Privacy Policy
Last updated: 10 July 2026
Template — review with legal counsel before relying on it. This describes how mywealthgrid (“we”) handles personal data under India’s Digital Personal Data Protection Act, 2023, and the GDPR where applicable.
1. Data we collect
- Account data — your name and email address, and a securely hashed password.
- Usage and portfolio data — screeners, watchlists, notes, alerts, holdings, transactions and other content you add or import.
- Technical data — IP address and browser/user-agent, kept for security and abuse prevention.
- Billing data — handled by Stripe; we store only a plan and a Stripe customer reference, never card numbers.
2. How we use it
To provide and secure the service, authenticate you, send transactional and (with your consent) alert/digest emails, process subscriptions, and improve the product. Market data and research scores are for education only and are not investment advice.
3. Legal basis
We process your data to perform our contract with you (providing the service), for our legitimate interests (security, product improvement), to meet legal obligations, and on your consent where required (e.g. marketing emails).
4. Sharing & processors
We do not sell your data. We share it with processors that run the service: our hosting/database provider, Stripe (payments) and Resend (email delivery). Each acts under contract and only as needed.
5. Retention
We keep your data for as long as your account is active. When you delete your account we remove your personal data; content you shared into a workspace may be retained in anonymised form so the workspace stays intact for other members.
6. Your rights
Subject to law, you may access, correct, export, or erase your personal data, and withdraw consent. You can export your data and delete your account from Settings → Profile, or contact us below. We aim to respond within statutory timelines.
7. Security
Passwords are hashed with scrypt; sessions and verification tokens are stored hashed; traffic is encrypted in transit. We apply access controls and encryption at rest at the infrastructure level.
8. Contact & grievances
For privacy requests or to reach our grievance officer, email [email protected].