Privacy Policy

This Privacy Policy explains what data SignalCue ("we", "us", or "our") collects, how we use it, and your rights in relation to it. By using the Platform you agree to this Policy.

1. What We Collect

We collect only what is necessary to provide the service:

• Account data: Your Google account email address and Google ID, obtained when you sign in with Google OAuth. We do not receive your Google password.
• Telegram ID: Your Telegram chat ID, obtained only if you voluntarily connect your Telegram account to receive alerts.
• Alert and portfolio data: The alerts you configure and the portfolio trades you manually enter. This data belongs to you and is used solely to provide the service.
• Usage data: Standard server logs including IP address, browser type, pages visited, and timestamps. Used for security monitoring and debugging.
• Payment data: Subscription and billing information is handled entirely by Razorpay. We do not store your card number or bank details — only a subscription ID and plan status returned by Razorpay after a successful payment.
• Terms acceptance: A record of which version of the Terms of Service you accepted and when, for legal compliance purposes.

We do not collect your trading history from brokers, your bank account details, your PAN or Aadhaar number, or any sensitive personal financial data beyond what you voluntarily enter into the portfolio tracker.

2. How We Use Your Data

• To authenticate you and maintain your session.
• To evaluate your configured alerts against live market data and deliver signals to your Telegram.
• To process subscription payments via Razorpay and enforce plan limits.
• To send service-related messages (plan expiry reminders, downtime notices). We do not send marketing emails.
• To detect abuse and ensure platform security.
• To comply with legal obligations.

We do not use your data to train machine learning models, sell to third parties, or share with advertisers.

3. Third-Party Services

We use the following third-party processors, each with their own privacy policy:

• Google (OAuth): Handles sign-in. We receive your email and Google ID. Governed by Google's Privacy Policy.
• Telegram: Delivers alert messages to your Telegram account if connected. Governed by Telegram's Privacy Policy.
• Razorpay: Processes subscription payments. Card and bank data is handled entirely by Razorpay and never touches our servers. Governed by Razorpay's Privacy Policy.
• Dhan / Angel One (market data): We use broker APIs to fetch live and historical market price data. Your personal data is not shared with these providers.

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Neon (managed cloud PostgreSQL) with encryption at rest and in transit. Server infrastructure runs on Hetzner in Germany. We apply standard security practices including access controls, encrypted connections (TLS), and regular backups.

No system is completely secure. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or tax compliance purposes. Signal logs and portfolio data are retained for the duration of your subscription and deleted after account closure.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Data portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, contact us at support@signalcue.in. We will respond within 30 days.

7. Cookies and Session Data

We use a single HTTP-only session cookie to maintain your login state. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required because we do not use non-essential cookies.

8. Children's Privacy

SignalCue is not directed at or intended for anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from someone under 18, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Continued use of the Platform after changes constitutes acceptance of the updated Policy. The version number and effective date at the top of this page always reflect the current version.

10. Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDP Act) to the extent applicable. Disputes are subject to the jurisdiction of Indian courts.

11. Contact

For any privacy-related queries, requests, or concerns, contact us at support@signalcue.in. We aim to respond within 5 business days.