Privacy Policy
Last updated: June 2026
1. Information We Collect
When you create an account, we collect your email address and optionally your full name and mobile number. We do not collect financial data, PAN numbers, Aadhaar, bank account details, or any sensitive personal data. Across the site — including for visitors without an account — we use third-party product-analytics tools that automatically capture usage interactions such as pages visited, clicks, navigation, performance metrics, and errors, to improve the Platform. For signed-in users these analytics events are associated with your account (user id and email) and are therefore not anonymous.
2. How We Use Your Information
Your email is used to: send account-related communications (email verification, password reset); send product updates you have opted into; and, when available, send stage alert notifications you have configured. We never sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data for targeted advertising.
3. Data Storage & Security
Your account data is stored in a PostgreSQL database on our own self-hosted infrastructure, hosted with a cloud infrastructure provider in the Mumbai (India) region. Authentication is handled by our self-hosted authentication service using industry-standard bcrypt password hashing and JWT session tokens stored in httpOnly cookies. We implement reasonable technical and organisational measures to protect your data.
4. Cookies
We use httpOnly session cookies necessary for authentication — these are essential for the logged-in experience and cannot be opted out of while signed in. We also use first- and third-party analytics cookies and similar identifiers set by our analytics providers to measure product usage. We do not use advertising cookies and do not run ad-targeting pixels.
5. Email Communications
Transactional emails (account verification, password reset, operational alerts) are sent via a third-party transactional email provider. You can unsubscribe from non-essential email communications at any time. You cannot opt out of essential security communications.
6. Third-Party Services
We rely on third-party service providers for content delivery and security, cloud hosting (in the Mumbai, India region), transactional email, and product/usage analytics; some of these providers may process data outside India. Authentication and the database run on our own self-hosted infrastructure, not a managed third-party service. We share only the minimum information necessary with each provider, and each operates under its own privacy policy.
7. Data Retention
Account data is retained while your account is active. Upon account deletion, your personal data is removed within 30 days. Anonymised usage data may be retained for up to 12 months.
8. Your Rights
You have the right to access, correct, or delete your personal data. To request account deletion or a data export, email us at hello@stage2stocks.com. We will respond within 30 days. You may also update your profile information from the Settings page.
9. Children
The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal data, we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated to registered users via email. Continued use of the Platform after the effective date of changes constitutes acceptance of the updated policy.
11. Governing Law
This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, and applicable rules. Some analytics data may be processed outside India by our service providers; by using the Platform you consent to this cross-border processing. Disputes shall be subject to the exclusive jurisdiction of courts in Kolkata, West Bengal, India.
12. Contact
Privacy queries: hello@stage2stocks.com