Last updated · July 2026

Privacy Policy

This Privacy Policy explains what personal information Stockraft ("we", "us") collects through Tradkraft, why we collect it, and how we handle it. It is written to align with India's Information Technology Act, 2000 (and the SPDI Rules, 2011) and the Digital Personal Data Protection Act, 2023. By using Tradkraft you agree to the practices described here.

Who we are

Tradkraft is a trading-journal and analytics product operated by Stockraft, a sole proprietorship of Rohit Modak, based at Radhanagar, Agartala, Tripura West, Tripura, India. For any privacy question you can reach us at support@tradkraft.com.

Information we collect

We collect only what we need to run your journal:

  • Account details — your email address and password (your password is hashed and managed by our authentication provider; we never see or store it in plain text) and a display name.
  • Preferences — your market region, language, subscription status and notification opt-ins.
  • Broker connections — the access tokens or API credentials you choose to connect, stored encrypted (see Security), plus non-sensitive connection details such as the broker name, an account label and sync status.
  • Your trading journal — the trades you log or sync: instrument, direction, prices, quantities, profit and loss, and any emotions, notes, tags, strategies and trading-account details you add.
  • Broker fill history — trade executions we read from the brokers you connect. Sensitive identifiers found in the broker data (such as PAN, client ID, phone, email, demat, bank account, Aadhaar or UCC) are stripped out before anything is stored.
  • Voice journaling — if you use voice input, the microphone audio is sent for transcription and is NOT stored by us. Only the resulting text you choose to save into a trade, and non-identifying usage counts, are kept.
  • Payment details — we store your subscription status and a Razorpay subscription reference. We never receive or store your card, UPI or bank details — those are entered directly into Razorpay's secure checkout.
  • Support messages — the name, email and message you send us through the contact form.
  • Technical data — an approximate country derived from your IP address by our hosting provider (used to set your currency; we do not store your raw IP), and basic counters used to prevent abuse.
  • Website usage on our public pages — on our public marketing pages only (never inside your journal), we record which pages you view, what you click, and how you reached us: the referring website and any campaign tags in the link you followed. This includes a replay of your visit to those public pages, used to see where the pages confuse people so we can fix them. Every form field is masked in these recordings — anything you type, including your email and password, is never captured. If you create an account, the pages you viewed before signing up are linked to it so we can tell which campaigns bring people to Tradkraft.
  • How we know where you came from — when you first arrive, we store the campaign tags and referring site in your browser so that if you sign up later we can credit the right source. This is kept for 30 days and is cleared once you create an account.

How we use your information

We use your information to operate and improve the service, specifically to:

  • run your journal and sync your trades from connected brokers;
  • compute your analytics, statistics and discipline score;
  • power the AI Coach and AI Mentor when you use them;
  • process your subscription and prevent duplicate or fraudulent charges;
  • send you notifications you have opted into (such as reconnect reminders);
  • respond to your support requests; and
  • keep the service secure and prevent abuse.

We do not sell your data

We do not sell, rent or trade your personal information, and we do not use your trades to train AI models offered to third parties. We share data with the service providers below only to run Tradkraft — never for their own marketing.

AI processing

When you use the AI Coach or AI Mentor, a summary of the relevant trades — metrics, emotions, notes and strategy names — is sent to trusted third-party AI providers to generate your analysis. We do NOT send your name, email or any government ID. Trades that were synced from the Zerodha broker API are never sent to any AI feature.

Service providers we share data with

To run Tradkraft we rely on the following processors:

  • Supabase — our database, authentication and backend hosting.
  • Vercel — website hosting; it processes standard request data including your IP to serve the site and derive your country.
  • PostHog — website analytics for our public marketing pages, used to understand how those pages perform. Its servers are located in the European Union. It is not loaded inside your trading journal, and it never receives your trades, broker connections or anything you type into a form.
  • Razorpay — payment processing. Your card / UPI / bank details are entered directly into Razorpay and never reach our servers; we share your user reference and chosen plan.
  • Third-party AI providers — generate your AI Coach and AI Mentor analysis from the trade summary described above.
  • A third-party speech-to-text provider — transcribes your voice input; your audio is processed only for that request and is not stored.
  • Your connected brokers and platforms — we authenticate with the credentials you provide to READ your trade history (for example Zerodha, Fyers, Dhan, Angel One, Groww and Upstox for Indian markets; cTrader, MetaTrader / MetaApi and TradeLocker for forex). Access is read-only — we never place, modify or cancel any order.

How we protect your data

Security is built into how the product stores your information:

  • Broker credentials are encrypted at rest using AES-256-GCM and are never sent back to your browser.
  • Every record is protected by row-level security, so only you can access your own data.
  • Card and payment data never touch our servers — Razorpay collects it directly.
  • Sensitive identifiers are stripped from broker data before it is stored.
  • Indian-market and forex data are kept fully isolated from each other.

How long we keep it

Your journal — trades, notes and analyses — is retained until you delete it or close your account. Operational logs are pruned automatically within a few days. If your subscription lapses, your stored broker credentials are purged while your journal is preserved so you can resubscribe and continue where you left off.

Your rights and choices

You are in control of your data. Within the app you can edit or delete individual trades, bulk-delete trades by date, disconnect a broker (which stops syncing immediately) and sign out at any time. To access, export, correct or delete all of your data, to remove a disconnected broker's stored credentials, or to withdraw consent, email us at support@tradkraft.com. Deleting your account permanently removes all associated data.

Children

Tradkraft is intended only for individuals aged 18 or older. We do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy from time to time; the "last updated" date above reflects the current version. Material changes will be communicated within the app or by email.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, our Grievance Officer is Rohit Modak (support@tradkraft.com). We acknowledge complaints within 48 hours and aim to resolve them within one month. See our Grievance Redressal page for details.

Contact us

Stockraft (proprietor: Rohit Modak) · Radhanagar, Agartala, Tripura West, Tripura, India · support@tradkraft.com · Monday to Friday, 10:00 AM – 6:00 PM IST.