Privacy Policy
AlgoVerve AI LLP (“AlgoVerve”, “we”, “us” or “our”) respects your privacy.
This Privacy Policy explains what information we collect when you use the AlgoVerve website, platform and related services. It also tells you why we collect it, how it is used and protected; when it may be shared, and the choices that are available to you.
By using AlgoVerve, you acknowledge that you have read this Privacy Policy.
Information We Collect
We collect only the information we need to:
- ›Provide
- ›Secure
- ›Maintain
- ›Improve our services.
Depending on your AlgoVerve usage, this may also include:
Account information
When you create an account, we may collect information such as:
- ›Name
- ›Email address
- ›Mobile number, where provided
- ›Account credentials
- ›Subscription and account information
Platform and usage information
When you use AlgoVerve, we may collect information about your interaction with the platform, such as:
- ›Features and services you use
- ›Strategy configurations
- ›Trading activity performed through the platform
- ›Platform activity and usage information
- ›Device, browser, and technical information
- ›IP address and related security information
Broker integration information
If you connect a supported broker account to AlgoVerve, we may receive information required to provide the connected functionality.
Depending on the broker and integration, this may include:
- ›Broker user ID
- ›Access or API token
- ›Order and trade status
- ›Open positions
- ›Margin and balance information
- ›Order and trade book information
This information is collected and used only for purposes related to the connected services.
Information we do not collect
AlgoVerve does not ask you to provide, and does not store:
- ›Your broker password
- ›Your broker OTP or two-factor authentication code
- ›Your card number, expiry date or CVV
- ›Your UPI PIN or net-banking password
Where supported, broker authentication takes place through the broker's own authentication or API process.
How We Use Your Information
We use information collected through AlgoVerve to:
- ›Create and maintain your account.
- ›Provide the platform and features you request.
- ›Connect and communicate with supported broker services.
- ›Execute and monitor trading activity initiated through the platform.
- ›Record and display trading and strategy information.
- ›Provide customer support and troubleshoot technical issues.
- ›Maintain platform security and prevent unauthorised activity.
- ›Understand how the platform is used and improve our services.
- ›Process subscriptions and payments.
- ›Meet applicable legal, regulatory and contractual obligations.
- ›Communicate important information about your account, services and security.
We do not use your information to provide investment advice or personalised trading recommendations.
We do not sell your personal information, and we do not use your strategy configurations or trading data to trade for our own account.
Legal basis for processing
We process your information where:
- ›You have given consent, which you may withdraw at any time.
- ›Processing is necessary to perform the contract between you and AlgoVerve.
- ›Processing is necessary to comply with a legal or regulatory obligation.
- ›Processing is necessary for our legitimate interest in securing, operating and improving the platform, where that interest is not overridden by your rights.
Broker Integrations
AlgoVerve allows users to connect supported broker accounts to access trading-related functionality.
When you connect a broker, AlgoVerve may receive information from that broker that is necessary to provide the integration. The exact information available depends on the broker and the permissions granted through its authentication or API process.
AlgoVerve does not ask you to provide your broker password or OTP.
How broker tokens are handled
A broker access or API token is created through the broker's own authentication process. AlgoVerve then handles that token as follows:
- ›The token is held on AlgoVerve's servers. It is not stored in your browser and is not exposed to client-side code.
- ›The token is transmitted only over encrypted HTTPS/TLS connections.
- ›The token is used only to carry out the actions you have configured, such as placing or modifying orders and reading your positions, margins, and order and trade history.
- ›Broker tokens are short-lived. Most brokers issue a token valid for a single trading day, after which it expires and a new token is generated the next time you connect.
- ›When you disconnect a broker from AlgoVerve, we end the session with the broker and stop using the token.
Broker credentials and authentication remain subject to the security practices and terms of the respective broker.
You should review the privacy and security policies of your broker before connecting your account.
Trading Logs and Journals
AlgoVerve records certain information about strategy activity, orders and executions so that users can monitor, analyse and review their trading activity.
