Privacy policy
What Tradar collects, why, who processes it, how long it is kept, and your rights under India’s DPDP Act.
The short version
- We collect what Tradar needs to measure how you trade: your email and profile, the trade records your broker sends, what you write in Tradar, and your chats with Tara.
- We never sell your data, never show it to other traders, never use it for advertising.
- Tara reads your trading data only if you turn on Personalization, and you can turn it off.
- Broker keys are encrypted, and we only ever ask your broker for read access.
- Our database is in Mumbai, India. Some of the services we use process data in other countries.
- You can see, correct and erase your data, withdraw consent, and complain - to us first, then to the Data Protection Board of India.
This summary helps you read the privacy policy; it does not replace it.
About this policy
This policy explains how Tradar handles your personal data when you use tradar.in, the Tradar app, Tara and our emails. Meet Bhalodiya, who runs Tradar, is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”): the one who decides why and how your data is processed, and who answers to you for it.
It is written to meet the DPDP Act and the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 with the SPDI Rules, 2011 while they apply. Read it with our terms of use.
You can ask for this notice in any language listed in the Eighth Schedule to the Constitution of India by writing to support@tradar.in.
What we collect, and why
Each kind of data, what it is, and the one reason we need it:
| Data | What it is | Why |
|---|---|---|
| Account | Your email address, the one-time sign-in codes we send it, and the session that keeps you signed in. | To create your account, sign you in and send emails about it. |
| Profile | Your name, your avatar (a photo you upload, or a drawn face), your currency and preferences. | To show your account as yours. |
| Broker connection | Which broker, the API key and secret you give us (encrypted), and when it last synced. | To read your trades from your broker. |
| Trading records | What your broker reports: fills, orders and order history (including stops), positions, symbols, sides, sizes, prices, times, fees, funding, P&L and balances. | To work out your P&L, check your rules, score your behaviour and replay your trades. |
| What you write | Your rules and their history, journal entries, the feelings you log, challenges you start, broker votes. | This is Tradar - so we can show it back to you and measure it. |
| Tara | Your questions, her answers, chat titles, anything you attach to a question, your answer-style settings, ratings and feedback (saved with the question and answer they are about), and what each answer cost. | To answer you, keep your chats, keep to the daily allowance and make Tara better. |
| Billing | Your plan, invoices and payment status, Razorpay’s reference numbers, the mobile number your mandate needs, and your UPI ID or card label (such as the last four digits) - these three sealed with encryption. Your embers balance and history. | To charge for Forge, renew it, and issue invoices. |
| Referrals | Your invite code, and who joined on it. | To pay invite rewards. |
| Waitlist | Your email, if you join the waitlist. | To tell you when Tradar opens. |
| Device and usage | IP address, browser and device type, the pages and buttons you use, error reports, and security logs. | To keep Tradar secure, stop abuse, fix bugs and learn which features help. |
We never see or store your full card number, CVV, UPI PIN, bank password or net-banking details - Razorpay collects those directly. We do not ask for your Aadhaar, PAN or bank account number.
The feelings you log and your journal are personal. You choose what to write; nobody but you sees it, and Tara reads it only with Personalization on.
Why we are allowed to
- Consent. You give it when you create an account, connect a broker, turn on Personalization, or pay. You can withdraw it at any time (see your rights below); that stops further processing, but does not undo what was lawfully done before.
- Legitimate uses the DPDP Act allows without separate consent: data you have given us for a purpose you know about, and keeping records the law requires - tax and payment records, for example - or that a court or authority lawfully asks for.
Tara and your data
Tara answers from your own trading only if you turn on Personalization, through a dialog that lists what she reads. It is off until you do. With it off, she sees only your question, the chat it is in, and anything you attach to it.
With Personalization on, she reads
- Your trades - symbol, side, size, prices, times and net P&L
- Your rules, and how often you keep and break them
- Your behaviour score, what the engine found, and how you handle open trades
- Your journal and the feelings you log
She never gets
- Your name, email or phone number
- Your broker keys, account or order numbers
- Your balance
How it is kept safe
- Read fresh for each answer, and sent only to the AI model writing that answer - never sold.
- Kept apart from the web: anything she looks up online is searched separately, with nothing about you in it.
- Under each answer you can see what she looked at.
Tara’s answers are written by an AI model provider in the United States. It is told not to store what we send for its own use, and may keep it for up to 30 days only to detect abuse, then deletes it. You can turn Personalization off in Tara’s section of Settings; that stops her reading your data from then on, and your chats stay until you delete them.
Where it is kept
Our database is in Mumbai, India. Some of the services above process data in other countries, as Section 16 of the DPDP Act allows. We will not transfer it to any country the Government of India restricts.
How we protect it
- Everything between your browser and Tradar is encrypted (HTTPS, enforced).
- Broker keys are encrypted with AES-256-GCM before they are stored, and only ever used to read. Your mandate’s phone number, email and UPI ID or card label are encrypted the same way.
- Sign-in is by one-time code - there is no password to leak - and sign-in, payment and Tara are rate-limited.
- A strict content security policy stops other people’s scripts running on our pages.
- Access to production data is limited to the people who run Tradar, and only to the extent they need it.
No system is perfectly secure. If a breach affects your data, we will tell you without delay - what happened, what it means for you and what we are doing - and report it to the Data Protection Board of India and CERT-In within the time the law sets.
How long we keep it
| Data | Kept |
|---|---|
| Your account and everything in it | Until you delete your account. Deleting starts a 30-day countdown; at its end your account, broker keys, trades, rules, journal, feelings, Tara chats, embers and avatar are erased, and any autopay mandate is cancelled at Razorpay. |
| A single Tara chat | Until you delete it - deleting a chat erases it for good. |
| Backups | Erased data can stay in encrypted backups for up to 30 days, then is gone. |
| Invoices and payment records | As long as tax law requires - under GST law, six years. Razorpay keeps its own payment records as the law requires it to. |
| Security logs | Up to one year. |
| Analytics | Up to one year. |
| Waitlist email | Until you sign up or ask us to remove it. |
Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we hold about you, what we do with it, and who we have shared it with;
- correct, complete or update it - most of it you can change yourself in Settings;
- have it erased - deleting your account does this, or ask us to erase a part;
- withdraw your consent, as easily as you gave it: turn off Personalization in Settings, disconnect a broker, or delete your account;
- have a complaint about how we handle your data answered by us;
- nominate someone to use these rights for you if you die or cannot act yourself.
Write to us at support@tradar.in from the email on your account, so we know it is you. We reply within 60 days, and never later than the 90 days the DPDP Rules allow. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
The DPDP Act also asks you not to give false information or file frivolous complaints.
Children
Tradar is only for people aged 18 or over, and we do not knowingly process a child’s data. If we learn an account belongs to someone under 18, we close it and erase its data.
Changes to this policy
The date at the top shows when this policy last changed. If a change affects how we use data you have already given us, we will tell you by email or in the app before it takes effect, and ask for your consent again where the law requires.
Contact
- Run by
- Meet Bhalodiya
- support@tradar.in