Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and optionally your full name and mobile number. We do not collect financial data, PAN numbers, Aadhaar, bank account details, or any sensitive personal data. Across the site — including for visitors without an account — we use third-party product-analytics tools that automatically capture usage interactions such as pages visited, clicks, navigation, performance metrics, and errors, to improve the Platform. For signed-in users these analytics events are associated with your account (user id and email) and are therefore not anonymous.

2. How We Use Your Information

Your email is used to: send account-related communications (one-time sign-in codes and account verification); send product updates you have opted into; and, when available, send stage alert notifications you have configured. We never sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data for targeted advertising.

3. Data Storage & Security

Your account data is stored in a PostgreSQL database on our own self-hosted infrastructure, hosted with a cloud infrastructure provider in the Mumbai (India) region. Sign-in is passwordless: we email you a one-time code and never store a password for you at all. The session is a JWT held in a browser cookie scoped to this host, sent only over HTTPS with SameSite=Lax. That cookie is deliberately readable by JavaScript on our own pages, because the client library has to manage its own session state — a trade-off we make explicitly rather than by accident. We implement reasonable technical and organisational measures to protect your data.

4. Cookies

We use a session cookie necessary for authentication — essential for the logged-in experience and not something you can opt out of while signed in. We also use analytics cookies and similar identifiers to measure product usage. Specifically: Google Analytics 4 (loaded via Google Tag Manager) and PostHog. PostHog automatically records page views, clicks and heatmaps, and links them to your account email once you sign in. We do not record your screen — session replay is switched off. We do not use advertising cookies and do not run ad-targeting pixels.

5. Email Communications

Transactional emails (sign-in codes, account verification, operational alerts) are sent via a third-party transactional email provider. You can unsubscribe from non-essential email communications at any time. You cannot opt out of essential security communications.

6. Third-Party Services

We rely on third-party service providers for content delivery and security, cloud hosting (in the Mumbai, India region), transactional email, and product/usage analytics; some of these providers may process data outside India. Authentication and the database run on our own self-hosted infrastructure, not a managed third-party service. We share only the minimum information necessary with each provider, and each operates under its own privacy policy.

7. Data Retention

Account data is retained while your account is active. Account deletion is handled manually on request — email us and we will remove your personal data within 30 days. There is no self-service delete button today. Anonymised usage data may be retained for up to 12 months.

8. Your Rights

You have the right to access, correct, or delete your personal data. To request account deletion or a data export, email us at hello@stage2stocks.com. We will respond within 30 days. You may also update your profile information from the Settings page.

9. Children

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal data, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated to registered users via email. Continued use of the Platform after the effective date of changes constitutes acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, and applicable rules. Some analytics data may be processed outside India by our service providers; by using the Platform you consent to this cross-border processing. Disputes shall be subject to the exclusive jurisdiction of courts in Kolkata, West Bengal, India.

12. Contact

Privacy queries: hello@stage2stocks.com