Privacy Policy
Last updated 3 October 2026
This policy explains what Option Decode, an analytics platform operated by Option Decode Academy ("we", "us"), collects from you, why we collect it, who else sees it and how long we keep it. It applies to optiondecode.com and to the Option Decode application.
1. Who we are
Option Decode Academy, 1001, T-9, Zen Spire, Ramprastha Greens, Vaishali, Ghaziabad, Uttar Pradesh 201010, India. You can reach us at support@optiondecode.com for any question about this policy or your data.
2. What we collect
Information you give us
- Account details: your email address, display name and mobile number. Your password is never stored; we keep only a one-way cryptographic hash of it, from which the password cannot be recovered.
- What you do in the app: watchlists, alert settings, simulated (paper) trades and any preferences you save.
- Broker connection, only if you choose to connect one: an access token issued by your broker. It is encrypted before it is stored and is used solely to fetch your positions and to place orders that you yourself instruct. We never receive or store your broker password or PIN, and we cannot access your funds.
Information collected automatically
- Server logs: your IP address, browser identification, the pages and interfaces you request and the time of each request. These are ordinary web server records, used to operate the service and investigate faults and abuse.
- A session cookie that keeps you signed in. It is strictly necessary for the service to function, lasts 7 days from the moment you sign in, and is specific to the browser you signed in on.
- Push notification endpoints, if you enable browser notifications, so that alerts can reach your device.
What we do not collect
We do not run advertising networks, third-party analytics or tracking pixels, and we do not build advertising profiles. We do not ask for, receive or store card numbers, UPI PINs or bank credentials.
3. Why we use it
- To create and operate your account, and to keep you signed in.
- To provide the features you use, including market analytics, alerts and, where you connect a broker, order placement you initiate.
- To send service messages such as email verification, password resets and alerts you have configured.
- To keep the service secure, diagnose faults and prevent abuse.
- To administer your plan: the free trial every new account gets, and any paid plan switched on for you.
- To meet legal and regulatory obligations.
Where the law requires your consent, we rely on the consent you give when creating an account or enabling a specific feature. You may withdraw it at any time, as described in section 7.
4. Who else sees your data
We do not sell your personal data. We share it only with the providers that make the service work:
- Your broker (Dhan) — when you connect a broker account, to read your positions and place orders you instruct.
- Amazon Web Services — hosting. Our servers and databases are located in the Mumbai region, in India.
- GoDaddy — the mail service that delivers our email to you, and our domain provider.
- Chartink — only if you use the Screener feature, which queries their public service.
- Google — if you choose to sign in with a Google account, Google tells us your email address, name and profile picture. Google also hosts the mailbox that receives email you send to our support address.
- WhatsApp (Meta) — only if you choose to message us on WhatsApp. Meta then processes your phone number, your profile name and the messages under its own privacy policy. Nothing is sent to WhatsApp unless you open the chat yourself.
- Razorpay — our payment partner, only when you buy a plan. We send Razorpay your name, your email address, the plan and the amount, so its checkout can be filled in for you; you give your card, UPI, bank or wallet details to Razorpay directly, and we never see or store them. Razorpay tells us whether the payment succeeded, its reference and the payment method used (for example “UPI”), and we keep that record with your account. Razorpay handles your payment details under its own privacy policy.
We may also disclose information where we are legally required to do so, or to establish or defend a legal claim.
5. How long we keep it
- Your account and its contents: for as long as your account exists, and for a reasonable period afterwards where records must be retained for legal or accounting reasons.
- Detailed market data captured by the platform: about 30 days. Summary records of each capture: about 180 days. This data describes the market, not you.
- Backups: daily copies for about 30 days, and a monthly copy retained for up to a year.
- Server logs: rotated regularly and retained for a limited period for security and fault investigation.
6. How we protect it
Traffic to and from the site is encrypted in transit. Passwords are stored as one-way hashes. Broker access tokens are encrypted at rest with authenticated encryption. Access to production systems is restricted and key-based, and the credentials behind the service are rotated on a schedule. No system is perfectly secure, and we cannot guarantee absolute security, but we take these measures seriously and review them.
7. Your rights
Subject to Indian data protection law, you may ask us to:
- tell you what personal data of yours we hold and how it is processed;
- correct or complete data that is inaccurate or out of date;
- erase your account and the personal data associated with it;
- withdraw a consent you previously gave, which will stop the feature that relies on it;
- nominate another person to exercise these rights if you are unable to.
Write to support@optiondecode.com and we will respond within a reasonable period. Disconnecting a broker account, disabling notifications or deleting your account can also be done from within the application.
8. Grievance officer
If you are not satisfied with how we have handled your data or your request, contact our grievance officer: Naresh Singh, support@optiondecode.com, 1001, T-9, Zen Spire, Ramprastha Greens, Vaishali, Ghaziabad, Uttar Pradesh 201010. We aim to acknowledge complaints within 24 hours and to resolve them within 15 days.
9. Children
Option Decode is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, write to us and we will delete it.
10. Changes to this policy
We may update this policy as the service changes. The date at the top shows when it was last revised, and material changes will be notified to you by email or in the application.