Legal

Privacy Policy

Last updated: 31 May 2026

This Privacy Policy explains how Loksha Logic Labs Private Limited (“Company”, “we”, “us” or “our”), which operates the TradeFolie platform and website (collectively, the “Platform”), collects, uses, discloses, stores and protects your personal data. We are committed to processing your data lawfully and transparently in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made thereunder. By using the Platform, you (the “User” or “Data Principal”) acknowledge that you have read and understood this Policy.

1. Data we collect

Account data: your name, email address, hashed password and, where you provide it, profile and onboarding preferences (such as trading style and goals).

Trading data: your tradebook is parsed locally in your browser. Only the computed round-trips, metrics, journal entries, tags and notes you choose to save are transmitted to and stored on our servers. We do not require or retain your raw broker file unless you explicitly upload one.

Payment data: when you subscribe, payments are processed by our third-party payment partner (Razorpay). We receive transaction confirmations and invoice details but do not store your full card or banking credentials.

Technical and usage data: IP address, device and browser type, log data, and product analytics collected to operate, secure and improve the Platform.

2. How we use your data

To provide, maintain and personalise the Platform, including generating analytics, behaviour insights and AI-assisted summaries from the trade data you save.

To process subscriptions, issue GST-compliant invoices and prevent fraud.

To provide customer support, send service communications, and (with your consent) product updates.

To secure the Platform, debug issues and comply with applicable law.

3. Legal basis and consent

We process your personal data on the basis of the consent you provide when you create an account and use the Platform, and for certain legitimate uses permitted under the DPDP Act, such as fulfilling our service obligations to you.

You may withdraw your consent at any time by writing to our Grievance Officer or deleting your account. Withdrawal will not affect the lawfulness of processing carried out before withdrawal, and may limit your ability to use the Platform.

4. Sharing and data processors

We do not sell your personal data. We share data only with processors who help us run the Platform under contractual confidentiality and security obligations.

These include: Razorpay (payment processing), our cloud hosting and database providers (storage and compute), our email/SMTP provider (transactional email), and our AI provider (Anthropic) which processes anonymised or summarised trade information solely to generate the insights you request.

We may disclose data where required by law, court order, or a lawful request by a government authority, or to protect our rights, users and the public.

5. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Platform. After account deletion we delete or irreversibly anonymise your data within a reasonable period, except where retention is required for legal, tax, accounting or dispute-resolution purposes.

6. Your rights as a Data Principal

Subject to the DPDP Act, you have the right to access a summary of your personal data and how it is processed; to seek correction, completion or updating of your data; to seek erasure of your data; to nominate another person to exercise your rights in the event of death or incapacity; and to grievance redressal.

You can exercise most of these rights directly from your account settings (including data export and account deletion) or by contacting our Grievance Officer.

7. Security

We implement reasonable security safeguards, including encryption of data in transit (TLS) and at rest, encryption of sensitive secrets using AES-256-GCM, access controls, and the privacy-by-design choice of parsing tradebooks in your browser. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Cookies

We use strictly necessary cookies to keep you signed in and to operate the Platform, and limited analytics cookies to understand usage. You can control cookies through your browser settings; disabling essential cookies may break core functionality.

9. Children

The Platform is intended for users aged 18 and above and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.

10. International transfers

Some of our processors may store or process data outside India. Where we transfer personal data internationally, we do so in accordance with applicable law and under appropriate safeguards.

11. Grievance Officer

In accordance with the DPDP Act and the Information Technology Act, 2000, you may contact our Grievance Officer for any concern relating to your personal data:

Grievance Officer, Loksha Logic Labs Private Limited. Email: grievance@tradefolie.com. We will acknowledge and address complaints within the timelines prescribed under applicable law.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified through the Platform or by email. Your continued use after such changes constitutes acceptance of the revised Policy.

Questions about this document? Write to us at legal@tradefolie.com. This page is provided for transparency and does not by itself create rights or obligations beyond those set out in our Terms.