Privacy Policy

We collect only the minimum data required to deliver high-performance trading indicators and secure your account:

Personal Information

• Full name and email address entered during user registration.
• Contact phone number (optional, used for two-factor authentication and high-priority WhatsApp alerts).
• Billing and transaction records processed securely via PCI-DSS certified payment gateway (Razorpay).

Platform Usage Information

• Device hardware signatures, operating system, and browser version.
• IP address and approximate geographical locale for account security verification.
• Pages navigated, scanners toggled, and watchlist configurations.
• User trading interface preferences, theme toggles, and chart interval states.

Technical & Telemetry Data

• Session tokens and encrypted JSON Web Tokens (JWT).
• WebSocket stream latency metrics and connection heartbeat logs.
• Application error logs, memory stack traces, and crash diagnostics.

We utilize the collected information strictly for operational, technical, and regulatory reasons:

• To authenticate you and grant real-time access to the Trade with Catalyst scanner dashboard.
• To compute and stream low-latency market orderflow, PCR ratios, and algorithmic setups.
• To process subscription payments, send automated GST tax invoices, and manage renewal billing.
• To dispatch critical service announcements, security alerts, and system maintenance notices.
• To continuously monitor infrastructure health, optimize server clusters, and prevent DDoS attacks.
• To ensure compliance with Indian cyber-security laws and statutory tax requirements.

We NEVER sell, lease, or broker your personal information. We share scoped data exclusively with essential technology service providers under strict non-disclosure obligations:

• Payment Processors: Razorpay Software Private Limited for encrypted tokenized billing (PCI-DSS Level 1 compliant).
• Cloud Infrastructure: Google Cloud Platform (GCP) and Firebase for secured database storage and identity management.
• Server Hosting: Enterprise cloud clusters located within Indian data center regions.
• Market Data Ingestion: Zerodha Kite Connect API for live authorized tick ingestion (no personal user identity is passed to data vendors).
• Statutory Authorities: If compelled by lawful court order, subpoena, or Indian regulatory bodies.

We deploy robust multi-layered architectural safeguards to protect your personal information:

• All data in transit is encrypted using 256-bit Transport Layer Security (TLS 1.3 / HTTPS).
• User passwords are hashed using one-way cryptographic salt algorithms (bcrypt/Argon2) and are never stored or readable in plaintext.
• We do not store credit card numbers, CVVs, or net-banking credentials on our application servers.
• Routine vulnerability assessments, firewall penetration tests, and automated intrusion monitoring.
• Strict least-privilege role-based access control (RBAC) across all development and database environments.

We retain your account records for as long as your subscription is active or as necessary to provide service continuity.

Upon receiving an account deletion request via email, we erase or anonymise your personal profile within 30 calendar days, except for transaction ledgers and GST records required to be retained under statutory Indian tax law.

In accordance with the Digital Personal Data Protection Act, 2023 (DPDP), you possess the following rights:

• Right to Access: You may request a summary of the personal information we maintain regarding your account.
• Right to Correction: You can correct incomplete, out-of-date, or inaccurate personal information.
• Right to Erasure: You may request complete erasure of your profile and historical data.
• Right to Portability: You can export your watchlist setups and settings in a structured machine-readable format.
• Right to Withdraw Consent: You may revoke consent for non-essential notifications or marketing emails at any time.

We do NOT deploy third-party advertising tracking cookies. We utilize native browser localStorage and session tokens exclusively for essential functional capabilities:

• Maintaining your authenticated session across browser reloads.
• Saving your custom UI preferences (dark/light theme, column order, audio signal toggles).
• Local client-side caching of tick data to reduce latency and bandwidth consumption.

Trade with Catalyst is strictly intended for individuals who are 18 years of age or older. We do not knowingly solicit or collect personal information from minors. If you believe a minor has registered an account, please notify our privacy desk immediately for swift profile removal.

We may periodically update this policy to reflect modifications in platform architecture, cloud hosting vendors, or statutory legislation. Any amendments will be published on this page with an updated timestamp. Continued use of our software signifies acceptance of the revised terms.

For questions concerning this Privacy Policy, data access requests, or to contact our designated Data Protection & Grievance Officer:

Grievance Officer: Legal & Compliance Cell
Entity: Trade with Catalyst · The Catalyst Group
Email: support@tradewithcatalyst.com
WhatsApp Desk: +91 88828 28274
Corporate Office: The Catalyst Group, Jaipur, Rajasthan, India