Privacy Policy

What we collect

Your email address and a hashed password when you register. If you fill them in on your profile, your name and phone number; both are optional. Your strategies, simulated trades, journal entries, risk settings and activity within the platform. Login timestamps and IP addresses, kept for account security. SmartPaperDesk never asks for a broker login; if you add your own market data key, it is stored encrypted and used only to fetch prices for your own view. If you add an AI key for the Insights feature, that key is stored encrypted and used only for your own requests. If you use the Android app and allow notifications, we also keep a push token for your device. This is an identifier issued by Google Firebase Cloud Messaging that lets us deliver alerts to that device, and we store it with your account along with the platform (Android).

What we do with it

Run the service for you, including sending the account emails and app alerts described below. Your trading data is yours: other users never see it, and we do not sell or share personal data with advertisers. The platform administrator can see account-level information (email, plan, login time and IP, verification status) for support and security, but not your dashboard, journal or keys.

Where it lives

Data is stored in the platform’s own database. Secrets (market data keys, AI keys) are encrypted at rest. Nightly backups exist for disaster recovery and follow the same access rules.

A small number of service providers help run the platform and process limited data on our behalf: Hostinger, which hosts the server the platform runs on; Resend, which delivers our account emails; Groq, which answers the in-app help assistant and the free AI features when you have not added an AI key of your own; Google Firebase Cloud Messaging, which delivers app alerts; and Telegram, only if you choose to link your account to our Telegram bot for alerts. If you add your own Anthropic key for the Insights feature, your AI requests go to Anthropic under that key. Some of these providers operate servers outside India. Site visit statistics are counted with Umami, which we run on our own server rather than through an outside analytics company.

Your rights

In line with India’s Digital Personal Data Protection Act, you can ask what data we hold about you, correct it, or delete your account. Deleting your account removes your strategies, trades, journal, settings and stored keys. You can delete your account yourself from Settings, or write to us at hello@smartpaperdesk.in from your registered email.

Cookies and tracking

The web app stores login tokens and your theme preference in your own browser. There are no advertising trackers.

Email

We send account emails (verification, a welcome note, password reset, and important security notices) and a weekly summary of your own paper activity, which every summary lets you turn off with one click. We also send alert emails you choose: scanner alerts if you switch on email for a scanner, and watchlist alerts on paid plans if you switch on alerts for a watchlist item. No marketing email without separate consent.

Push notifications

The Android app can send you alerts you have set up yourself: scanner matches, stop levels reached on your simulated trades, and strategy exits. These alerts are educational information about your own practice activity, not recommendations to buy or sell anything.

To deliver them, the app sends your device’s push token to our server, where it is linked to your account and used only to send your own alerts. If you don’t allow notifications on your phone, no token is sent. The token is not used for advertising, and the app contains no advertising ID, analytics SDK or crash-reporting SDK. Alerts are delivered through Google Firebase Cloud Messaging, which receives the token and the alert text for the sole purpose of delivering the notification.

You can switch alerts off at any time from the Account screen in the app, which removes the token from our server, or in your phone’s Android settings under the “Trading alerts” notification channel. When you log out, the app removes the token from our server, and deleting your account removes it as well.

See also the Terms of Use and the Risk Disclaimer.