Privacy Policy
This policy explains what data Hanulytics collects, why we collect it, how we protect it, and what rights you have over it.
Overview
Hanulytics Technologies Private Limited operates the Hanulytics platform — a web-based algorithmic trading strategy builder, backtesting engine, and market screener for Indian equity markets.
This Privacy Policy applies to all data collected through our website, web application, and any related services. By using the Platform, you consent to the practices described here. If you do not agree, please discontinue use and contact us at privacy@hanulytics.com to request deletion of any data we hold about you.
Data We Collect
We collect data in three ways: information you provide directly, information generated by your use of the Platform, and information received from third-party integrations.
| Category | What we collect | Source |
|---|---|---|
| Account data | Name, email address, password (hashed), profile photo, country, time zone | You, on registration |
| Strategy data | Strategy configurations, backtest parameters, run history, equity curves, P&L records | Generated by your use |
| Watchlist data | Symbols you add to watchlists, watchlist names and groupings | Generated by your use |
| Usage data | Pages visited, features used, session duration, error logs | Automatically collected |
| Device & technical data | IP address, browser type, operating system | Automatically collected |
| Broker integration data | OAuth tokens, account identifiers, live order status (while connected) | Your broker, via API |
| Payment data | Billing name, last 4 digits of card, subscription tier, invoice history | Payment processor |
We never collect: your full PAN, Aadhaar number, bank account numbers, full demat account credentials, full card numbers, or passwords in plaintext. We do not have access to your broker account beyond what is explicitly authorized via OAuth.
How We Use Your Data
We use your data only for the following purposes, and only to the extent necessary for each:
- Providing the service — authenticating your account, running backtests, executing live strategies via your connected broker, and displaying your data to you
- Improving the Platform — analysing aggregated, anonymised usage patterns to fix bugs and improve performance. We do not use individual trading data for this purpose
- Communications — sending transactional emails (account verification, billing receipts, security alerts) and, with your consent, product update newsletters
- Security & fraud prevention — detecting anomalous access patterns and unauthorized login attempts
- Legal compliance — meeting obligations under applicable Indian law, including responding to lawful requests from SEBI, IRDAI, or courts
We do not use your data to train machine learning models for sale to third parties, build advertising profiles, or infer trading positions for any purpose other than operating your account.
Data Sharing
We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:
| Recipient | What is shared | Why |
|---|---|---|
| Broker APIs | Orders and strategy instructions you authorize | To execute your live strategies |
| Payment processor (Razorpay) | Billing name, email, subscription details | To process payments securely |
| Cloud infrastructure (AWS ap-south-1) | All Platform data, stored encrypted at rest | To host and operate the Platform |
| Error monitoring (Sentry) | Anonymised error traces, no financial data | To detect and fix bugs |
| Regulatory authorities | Data required by lawful order or regulation | Legal compliance only |
Broker Data & Trading Activity
When you connect a broker account, you authorize Hanulytics to access your broker's API on your behalf.
- OAuth tokens are encrypted at rest using AES-256 and are never exposed to other users or shared with third parties beyond the broker itself
- We retrieve live position and order data only while your strategy is actively running or while you are viewing the Portfolio section
- Order execution logs are retained for 90 days to support dispute resolution, after which they are permanently deleted
- You can revoke broker access at any time from Settings → Brokers. Revocation immediately invalidates the stored token
Important: Hanulytics never has access to your broker login credentials, funds, or the ability to withdraw money. Access is strictly limited to placing and cancelling orders as authorized by your deployed strategies.
Cookies & Tracking
We use a minimal set of cookies to keep the Platform functional and understand how it is used. We do not use advertising cookies or sell cookie data.
| Type | Purpose | Duration |
|---|---|---|
| Session (essential) | Keeps you signed in and maintains your session state | Until sign-out |
| Preference (functional) | Remembers your theme, layout, and display settings | 1 year |
| Analytics (optional) | Aggregated, anonymised page-view and feature-use data | 90 days |
Data Retention
We retain your data only for as long as necessary to provide the service or meet legal obligations.
| Data type | Retention period |
|---|---|
| Account & profile data | Until account deletion, then 30 days in backup before permanent deletion |
| Strategy & backtest data | Until account deletion |
| Order execution logs | 90 days from execution date |
| Billing & invoice records | 7 years (required under Indian tax law) |
| Security & access logs | 12 months |
| Anonymised analytics | Indefinitely (no personal identifiers) |
Security
We implement industry-standard security measures to protect your data:
- Encryption in transit: All data transmitted between your browser and our servers uses TLS 1.3
- Encryption at rest: All data stored in our databases is encrypted using AES-256
- Password hashing: Passwords are hashed using bcrypt with a per-user salt — we cannot recover your password
- Access controls: Internal access to production data is role-based, logged, and reviewed quarterly
- Two-factor authentication: Available for all accounts and strongly recommended
No system is completely secure. If we become aware of a data breach that affects your personal data, we will notify you and the relevant authorities within 72 hours of discovery.
Your Rights
Under applicable Indian data protection law, you have the following rights regarding your personal data:
To exercise any of these rights, go to Settings → Privacy or email privacy@hanulytics.com. We will respond within 30 days.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date, send an email notification at least 14 days before the changes take effect, and display an in-app banner summarising what changed.
Continued use of the Platform after the effective date of a revised policy constitutes acceptance of the updated terms.
Contact
For any privacy-related questions, requests, or complaints, please contact us.
We aim to respond to all privacy requests within 30 days.
© 2026 Hanulytics Technologies Private Limited. All rights reserved. Terms of Service