Privacy Policy

Last updated: August 27, 2026

1. What we collect

When you create a ChartFalcon account, we collect: your email address, first and last name, mobile number, city, and state. If you choose to upload one, we store a small profile picture. If you upgrade to Premium, our payment processor (Razorpay) handles your payment details directly - we never see or store your card, UPI, or bank details; we only receive confirmation that a payment succeeded, along with the amount and a transaction reference.

2. Data you create while using the app

Watchlists, personal notes on stocks, saved filter combinations, portfolio holdings you enter manually, your simulated Paper Trading account and trade history, and any price alerts you set are stored against your account so they persist across sessions and devices. None of this reflects a real brokerage account or real trades - Paper Trading uses virtual currency only.

3. Cookies and sessions

ChartFalcon uses a single session cookie to keep you signed in. It's required for the app to function and isn't used for advertising or cross-site tracking. It expires automatically or when you sign out.

4. How we use your data

To operate your account and remember your watchlists, notes, and preferences
To process Premium payments and apply the correct access period
To send you account-related emails (password resets, and, if you opt in, product updates)
To provide customer support when you contact us

We do not sell your personal data to third parties.

5. Third-party services we use

Razorpay - payment processing for Premium subscriptions
NSE (National Stock Exchange of India) - public market data feeds; no personal data is shared with NSE
Upstox - live price data during market hours; this is a one-way market-data feed, not a connection to your own broker account, and no personal data is shared with Upstox
Email delivery provider - used to send account-related emails (password resets, digests, alerts you opt into); your email address and the content of that email pass through this provider
Telegram - if you optionally link a Telegram chat ID, the same alerts are also sent there via the Telegram Bot API

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, your personal data (name, email, mobile, notes, watchlists) is deleted; payment records are retained as required for accounting and tax purposes.

7. Your rights

You can update your profile information and change your password at any time from within the app. To request a copy of your data or to have your account and personal data deleted, contact us at keshavpatidar2000@gmail.com.

8. Security

Passwords are stored using industry-standard hashing (bcrypt) - we never store your password in plain text and cannot look it up on your behalf. Data is transmitted over HTTPS.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with an updated "last updated" date.

10. Contact

Questions about your data? Contact us at keshavpatidar2000@gmail.com.