Data Safety

A plain description of where your data lives and what we can and cannot reach.

This is a product page, not a legal document — it describes how the system is actually built. The formal commitments are in the Privacy Policy.

Your broker credentials never leave your machine

This is architectural, not a policy. A policy can change; an architecture that never receives something cannot leak it.

On the Core plan there's nothing for us to hold at all: you place the orders at your broker.

On the Connected plan, TradeYantra's executor connects to your broker directly from your own Windows computer or your own Linux cloud server. Your broker API keys are entered there during setup and stored there. Our servers never receive them, store them, or have any way to access them.

Where they are kept

On Windows, in the Windows Credential Manager — the same vault Windows uses for its own saved passwords. They are encrypted by Windows against your user account and unlocked by your Windows login. Another user on the same PC cannot read them, and copying the files to another machine yields nothing usable.

On your own Linux cloud server, in an encrypted store sealed to that server. Copying it to another machine yields nothing usable.

What we exchange with your computer

Only trading instructions and results: which stop-loss and target orders should exist, and confirmation of what was placed. Order data, never credentials.

You stay in control

Your credentials can be removed at any time from the executor's setup, or by uninstalling the executor. Because they only ever existed on your machine, removing them there removes them completely. There is no server-side copy to revoke.

Nothing reaches your broker without your press, or a schedule you set

We compute. You authorise. Your machine executes.

Stop and target orders are sent to your broker only when you press Update GTT/Alert, or at a daily time you set yourself. Entry orders are sent only when you press Place. You can do either from anywhere, including your phone; only the execution is tied to your own machine, and only because SEBI expects broker orders to originate from your own registered connection.

Your strategy stays yours

Your formulas, strategies, trade history and journal live in your account. We don't publish them, share them, sell them or license them, and we don't run a strategy marketplace.

Where we look at usage to improve the product, we use aggregated information that can't reasonably identify you or your method.

You can export your trade history and holdings as CSV files at any time, from inside the product, without asking us.

Payments

Handled entirely by Razorpay. Your card details or UPI mandate are held by them. We never see the number.

Where things are hosted

That's the full list of anyone who touches your data on our behalf.

How we work

• Everything between you and the service travels over HTTPS
• Secrets live outside the application code, never in source control
• Access to production systems is limited to those who need it
• Your own broker credentials aren't in that picture at all, because we never have them

What we can see, and what we can't

If something goes wrong

If a data breach occurs that is likely to affect you, we will tell you, and we will notify the Data Protection Board of India as the law requires.

Questions: raise a ticket from your account, or privacy@tradeyantra.com Grievance Officer: Jitendrakumar Suthar, grievance@tradeyantra.com