Privacy Policy

Last updated: 13 June 2026

We collect the minimum needed to run your account and place orders through your broker. We never sell your data, and your broker credentials are encrypted at rest and never shown back to you or anyone.

1. Who we are

Alpha Invest (“we”, “us”) operates this algorithmic-trading software platform. This policy explains what personal data we collect, why, and your rights. For questions or grievances, contact support@alphainvest.in.

2. Data we collect

Account & identity — when you sign in with Google, we receive your name, email address and profile picture.
Broker credentials — API keys, tokens, client IDs, and (where the broker requires it) PIN/TOTP secrets that you choose to connect. These are encrypted and used only to validate the connection and place orders you authorise.
Strategy & trading data — strategies you create, backtests, paper trades, and order/audit records generated by your use of the Platform.
Usage & technical data — logs, IP address, device/browser info and timestamps, for security, debugging and abuse-prevention.
Billing data — if you subscribe, payment is handled by our payment provider; we receive transaction status and limited details, not your full card number.

3. How we use your data

To provide, operate and secure the Platform and your account.
To validate broker connections and place the orders your strategies generate.
To run the AI strategy assistant (your chat messages are processed to build your request).
To provide support, send service and trade notifications, and manage billing.
To detect, prevent and investigate fraud, abuse or security incidents, and to comply with law.

4. How broker credentials are protected

Broker credentials are encrypted at rest (Fernet / AES) and are never displayed again after you save them — only masked values are shown. They are used solely to connect to your broker and place orders you have configured. You can remove a broker connection at any time, which deletes its stored credentials.

5. Cookies & sessions

We use a strictly-necessary session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.

6. Service providers & sharing

We share data only with providers that help us run the service, under appropriate safeguards: Google (sign-in), our cloud host (Google Cloud, India region), our payment provider, the AI provider that powers the strategy assistant, and the broker(s) you connect. We do not sell your personal data. We may disclose data if required by law or to protect rights and safety.

7. Data location & retention

Data is hosted on Google Cloud (primarily the Mumbai / asia-south1 region). We retain your data while your account is active and as needed for legal, accounting and security purposes; we delete or anonymise it after that, subject to applicable law.

8. Security

We use encryption in transit (HTTPS) and at rest for sensitive credentials, access controls, and isolated environments for order execution. No system is perfectly secure; please use a strong, unique account and keep your devices safe.

9. Your rights

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023), you may request access to, correction of, or deletion of your personal data, and you may withdraw consent or close your account. To exercise these rights, email support@alphainvest.in; we may need to verify your identity first.

10. Children

The Platform is for users 18 and older. We do not knowingly collect data from children.

11. Changes

We may update this policy; material changes will be notified in-app or by email. The current version always applies.

12. Contact & grievances

Privacy questions or grievances: support@alphainvest.in. We aim to acknowledge requests promptly and resolve them within the timelines required by law.

This document is a general template and not legal advice; please have it reviewed by qualified counsel and complete the company entity, grievance-officer and data-retention specifics before relying on it.