Privacy Policy

Pinbar.ai ("we", "us", "our", or "Platform"), a product of Bazingaa Production Pvt Ltd, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our trading analytics and journaling platform.

This Privacy Policy applies to our web platform (pinbar.ai), our Android application distributed via Google Play Store, and our iOS application distributed via the Apple App Store.

This policy is designed to comply with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and aligns with the principles of the upcoming Digital Personal Data Protection Act (DPDP Act).

By using Pinbar.ai, you consent to the collection and use of your information as described in this Privacy Policy.

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number (optional)
• Authentication Data: OAuth tokens from Google Sign-In (we do not store passwords)
• Profile Information: Display name, avatar, preferences
• Communication Data: Support tickets, feedback, and correspondence with us

2.2 Trading Data from Connected Brokers

• Trade History: Entry/exit prices, quantities, timestamps, symbols, P&L
• Position Data: Open positions, unrealized P&L
• Account Metadata: Broker name, client ID, account type
• API Tokens: Read-only access tokens for data synchronization (encrypted)

2.3 Payment & Billing Information

• Transaction Records: Payment amounts, dates, invoice numbers
• Plan Information: Subscription type, billing cycle, trade credits
• GST Details: For invoice generation (if provided)

Note: Complete card numbers, CVV, and UPI PINs are processed and stored exclusively by Razorpay. Pinbar.ai only stores tokenized references for recurring payments.

2.4 Automatically Collected Information

• Usage Data: Features accessed, time spent, clicks, navigation patterns
• Device Information: Browser type, operating system, screen resolution
• Log Data: IP address, access times, error logs
• Cookies: Session management, preferences, analytics

To ensure your security and privacy, we explicitly do NOT collect or store:

• Broker Login Passwords: We never ask for or store your broker's login password
• Trading Credentials: We cannot place trades or access your funds
• Bank Account Details: Direct bank account numbers are not collected
• Card Details: Full credit/debit card numbers, CVV, or expiry dates (handled by Razorpay)
• UPI PIN: Your UPI PIN is never transmitted to or through our systems
• Aadhaar or PAN: We do not collect government ID numbers for verification

We use your information for the following purposes:

4.1 Service Delivery

• Synchronizing and displaying your trade data
• Generating AI-powered analytics, pattern observations, and summaries
• Providing historical performance reports and heatmaps
• Enabling historical performance analysis and market replay features

4.2 Billing & Payments

• Processing payments and managing subscriptions
• Calculating trade-based charges
• Generating GST-compliant invoices
• Managing referral credits and rewards

4.3 Platform Improvement

• Analyzing usage patterns to improve features
• Training and improving AI models (using anonymized, aggregated data)
• Identifying and fixing bugs and performance issues
• Developing new features based on user behavior

4.4 Communication

• Sending transactional emails (invoices, payment confirmations)
• Providing customer support responses
• Sending important service announcements
• Marketing communications (with your consent, which you may withdraw)

4.5 Legal & Security

• Complying with legal obligations and regulatory requirements
• Preventing fraud, abuse, and unauthorized access
• Enforcing our Terms of Service

5.1 Storage Location

Your data is stored on secure cloud infrastructure with servers located in regions that comply with applicable data protection regulations. We use industry-standard cloud service providers with robust security certifications.

5.2 Security Measures

• Encryption in Transit: All data transmitted between your device and our servers uses TLS 1.2+ encryption
• Encryption at Rest: Sensitive data, including API tokens, is encrypted using AES-256 encryption
• Access Controls: Role-based access with principle of least privilege
• Regular Audits: Periodic security assessments and penetration testing
• Secure Authentication: OAuth 2.0 for Google Sign-In, JWT tokens for sessions

5.3 Broker API Security

Broker API tokens are stored in encrypted form and used exclusively for read-only data synchronization. We cannot use these tokens to execute trades, transfer funds, or modify your broker account settings.

We do NOT sell your personal data or trading information to any third party.

Mobile App Data Usage: Data collected by the Pinbar.ai mobile applications is used solely for app functionality, analytics, customer support, and legal compliance, and is not used for third-party advertising or tracking across apps.

