
- Account details — your name and email address when you register (or the name/email your Google account shares if you sign in with Google).
- Trading data you upload — broker files (tradebooks, P&L statements, order books, holdings) that you import, and the trades, holdings and notes derived from them.
- Broker connections — if you connect Zerodha, we store the access token Zerodha issues. We never ask for or store your broker password.
- Usage data — standard server logs (IP address, pages visited, timestamps) and analytics via Google Analytics, subject to your cookie consent.
- Payment data — payments are processed by Razorpay; we receive the transaction status and reference, never your full card or bank details.
How we use it
- To run the product: import your trades, compute P&L and analytics, send the alerts you configure.
- To support you: respond to emails, investigate import issues you report.
- To communicate: service notifications and occasional product updates (you can unsubscribe from non-essential emails).
- To improve the product: aggregate, non-identifying usage analysis.
We do not sell your personal data, and we do not share your trading data with advertisers or other users.
Who we share it with
Only service providers needed to run TradeDiary: our hosting provider, Google (sign-in and analytics), Razorpay (payments) and email delivery. Each receives only what it needs for its function.
Security
- All traffic is encrypted in transit (HTTPS/SSL).
- Imports are file-based — we never need or store your broker login password.
- Access to production systems is restricted and logged; suspicious requests are automatically blocked.
- Databases are backed up regularly so your data isn't lost.
Cookies
We use essential cookies for login sessions, and analytics cookies only after you accept them in the consent banner. You can decline analytics cookies and the product works fully.
Retention & deletion
Your data stays as long as your account is active. You can delete individual clients, imports or your entire account at any time; deleted data is purged from our systems within 30 days. Backups age out on a rolling schedule.
Your rights
Under the DPDP Act you may request access to, correction of, or erasure of your personal data, and raise a grievance. Write to us at [email protected] and we'll respond within 30 days.
Changes
If we make material changes to this policy we'll notify you in-app or by email before they take effect.
Contact
Questions about this policy: [email protected] or WhatsApp +91 95404 07673.