Your Privacy Matters

🏢 1. Who We Are

Invest Alpha (“we”, “us”, “our”) is a web-based investment analytics platform developed and operated under the A F45 Initiative. The app is deployed as a Progressive Web App (PWA) and optionally as a Trusted Web Activity (TWA) on Android.

For all privacy matters, you may contact us at the address listed in Section 14.

📋 2. What Information We Collect

We collect information in the following categories:

We do not collect: government ID numbers, payment card details, precise GPS location, microphone or camera data, contacts, or any sensitive personal data as defined under applicable law.

⚙️ 3. How We Use Your Information

We use the information we collect exclusively for the following purposes:

• Authentication & account management — to identify you, maintain your session, and let you sign in and out securely.
• Personalisation — to remember your watchlist, portfolio, theme preference, alert settings, and other in-app choices between sessions.
• Service delivery — to fetch market data, generate AI-powered insights, and display analytics tailored to your usage within the app.
• Security & fraud prevention — to detect unusual sign-in patterns or unauthorised access attempts via Firebase Authentication.
• Product improvement — aggregate, anonymised usage signals may be used to improve the app. Individual behaviour is never profiled.
• Legal compliance — to comply with applicable Indian laws, court orders, or regulatory requirements if and when required.
• Communications — to send you important service updates (e.g. changes to this Privacy Policy or Terms of Use). We do not send marketing emails without your explicit consent.
• Support — to respond to your requests, questions, or complaints submitted via email.

🔗 4. Third-Party Services

Invest Alpha integrates with the following third-party services. Each operates under its own privacy policy:

We do not use advertising networks, tracking pixels, social-media share buttons, or any third-party analytics beyond what Firebase provides.

💾 5. Local Storage & Caching

Invest Alpha makes extensive use of your browser's localStorage and the Service Worker cache to improve performance and enable offline use. This data never leaves your device unless explicitly described elsewhere in this policy.

Data stored locally includes:

• Your watchlist and portfolio entries
• Cached market data, news, and commodity prices (refreshed every 6 hours)
• AI-generated radar picks and analysis results
• Theme preference (light / dark)
• Price alert configurations
• Authentication session tokens managed by Firebase

You can clear all locally stored data at any time by clearing your browser's site data for this domain, or by using the sign-out option which removes the active session token.

We do not use third-party cookies for tracking or advertising.

🚫 6. Data Sharing & Selling

We may share information only in these limited circumstances:

• Service providers: The third parties listed in Section 4 receive only the minimum data necessary to perform their function.
• Legal obligations: If required by Indian law, a valid court order, or a regulatory authority (e.g. SEBI, CERT-In), we may disclose information. We will notify affected users where legally permitted to do so.
• Business transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred, provided the acquiring entity continues to comply with this Privacy Policy or provides equivalent protection.

🍪 6b. Cookies & Tracking Technologies

Invest Alpha uses no advertising cookies and no cross-site tracking. The following limited technologies are used:

We do not use: Google Analytics, Meta Pixel, Hotjar, Mixpanel, Clarity, or any other behavioural analytics or advertising tool.

📅 7. Data Retention

We retain your data for as long as your account is active or as needed to provide the service:

• Account data (Firebase Auth): retained until you delete your account.
• Locally cached app data: stored on your device until you clear browser data or uninstall the app.
• Server-side logs (Netlify access logs): automatically purged by Netlify per their standard retention policy (typically 30 days).
• Firebase operational logs: retained per Google's Firebase retention policies.

To request deletion of your account and associated Firebase Auth data, contact us at admininvestalpha@gmail.com with the subject line “Account Deletion Request”. We will process your request within 30 days.

🔐 8. Security

We implement the following technical and organisational measures to protect your information:

• HTTPS everywhere: All communication between your browser and our servers is encrypted using TLS.
• Firebase Authentication: Google-managed, industry-standard authentication infrastructure with brute-force protection, rate limiting, and anomaly detection.
• No raw password storage: Passwords are never stored in plaintext. Firebase Auth handles all credential hashing and salting.
• Minimal data collection: The less data we hold, the less there is to protect. We deliberately avoid collecting data we do not need.
• API key protection: External API keys are either managed server-side via Netlify environment variables or scoped to specific authenticated domains.

Despite these measures, no system is completely secure. If you discover a security vulnerability, please report it responsibly to admininvestalpha@gmail.com.

✅ 9. Your Rights

Under applicable Indian law (including the Digital Personal Data Protection Act, 2023) and generally accepted privacy principles, you have the following rights:

To exercise any of these rights, contact us using the details in Section 14. We will respond within 30 calendar days.

👶 10. Children's Privacy

Invest Alpha is not intended for use by persons under the age of 18 years. We do not knowingly collect personal data from minors. Market information, financial analytics, and investment-related content on this platform are suitable only for adults.

If you believe a minor has created an account or provided personal data without appropriate consent, please contact us immediately at admininvestalpha@gmail.com and we will delete the data promptly.

📝 11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the app, our practices, or applicable law. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page.
• Display an in-app notification on your next sign-in if the changes are significant.

Your continued use of Invest Alpha after the effective date of any changes constitutes your acceptance of the revised policy. If you do not agree, please discontinue use and contact us to delete your account.

🗑️ 12. Delete Your Account

You can request permanent deletion of your Invest Alpha account and all associated data at any time.

What gets deleted:

• Your Firebase Auth account (email, Google UID, display name)
• Any server-side usage data linked to your UID
• Your premium/free tier assignment

What you should clear manually:

• Local app data — go to your browser/app Settings → Clear Storage for this site

To request deletion, email us at:

This right is guaranteed under the Digital Personal Data Protection Act, 2023 (India).

⚖️ 13. Grievance Redressal

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the name and contact details of the Grievance Officer are:

If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted under the DPDP Act, 2023.

📬 14. Contact Us

For any privacy-related questions, data requests, or concerns, please reach out to us:

This Privacy Policy was prepared in accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023 (India).