Privacy Policy

Forms. When you create an account we collect your email address and name (or, if you sign in with Google, the basic profile Google shares with us — name, email, and profile picture). When you submit our waitlist or contact form, we collect your email address, an optional stock ticker, and an optional message. We also store the in-product activity you generate, such as advisors you follow, stocks you watch, and screens you save, to provide those features.

Server logs. Our servers automatically record IP address, user agent, requested URL, timestamps, and the first-party visitor identifier described below. These logs are retained for up to 365 days and used for abuse prevention, security investigation, debugging, and traffic analysis — for example, understanding how much of our traffic is search-engine crawlers, and which pages are most requested. After that period they are deleted automatically. We keep aggregate summaries derived from them — daily and monthly counts by page, country, and client type, containing no IP address or user agent — for longer, so we can compare traffic year on year; those summaries cannot be linked back to you.

Usage and device records. We record first-party product-usage events — the pages you view and the actions you take, such as opening a tip, following an analyst, completing onboarding or running a screener — together with a random visitor identifier kept in a first-party cookie and in your browser's local storage, a per-tab session identifier, your IP address and country, your browser's user agent, the site that referred you to us and any campaign tags (utm_source, utm_medium, utm_campaign) on the link you arrived by, and your user id when you are signed in. Because the visitor identifier stays the same when you sign up, sign in or sign out, we can connect activity in that browser before you sign up, or after you sign out, with your account. We use these records to operate and secure the service, to understand how visitors find and use the product before and after they sign up, and to measure repeat visits and engagement, and we may use them to tell people from automated traffic, investigate scraping and abuse (including several accounts operated from one connection), and personalise your experience. They are part of providing the service, so using the site is conditional on them and they are not switched off by Cookie preferences. The IP address and user agent held in these records are deleted after 365 days; the rest of each record — including the visitor identifier, your user id, country, referring site and the pages and actions — is kept as product history without a fixed time limit. The visitor identifier stays in your browser until you clear its cookies and site data.

Cookies. We use cookies in four categories — strictly necessary, analytics, functional, and marketing — which you can review and control at any time via the Cookie preferences link in the footer. We operate an opt-out model during beta, so analytics, functional and marketing cookies — including Google Tag Manager and Google Analytics loaded through Google Consent Mode — are on by default and begin loading when you first visit, and may be used to measure usage and build an interest profile. You can reject or customise non-essential cookies at any time via the Cookie preferences link in the footer. Strictly necessary cookies are always on. Cookie preferences set the Google Consent Mode signals that Google Tag Manager passes to Google Analytics, Google Ads and other third-party tags; the Tag Manager script itself loads either way. The first-party visitor identifier cookie is not in these categories and cannot be switched off, and Cookie preferences do not affect the first-party usage and device records described above.

We process your personal data to provide and secure the service, to communicate with you, and to improve the product. Specifically, email addresses are used to: send the alerts you've signed up for, send the weekly digest if you subscribe to it (a Pro benefit) — a personal summary of your watchlist, the analysts you follow and how your saved calls resolved, and notify you about material product updates relevant to beta. Third-party analytics and marketing cookies are used on the basis of your consent, which you can withdraw through Cookie preferences. First-party usage and device records (section 1) are processed because they are needed to provide, secure and improve the service, and using the site is conditional on them. We do not sell, rent, or share your email with third parties for marketing.

We also send lifecycle email: a short series of onboarding messages when you first join, occasional messages inviting you back if you have not used the service for a while, and product announcements. These are part of the service you signed up for and are sent on an opt-out basis. Every one of them carries an unsubscribe link, and you can switch individual categories off at any time from Email preferences in your account without affecting the alerts you asked for.

Application data is stored in a managed cloud database, and the application runs on managed cloud hosting infrastructure. Specific hosting providers and region details will be confirmed before general availability.

Under India's Digital Personal Data Protection Act, 2023 (DPDP) you have the right to: access a summary of the personal data we hold about you and how we process it; correct or complete inaccurate or incomplete data; erase data that is no longer needed; nominate another individual to exercise your rights in the event of death or incapacity; and seek grievance redressal if a request is not handled satisfactorily. You can also withdraw consent at any time — for third-party analytics and marketing cookies use the Cookie preferences link in the site footer; for email use the unsubscribe link in any message, or the per-category switches under Email preferences in your account.

To exercise any right, email admin@stocktipsarena.com. We action verified requests within seven working days. Withdrawing consent does not affect processing already carried out.

The service is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has submitted data to us, please email us and we will delete it.

We follow reasonable industry safeguards: HTTPS for all traffic, row-level access controls on user-submitted data, and tight management of application secrets. No system is perfectly secure. In the unlikely event of a breach affecting your data, we will notify affected users within 72 hours of becoming aware of the incident.

We use managed cloud infrastructure that may store or process data on servers located outside India. Where that happens we rely on the provider's contractual and technical safeguards and transfer data only in accordance with applicable law. Specific providers and regions will be confirmed before general availability.

The data fiduciary responsible for your personal data is Indivision Technologies Private Limited, which operates the StockTipsArena platform, based in Bengaluru, India. For any privacy question, consent withdrawal, or data-principal request — and if you are not satisfied with our response — you can contact our Grievance Officer, Gaurav Ganeriwal, at admin@stocktipsarena.com. We acknowledge grievances within 48 hours and aim to resolve them within the timelines required by the DPDP Act. You may also escalate to the Data Protection Board of India once it is operational.

We update the "last updated" date at the top of this page when the policy changes. Material changes will be communicated to users with a registered email.

Questions or requests? Email admin@stocktipsarena.com.