Share Market

← Home

Privacy Policy

Last updated: July 2026

This Privacy Policy explains how we collect, use, and protect personal information when you use our Service. We respect your privacy and comply with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP), where applicable to our processing activities.

1. Data we collect

  • Account data: email address, display name, password hash (never stored in plain text), Google OAuth identifier when you use Google login.
  • Portfolio data: simulated holdings, trades, and cash balances you create in the app.
  • Technical data: IP address, browser type, and request logs on our servers for security and rate limiting.
  • Analytics (if enabled): aggregated usage metrics via privacy-friendly analytics tools — configure in production and update this section if you enable cookies.

2. How we use data

  • Authenticate you and maintain your session.
  • Send email verification codes (when SMTP is configured).
  • Persist your paper portfolio and trade history.
  • Operate, secure, and improve the Service.

3. Legal basis

We process your data based on your consent (account creation), performance of the service you request, and our legitimate interests in securing and operating the platform.

4. Sharing

We do not sell your personal data. We may share data with infrastructure providers (hosting, email delivery) under contract, or when required by law. Google OAuth is subject to Google's privacy policy when you choose that login method.

5. Retention

Account and portfolio data are retained while your account is active. You may request deletion by contacting us. Server logs are retained for a limited period for security.

6. Security

Passwords are hashed with bcrypt. Sessions use signed JWTs. Production deployments must use HTTPS, strong secrets, and restricted database access. No method of transmission over the Internet is 100% secure.

7. Your rights

Depending on applicable law, you may request access, correction, or deletion of your personal data, or withdraw consent where processing is consent-based. Contact us using the details below.

8. Children

The Service is not intended for users under 18 years of age.

9. Grievance officer

For privacy-related complaints, contact our Grievance Officer at privacy@yourdomain.com (replace before go-live). We aim to respond within 30 days.

10. Changes

We may update this policy. The “Last updated” date will change when we do. Continued use after updates constitutes acceptance of the revised policy.