Depending on the features you use, this may include:
- ›Strategy information
- ›Order and execution times
- ›Order status
- ›Entries and exits
- ›Broker responses
- ›Positions
- ›Performance information
- ›Errors or execution events
- ›Journal entries and related information
These records help you review what happened, monitor strategy behaviour, troubleshoot issues and evaluate your trading process.
Trading records are intended to reflect activity available to AlgoVerve through the platform and connected services. They should not be interpreted as a guarantee that every market event, broker response, or execution outcome will be recorded without delay or error.
Payment Information
Subscription payments on AlgoVerve are processed by Razorpay Software Private Limited (“Razorpay”), a payment aggregator authorised by the Reserve Bank of India.
Where your payment details are entered
Card, UPI, net-banking and wallet details are entered directly into Razorpay's own PCI DSS compliant checkout. Those details are transmitted to Razorpay and are never sent to, processed by, or stored on AlgoVerve's servers.
AlgoVerve does not store your:
- ›Card number, expiry date or CVV
- ›UPI PIN
- ›Net-banking password
- ›Wallet credentials
- ›Any other payment authentication credential
What AlgoVerve does retain
To operate billing, issue invoices, process refunds and meet tax and accounting obligations, we retain a limited payment record:
| Information | Why we keep it |
|---|---|
| Razorpay order and payment ID | To reconcile a payment and trace it for refunds or disputes |
| Amount, currency and payment status | Billing records, invoicing and accounting |
| Payment method type, for example UPI or card | Support, reconciliation and diagnosing failed payments |
| Date and time of the transaction | Billing records and statutory accounting |
| Plan or subscription purchased | To provision your subscription and apply your plan limits |
| Billing name, email and invoice details | To issue a valid invoice and meet tax requirements |
We never receive or retain your full card number. Where a saved payment method is shown back to you, it is displayed using the masked details supplied by Razorpay.
Razorpay processes payment information under its own terms and privacy policy, available at razorpay.com. We recommend reviewing it before completing a payment.
Data Security
We maintain reasonable security practices and procedures of the kind contemplated by Section 43A of the Information Technology Act, 2000 and the rules made under it. They are designed to protect information against unauthorised access, misuse, loss, alteration or disclosure.
The controls we apply include:
- ›Encryption in transit: traffic to the website, the platform and our APIs is served over HTTPS/TLS.
- ›Session security: your login session is held in an HttpOnly, Secure cookie that cannot be read by JavaScript, and the short-lived access token is held only in memory and discarded when you reload or close the page. This limits the impact of cross-site scripting.
- ›Server-side handling of broker tokens: broker access tokens are kept on our servers and are never exposed to the browser.
- ›Reduced payment scope: card and UPI credentials are captured on Razorpay's PCI DSS compliant checkout and never reach our systems.
- ›No collection of broker passwords or OTPs.
- ›Access controls: internal access to production systems and user data is authenticated and restricted to authorised personnel on a need-to-know basis.
- ›Activity logging: strategy, order and execution events are logged so that account activity can be reviewed and investigated.
- ›Monitoring: platform and server health is monitored to detect faults and unusual activity.
- ›Maintenance: platform dependencies and server software are patched and updated as part of routine operations.
- ›Backups: data is backed up so that service and records can be restored after a failure.
If we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board of India to the extent and in the manner required by applicable law.
You are also responsible for protecting access to your AlgoVerve account, email account, devices and connected broker accounts. Do not share account credentials or authentication information with others, and contact us promptly if you believe your account has been compromised.
Your Responsibilities
You should:
- ›Keep your AlgoVerve credentials confidential.
- ›Use appropriate security measures on your devices.
- ›Avoid sharing account or authentication information.
- ›Review broker permissions before connecting an account.
- ›Notify us if you suspect unauthorised access.
- ›Review your trading activity and connected broker accounts regularly.
- ›Give us information that is accurate, and keep your account details up to date.
Our respective liabilities in connection with the services are set out in the Terms & Conditions, which should be read together with this Privacy Policy.
How Long Do We Retain Information
We retain information only for as long as it is reasonably necessary for the purpose it was collected for, and then delete or dispose of it in accordance with applicable law.
