Privacy Policy

ProfitPanda ("ProfitPanda", "we") is the Data Fiduciary for the personal data described here. This policy applies to profitpanda.in, its emails and its WhatsApp messages.

Much of ProfitPanda (the market wrap and reports) can be used without an account, and then we collect almost nothing about you.

• Account: your name, email address, optional mobile number, and a one-way hash of your password (never the password itself). If you turn on two-factor authentication, its secret and hashed recovery codes.
• Consent: when you accepted the Terms of Use and Privacy Policy, and which version, so we can show your consent was given.
• Sign-in security: single-use links for confirming your email and resetting your password (stored as hashes, expiring in 24 hours and 30 minutes), and WhatsApp sign-in codes (hashed, expiring in 5 minutes). The “I'm not a robot” check runs entirely on our servers and your browser; no third-party captcha service or tracking cookie is used.
• Session security: an identifier for your one active session and when it was last used, so an account can be signed in on one device at a time.
• Payments: the plan, amount, status and Razorpay order and payment ids. Card, UPI and bank details are collected by Razorpay, not by us. For refunds we read the payer's phone number, email and UPI id from Razorpay (see section 4).
• Your desk: watchlists, alert rules, notifications, email and WhatsApp preferences, paper-trading rulebooks and simulated trades.
• WhatsApp (optional): your mobile number once you add it, and when it was verified. Verification codes are stored only as a hash and expire after 10 minutes.
• Cancellations: the reason and comments you give when cancelling, and the refund outcome.
• Technical: your IP address and email are used for a short time to limit sign-in and sign-up attempts (kept for up to one day). Homepage usage is counted as daily totals per feature, without identifying you.
• Emails: a record of which service emails were sent to you and when, so that you never receive the same one twice.

We do not collect Aadhaar, PAN, bank account numbers, broker credentials or your holdings, and we do not buy personal data from others.

• To create and secure your account, and to provide the features you subscribe to (consent and the performance of our contract with you).
• To take payments, issue refunds and meet accounting and tax obligations (legal obligation).
• To send the briefings, alerts and WhatsApp messages you turned on (consent, which you can withdraw at any time).
• To prevent abuse: rate limits, the single-session rule, and keeping the money-back trial to once per person (legitimate uses permitted by law, including preventing fraud).
• To understand which features are used and why members cancel, so we can improve the service, using aggregated figures where possible.

We do not sell your personal data, and we do not use it for third-party advertising.

When someone receives a money-back refund, we keep one-way hashes of their account id, normalised email address, verified mobile number and the phone, email and UPI id on the refunded payment. A hash cannot be turned back into the original value; we only compare hashes to see whether the same person has already used the trial. These hashes are kept for 3 years and are not linked to a usable profile. If a refund is refused because of a match and you believe it is a mistake, write to support@profitpanda.in.

We use these service providers (Data Processors), under contracts that require them to protect your data and use it only on our instructions:

• Vercel Inc.: website hosting and scheduled jobs (servers in Singapore and globally).
• Neon Inc.: the database (cloud hosting outside India).
• Razorpay Software Pvt. Ltd.: payments and refunds (India).
• Resend: sending emails (United States).
• Meta Platforms (WhatsApp Business Platform): WhatsApp messages, only if you turn them on.
• GitHub (Microsoft): running scheduled data jobs; no member data is stored there.

Some processors store data outside India. We transfer data only to countries not restricted by the Government of India under the DPDP Act, 2023. We may disclose data when required by law, a court or a regulator.

• Account, desk and preferences: while your account is open. When you ask us to delete your account, we delete them within 30 days.
• Payment and refund records: 8 years, as required by tax and company law.
• Refund-abuse hashes: 3 years from the refund.
• Sign-in rate-limit records: up to 1 day. Verification codes: 10 minutes. Email send records: while your account is open.

Under the DPDP Act, 2023 you can ask to access your personal data, correct or update it, erase it, withdraw consent, and nominate someone to exercise your rights if you die or become incapable. Email support@profitpanda.in from the address on your account; we respond within 30 days. Withdrawing consent does not affect processing already done, and some data must be kept for legal reasons (section 6).

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

• A session cookie keeps you signed in (strictly necessary; expires after 30 days or when you sign out).
• A short-lived cookie holds a signed confirmation for 5 minutes when you choose to sign in on a new device.
• Your light or dark theme choice is saved in your browser's local storage.

We do not use advertising or cross-site tracking cookies.

Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Passwords are hashed with bcrypt, access to admin tools requires two-factor authentication, and broker tokens are encrypted. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

ProfitPanda is not meant for anyone under 18, and we do not knowingly collect their data. If you believe a child has created an account, tell us and we will delete it.

We will post changes here and update the date at the top; for material changes we will also email members.

Grievance Officer: Grievance Officer, support@profitpanda.in.