Privacy Policy

This policy explains what personal data MarketPulse collects, why, where it is kept, who it is shared with, and the rights you have. We follow India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). In short: we collect only what the site needs to work, we never sell your data, and we do not use advertising or tracking.

1. Who we are

MarketPulse is a free website with Indian stock-market information, portfolio tracking and paper-trading tools. For the purposes of the DPDP Act, the operator of MarketPulse is the "Data Fiduciary" for the personal data described here. You can reach us as described in section 13.

2. What we collect

You can read market data, news, insights and articles without an account. We only collect personal data when you sign in or use features that save information to your account.

CAS statements and broker files

When you import a Consolidated Account Statement (CAS) PDF or a broker file, the file is read inside your browser. The file itself, and any PDF password you type, are never uploaded to us. Only the transactions extracted from it (as listed above) are saved to your account, and only after you confirm the import.

3. What we don't collect

• No broker logins, demat or trading account credentials, bank details, PAN, Aadhaar or payment information. MarketPulse never places real orders.
• No advertising, ad networks, tracking pixels or third-party analytics.
• We do not sell, rent or trade personal data, and we do not use it to build advertising profiles.

4. How we use your data

• To provide the features you use: your account, portfolio, watchlist, alerts, ticker, paper trading and profile.
• To keep the service secure, prevent abuse and fix errors.
• To reply to messages you send us.
• To meet legal obligations where they apply.

We rely on your consent, which you give by creating an account and choosing to use these features, and on the "legitimate uses" allowed under the DPDP Act, such as providing a service you asked for. You can withdraw consent at any time by deleting the data or asking us to delete your account (section 8). Features that need the data will then stop working for you.

5. Where your data is stored and who processes it

Your account and saved data are stored with Supabase on servers in Mumbai, India. We use these service providers ("Data Processors") to run the site. Each receives only what it needs:

• Supabase: database, sign-in, file storage (profile photos) and server functions. Mumbai, India.
• Vercel: hosts and delivers the website's pages through a global network. It sees technical data such as your IP address.
• Google: only if you choose "Continue with Google" (Google shares your name, email and photo with us). Our pages also load fonts from Google Fonts, which lets Google see your IP address.
• SMS provider: only if you use phone login. Your number is passed on to deliver the code.
• Telegram: a copy of Contact-form messages may be sent to the operator's Telegram so they can be read promptly.
• Content delivery networks (jsDelivr, cdnjs, Cloudflare): some code libraries load from these, which see your IP address.

Some of these providers may process technical data outside India. Our server also requests public market data from sources such as NSE, NSE IX, Yahoo Finance, AMFI and Binance. Those requests do not contain your personal data. Blog articles are written by an AI service (Moonshot) from public market data only: no user data is ever sent to it. When you open an outside link, our server checks whether that site can be shown inside MarketPulse. Only the link's address is checked, not who you are.

6. Sharing

Apart from the service providers above, we share personal data only if the law requires it (for example, a valid order from a court or authority), or to protect the rights, safety and security of our users or the service. We never sell it.

7. How long we keep it

• Account and saved data is kept while your account exists. If you delete an item (for example a transaction or a watchlist entry), it is removed from our live database. When you ask us to delete your account, we delete the account and its data.
• Contact messages are kept as long as needed to deal with your message and any follow-up.
• Server logs and backups held by our providers expire on their own schedules.
• We may keep data longer only where the law requires it.

8. Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how it is used.
• Correct or update it. You can change your name and photo in My Profile and edit or delete portfolio entries yourself.
• Erase it, including deleting your whole account.
• Withdraw consent at any time.
• Have a grievance addressed, and, if you are not satisfied, complain to the Data Protection Board of India.
• Nominate someone to exercise these rights for you in case of death or incapacity.

To use any of these rights, contact us as described in section 13, using the email or phone number linked to your account so we can verify it is you. We will respond within a reasonable time, and within the time limits set by law.

9. Browser storage (cookies)

MarketPulse does not use advertising or tracking cookies. To work, it stores some information in your browser's local storage:

• Your login session, so you stay signed in.
• Preferences such as theme, reading speed and filters.
• A cached copy of some data (for example your last portfolio summary), so pages show quickly.

A service worker may also cache site files so the site loads faster. Clearing your browser's site data removes all of this and signs you out.

10. Security

Connections to MarketPulse use HTTPS. Our database uses row-level security, so each signed-in user can read and change only their own saved data. Passwords are handled by the authentication provider and never stored in plain text. No system is perfectly secure, so please use a strong, unique password. In the event of a personal-data breach, we will inform affected users and the Data Protection Board of India as the DPDP Act requires.

11. Children

MarketPulse is meant for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will delete it.

12. Changes to this policy

We may update this policy as the site changes. We will change the "Effective" date at the top. Significant changes will be highlighted on the site. Continuing to use MarketPulse after a change means you accept the updated policy.

13. Contact and grievances

For privacy questions, data requests or complaints, use the Contact form on the Home page. Start your message with what you need, for example "Privacy request" or "Delete my account", and include the email or phone number linked to your account. Requests are handled by the operator of MarketPulse, who acts as the grievance contact for this site.