Privacy Policy
Effective date: 29 June 2026
AlgoStrike ("AlgoStrike", "we", "us", or "our") operates the website www.algostrike.in and the AlgoStrike algorithmic-trading platform (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over your information. By using the Service you agree to this Policy.
1. Who we are
AlgoStrike is operated from India. For any privacy-related question or request you can reach our data controller at berkin.thomas@jseven.in. Postal address: [Your registered business address — please update before publishing].
2. Information we collect
2.1 Account & profile data
- Name, email address, and (optionally) phone number used during sign-up.
- Authentication identifiers from Google sign-in if you choose that method.
- Profile preferences, notification settings, and saved configurations.
2.2 Broker & trading data
- Your Zerodha client ID, Kite Connect API key and API secret (encrypted at rest).
- Short-lived Kite access tokens used to fetch your margins, holdings, positions, orders, and to place trades you authorize.
- Trade rules, triggers, strategy subscriptions, and audit logs you create on the platform.
We never custody your funds or securities. Capital remains in your Zerodha account at all times.
2.3 Communications data
- If you opt in to WhatsApp alerts, we store your WhatsApp number and message-delivery metadata so we can send transactional notifications (trigger fired, order placed, low-margin warning, etc.) via the Meta WhatsApp Business Platform.
- Email address for confirmation, security, and transactional emails.
2.4 Technical data
- IP address, browser and device information, pages visited, and timestamps for security, fraud-prevention, and product analytics.
- Cookies and local-storage entries required to keep you signed in.
3. How we use your information
- To create and operate your account.
- To connect to Zerodha Kite Connect on your behalf and execute the actions you authorize (data sync, conditional triggers, order placement).
- To send transactional notifications via in-app, email, and WhatsApp (e.g., signal published, trigger fired, order filled, insufficient margin, order cancellation).
- To maintain an audit trail of platform activity for security and regulatory hygiene.
- To provide customer support and respond to your requests.
- To detect, prevent, and investigate misuse, fraud, or security incidents.
- To comply with applicable laws and lawful requests from authorities.
We do not sell your personal data. We do not use your trading data to train AI models. We do not share your data with advertisers.
4. WhatsApp & Meta Business Platform
AlgoStrike uses the Meta WhatsApp Business Platform to deliver transactional alerts you opt in to. When you provide your WhatsApp number we share the minimum data necessary — your phone number and the template message contents — with Meta / WhatsApp Ireland Ltd. for delivery. WhatsApp's processing of those messages is governed by the WhatsApp Business Messaging Policy and the WhatsApp Privacy Policy. You can opt out at any time by replying STOP to any AlgoStrike WhatsApp message or by turning off WhatsApp notifications in your account settings.
5. Legal bases for processing
- Contract — to provide the Service you signed up for.
- Consent — for optional channels such as WhatsApp alerts and marketing emails. You can withdraw consent at any time.
- Legitimate interests — to secure the Service, prevent fraud, and improve the product.
- Legal obligation — to comply with applicable laws.
6. Data sharing
We share data only with the following categories of processors, under appropriate contracts:
- Zerodha Broking Ltd. — for Kite Connect API calls you authorize.
- Meta Platforms / WhatsApp Ireland Ltd. — for WhatsApp transactional messages.
- Cloud infrastructure providers (AWS, Supabase) — for hosting, database, and authentication.
- Email delivery providers — for transactional email.
- Regulators, courts, or law-enforcement authorities — only when legally required.
7. Data retention
We keep account, broker, and trading data for as long as your account is active and for up to 5 years thereafter to satisfy financial-record-keeping norms. Audit logs are retained for up to 7 years. WhatsApp delivery metadata is retained for up to 12 months. You may request earlier deletion (see Section 9), subject to legal retention obligations.
8. Security
- API secrets and broker tokens are encrypted at rest.
- All traffic uses TLS 1.2+ in transit.
- Row-level security is enforced in the database so users can only access their own data.
- Access to production systems is restricted, logged, and reviewed.
- You can revoke your Zerodha connection at any time from the Brokers page.
No method of transmission or storage is 100% secure. If we become aware of a personal data breach affecting you, we will notify you and the appropriate authorities as required by law.
9. Your rights
Subject to applicable law (including India's Digital Personal Data Protection Act, 2023), you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your account and associated data.
- Withdraw consent for optional processing (e.g., WhatsApp / marketing).
- Object to or restrict certain processing.
- Lodge a complaint with the Data Protection Board of India or your local supervisory authority.
To exercise any of these rights, email berkin.thomas@jseven.in from the address registered with your account. We will respond within 30 days.
10. Children
The Service is not directed to anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.
11. International transfers
Your data is processed in India and in other countries where our cloud providers operate (including the EU and the United States). Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be communicated by email or via an in-app notice at least 7 days before they take effect. The "Effective date" at the top reflects the latest version.
13. Contact
Questions, requests, or complaints? Email berkin.thomas@jseven.in.
AlgoStrike is an execution and analytics platform. It is not a SEBI-registered investment adviser. Trading involves market risk; past performance does not indicate future results.