Privacy Policy
Last Updated: March 15, 2026
VISHUBH Tradetech Private Limited ("STRIX", "Company", "We", "Us") respects the privacy of our Operators ("Users", "You"). This Privacy Policy outlines our strict data minimization protocols and explains how information is handled within the STRIX Terminal ecosystem. By accessing or using our services, you explicitly consent to the data practices described herein.
1. Data Collection Architecture
As a technology provider rather than a broker, we collect only the absolute minimum data required to establish your identity, secure your session, and manage your subscription license:
- Identity Data: Name, Email Address, and Phone Number (utilized strictly for OTP, account verification, and security alerts).
- Financial Data: We do NOT collect or store credit card numbers, UPI PINs, or bank account details. All payment processing is securely handled by our PCI-DSS compliant payment gateway partner (Razorpay). We only store the resulting Transaction ID and your License validity status.
- Technical & Usage Data: IP Address, Browser Type, Device OS, and login timestamps to conduct security auditing, prevent unauthorized access, and debug technical issues.
CRITICAL: BROKER CREDENTIALS & API SECURITY
STRIX operates entirely as a non-custodial execution terminal. We do NOT ask for, capture, or store your Broker Login Password, Trading PIN, or 2FA/TOTP secrets on our servers.
API Keys, Access Tokens, and session hashes required to bridge the terminal with your broker are stored securely either in your browser's Local Storage (Client-Side) or in a temporary, encrypted RAM cache that is permanently flushed upon logout or session timeout.
2. How We Use Your Data
Your data is strictly ring-fenced and utilized exclusively for the following operational purposes:
- Authentication: Verifying your identity and securing your login session.
- License Management: Enforcing subscription limits and managing your Pre-paid Credit Stack.
- Service Communication: Sending critical transactional alerts (e.g., "Subscription Expiring", "Unrecognized Login Detected").
- System Integrity: Analyzing technical logs to fix bugs, optimize routing latency, and improve platform stability.
- Compliance: Fulfilling legal obligations under the Information Technology Act, 2000, and other applicable Indian laws.
3. Data Sharing & Third Parties
We absolutely do not sell, rent, or trade your personal data to marketing agencies or third-party advertisers. We share data strictly on a need-to-know basis with:
- Payment Processors (Razorpay): Solely for the purpose of executing and validating subscription payments.
- Your Connected Broker (e.g., Zerodha, Upstox, Angel One): We act as a technological conduit, transmitting your authorized trade orders directly to them via API. Once the data reaches your broker, it is governed by their respective privacy policies.
- Cloud Infrastructure Providers: Secure, encrypted hosting services (e.g., AWS/GCP) that power the STRIX architecture.
- Law Enforcement: We will disclose information to regulatory or law enforcement agencies only if legally compelled by a valid Indian Court Order or statutory demand.
4. Cookies & Local Storage
To provide a lightning-fast, customized trading experience, the STRIX Terminal relies heavily on Browser Local Storage and session cookies.
- We use these technologies to save your workspace state locally on your device, including Chart layouts, Theme preferences, Saved Watchlists, and UI configurations.
- Because this data is stored on your specific device rather than our servers, clearing your browser cache or switching devices will reset your visual preferences and require you to log in again.
5. Data Retention & Deletion
We retain your Identity and License Data for as long as your account is active or as needed to provide you with our services. Technical logs utilized for debugging and security auditing are routinely purged. If you wish to permanently delete your STRIX account and associated data, you may request account termination via our support channels. Note: We may retain certain transaction records as required by Indian tax and accounting laws.
To completely revoke STRIX's ability to communicate with your trading account, you simply need to revoke the API access or invalidate the API tokens directly from your broker's dashboard.
6. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact our support team at:
Email: support@strix.center