Different categories of information are retained for different periods:
| Information | Retention period |
|---|---|
| Account and profile information | For as long as your account is active, and for a reasonable period after closure to handle disputes, support queries and legal obligations |
| Trading, strategy, order and journal records | For as long as your account is active, so that you keep access to your own history, and thereafter for the period required by applicable law |
| Payment, invoice and tax records | For the period required under applicable Indian tax, accounting and company law |
| Broker access and API tokens | Only while the broker connection is active. Tokens expire with the broker's own validity period, typically the same trading day, and are invalidated when you disconnect |
| Security, access and audit logs | For the period needed to investigate security incidents and misuse, and to meet legal obligations |
| Support correspondence | For as long as needed to resolve your query and to keep a record of the resolution |
| Analytics information | In aggregate or pseudonymous form, for up to the retention period configured in Google Analytics |
Where a longer period is required by law, by regulation, or by an ongoing legal or regulatory proceeding, that longer period will apply. Where you ask us to delete information, we will do so unless we are required to retain it.
Information we no longer need is deleted, or is anonymised so that it can no longer be linked to you.
Your Privacy Rights
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:
- ›Request access to a summary of the personal information we hold about you and how we process it.
- ›Request correction or completion of information that is inaccurate, misleading or incomplete.
- ›Request erasure of your personal information where it is no longer required and we are not obliged to retain it.
- ›Withdraw consent, where our processing is based on your consent.
- ›Object to or restrict certain processing, where applicable.
- ›Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
- ›Opt out of promotional communications.
- ›Raise a grievance with us, and escalate it, as described in the Grievance Redressal section below.
How to exercise a right
Write to us using the details in the Contact Us section, stating the right you wish to exercise and giving us enough information to identify your account. We may need to verify your identity before acting on a request.
We will respond to a request within 30 days of receiving it, or sooner where applicable law requires it. If we cannot act on a request, we will tell you why.
Exercising a right is free of charge. Some requests may be subject to legal or operational limitations, for example where information must be retained for statutory, accounting or regulatory reasons.
Third-Party Services and Links
AlgoVerve may integrate with or link to third-party services, including brokers, payment providers and other technology providers.
Those services operate independently and may have their own privacy policies and terms.
We hold no responsibility towards the privacy practices of third-party services. You should review their policies before providing them with any information that connects to your account(s).
Communications
We may contact you regarding matters necessary to provide and operate your AlgoVerve account and services.
These communications may include:
- ›Account notifications
- ›Security alerts
- ›Service updates
- ›Subscription information
- ›Transactional information
- ›Technical or support communications
These communications are necessary for certain aspects of the service and cannot necessarily be opted out of.
Where applicable, we may also send promotional communications.
You may opt out of promotional communications using the unsubscribe mechanism provided in the communication, or by contacting us directly.
Children's Privacy
AlgoVerve is intended for users who are 18 years of age or older.
We do not knowingly collect personal information from individuals under 18.
If we become aware that an account has been created by someone under the applicable minimum age, we may take steps to close the account and delete the associated information, subject to applicable legal and regulatory requirements.
Changes to This Privacy Policy
We may update this Privacy Policy when our services, data practices or legal obligations change.
When we make changes, we will publish the revised policy on this page and update the effective date.
Where required by applicable law, we may provide additional notice or obtain consent for material changes.
We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle information.
Grievance Redressal
If you have a complaint about how your personal information has been handled, or about a payment or service issue, you may raise it with our Grievance Officer, appointed under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
How we handle a grievance
- ›We acknowledge every grievance within 48 hours of receiving it.
- ›We aim to resolve a grievance within 15 days of receiving it, and will tell you if we need longer and why.
- ›We confirm the outcome in writing, to the email address registered with your account.
Please include your registered email address, a description of the issue, and any relevant dates or transaction references, so that we can identify your account and investigate.
If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023. For a complaint about a payment, you may also escalate to the grievance channel of the relevant payment provider, or under the Reserve Bank of India's Ombudsman Scheme.
Contact Us
If you have a question about this Privacy Policy, your personal information, or how AlgoVerve handles your data, please contact:
For privacy-related requests, please include sufficient information for us to identify your account and understand your request.
This Privacy Policy should be read together with our Terms & Conditions and Refund Policy.