Privacy Policy
Trade Shastra ("we", "us") is a market research and paper-trading dashboard operated as part of Cloud Shastra. This policy explains what we collect when you create an account or use the site, and what we do with it.
What we collect
- Account details: your email address and, if you sign in with Google, the name and email address Google shares with us (we request only basic profile and email access). If you sign up with email, your password is stored only as a secure hash by our authentication provider; we never see it.
- Usage records: which parts of the service you request, the time, and your IP address, kept in server logs to run, secure and rate-limit the service.
- Anonymous site analytics: page views and which buttons or links are clicked, tied to a random identifier stored in your browser (no cookies, no name or email, and no IP address stored with it). We use this only to count visitors and improve the site. We honour your browser's "Do Not Track" setting.
- Nothing about your finances: free accounts do not connect to any broker, bank or payment account, and we do not collect brokerage credentials from you.
How we use it
To sign you in, keep your session active, show you market data, prevent abuse, diagnose problems, and contact you about your account (for example email confirmation and password reset). We do not sell your data and we do not use it for advertising.
Who processes it
- Supabase — account and sign-in records.
- Google — only if you choose "Continue with Google".
- Cloudflare and Tailscale — hosting and network delivery of the website and API.
These providers handle data on our behalf under their own terms and may process it outside your country.
Retention and your choices
Account records are kept while your account exists. Server logs are kept for a limited period for security. To access, correct or delete your account and associated data, email us at the address below and we will act on it within a reasonable time.
Security
Connections use HTTPS, sign-in tokens expire, failed sign-ins are rate-limited, and free accounts cannot reach administrative functions. No system is perfectly secure, and we cannot guarantee absolute security.
Children
The service is not intended for anyone under 18.
Changes
If we change this policy we will update the date above.