We may share data with the following categories of third parties:

6.1 Payment Processors

• Razorpay: For processing payments, managing subscriptions, and handling refunds. Razorpay is PCI-DSS compliant and handles all sensitive payment information.

6.2 AI Service Providers

• We use AI services to generate pattern observations and analytical summaries
• Data shared with AI providers is anonymized and stripped of personally identifiable information
• AI providers are contractually bound to data protection obligations

6.3 Cloud Infrastructure

• Cloud hosting providers for data storage and processing
• Content delivery networks for performance optimization

6.4 Analytics Services

• Website analytics to understand usage patterns (anonymized)
• Error tracking services to identify and fix bugs

6.5 Legal Requirements

We may disclose your information if required by:

• Court orders or legal process in India
• Law enforcement requests with proper legal authority
• Regulatory bodies such as SEBI, RBI, or tax authorities
• Protection of our legal rights or investigation of fraud

We retain your data for the following periods:

• Account Data: Until you delete your account, plus 30 days for backup recovery
• Trading Data: As long as your account is active, plus 1 year after deletion for analytics integrity
• Billing Records: 7 years as required by Indian tax and accounting regulations
• Communication Records: 2 years for support quality and dispute resolution
• Log Data: 90 days for security and debugging purposes

After retention periods expire, data is permanently deleted or anonymized in a manner that prevents re-identification.

You have the following rights regarding your personal data:

8.1 Right to Access

Request a copy of the personal data we hold about you.

8.2 Right to Correction

Request correction of inaccurate or incomplete personal data.

8.3 Right to Deletion

Request deletion of your account and personal data, subject to legal retention requirements. Note that billing records must be retained for tax compliance.

How to delete your account: You can request account deletion directly within the app by navigating to Settings → Account → Delete Account, or by emailing us at info@pinbar.ai with the subject line "Account Deletion Request." Upon receiving your request, we will delete your account and all associated personal data within 30 days, except for billing records required by law.

8.4 Right to Data Portability

Export your trade data and analytics in a machine-readable format (CSV, JSON) through your dashboard settings.

8.5 Right to Disconnect Brokers

Disconnect any connected broker at any time from your Settings. This immediately revokes our access to that broker's API.

8.6 Right to Withdraw Consent

Withdraw consent for marketing communications at any time by clicking "Unsubscribe" in emails or updating your notification preferences.

To exercise any of these rights, contact us at info@pinbar.ai. We will respond within 30 days.

This section provides a summary aligned with Google Play and Apple App Store data safety disclosures.

Data Collected

• Personal Info: Name, email address (for account creation & communication)
• Financial Info: Trade history, P&L data, broker account metadata (for app functionality)
• App Activity: Feature usage, in-app interactions (for analytics & improvement)
• Device Info: Device type, OS version, browser (for compatibility & debugging)

Data Shared with Third Parties

• Payment Processor (Razorpay): Transaction amounts for payment processing
• AI Providers: Anonymized, non-identifiable trade data for generating analytics
• Cloud Infrastructure: Encrypted data for hosting and storage

Data NOT Collected or Shared

• Precise location
• Contacts, SMS, or call logs
• Photos, videos, or audio
• Health or fitness data
• Data is never sold to third parties
• Data is not used for advertising or ad targeting

Security Practices

• All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Users can request data deletion via Settings → Account → Delete Account

We use the following types of cookies:

• Essential Cookies: Required for login, session management, and core functionality
• Preference Cookies: Remember your settings like theme (dark/light mode)
• Analytics Cookies: Help us understand how users interact with the platform

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the Platform.

Pinbar.ai is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

We may update this Privacy Policy periodically. Material changes will be communicated via:

• Email notification to your registered email address
• In-app notification upon login
• Update to the "Last Updated" date at the top of this page

We encourage you to review this policy periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.

For privacy-related inquiries, data access requests, or concerns, contact us at:

• Privacy Officer / Data Protection Contact: info@pinbar.ai
• General Inquiries: info@pinbar.ai
• Business Name: Bazingaa Production Pvt Ltd
• Operating Country: India

We aim to respond to all privacy-related requests within 30 days.