1. Who is responsible for your data

AI Trading Signals (the “Service”, at aitradingsignal.in) is run by an individual based in Vuyyuru, Krishna District, Andhra Pradesh, India (the “Operator”, “we”, “us”). The Operator decides why and how personal data is processed through the Service and is the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and, where it applies, the “controller” under the EU and UK General Data Protection Regulation (“GDPR”).

Contact for all privacy matters: [email protected].

2. What this policy covers

This policy covers the website at aitradingsignal.in, its sub-domains and the live data connection the website uses. It does not cover other websites you reach through links or ads; their own privacy policies apply.

3. Personal data we process

What	Why	Who handles it	How long
Connection and request data: IP address, browser and device type (user agent), pages and data endpoints requested, date and time, and records of blocked attempts to use Operator-only features.	To deliver the website and live updates, keep it secure, prevent abuse and fix faults.	Our server; Cloudflare, Inc. (network, security and delivery provider).	Server logs are kept only as long as needed for security and troubleshooting, normally no more than 90 days, unless needed longer to investigate abuse or required by law. Cloudflare keeps its logs under its own policy.
Advertising data: cookies and similar identifiers, IP address, device and browser information, and information about your visits to this and other websites.	To show, measure and limit the frequency of ads that fund the Service, and to detect ad fraud.	Google (AdSense and Google’s video ad technology) and its advertising partners, under Google’s own policies.	As set by Google; see Google’s policies linked below.
Ad interaction events: type of event (for example ad shown, clicked or video completed) and which ad slot it was in.	To understand how ads perform on the site.	Our server (written to server logs, alongside connection data).	As for server logs above.
Font requests: IP address and browser information sent when your browser loads web fonts.	To display the site’s typefaces.	Google Fonts (Google).	As set by Google.
Emails you send us: your email address, name if you give it, and the content of your message.	To reply, handle requests and grievances, and keep a record of them.	The Operator; Google (Gmail) as our email provider.	Up to 12 months after your matter is closed, unless a longer period is required by law or for a legal claim.

We do not collect your name (unless you email us), phone number, PAN, Aadhaar or other ID, bank or card details, or any broker, exchange or API credentials. We do not ask for, and you should never send us, passwords or OTPs. We do not use your data for automated decisions about you, and we do not sell it.

4. Data that stays in your browser

The dashboard saves a few settings in your browser’s local storage so it works the way you left it. This information stays on your device and is not sent to us:

• which dashboard view you last used;
• your acceptance of these policies (version, date and time, and your browser’s user-agent string), so we don’t ask you again;
• positions you add to the “Position monitor” (symbol, direction and the prices you type);
• ad timing and “VIP” status (when ads were last shown or paused).

You can delete this at any time by clearing this site’s data in your browser settings. If you allow desktop notifications, they are generated inside your browser; we do not receive a notification address or token.

5. Cookies and advertising choices

We do not set our own advertising or analytics cookies. Cookies on this site come from:

• Google, for advertising. Google’s use of advertising cookies enables it and its partners to serve ads based on your visits to this and other sites. You can turn off personalised advertising in Google Ads Settings and learn more at How Google uses information from sites that use its services. You can also opt out of some third-party vendors’ personalised advertising at aboutads.info.
• Cloudflare, which may set strictly necessary security cookies to protect the site from bots and attacks.

Visitors in the European Economic Area, the United Kingdom and Switzerland are shown Google’s consent message before personalised ads and related cookies are used, and can change their choice later through the privacy and cookie settings link that message provides. Anyone can also block or delete cookies in their browser settings; ads may then be less relevant.

6. Why we are allowed to process your data

• Consent. When you accept the consent dialog on the dashboard, you agree to the processing described in this policy, including advertising by Google. You can withdraw your consent at any time (see section 10).
• Providing and protecting the Service. Basic connection data has to be processed to deliver web pages and keep the site secure. For visitors covered by the GDPR, our legal basis for this is our legitimate interest in running a secure website.
• Legal obligations. We may process or disclose data where Indian law, a court or an authorised government body requires it.

7. Who we share data with

• Google (advertising, fonts and email), which also uses data for its own purposes as described in the Google Privacy Policy.
• Cloudflare, Inc. (network delivery and security), under the Cloudflare Privacy Policy.
• Authorities, where required by law or legal process, or where necessary to protect the Service or other people from fraud or harm.
• A successor, if the Service is transferred to another operator, who must protect your data as described here.

We do not sell, rent or trade personal data.

8. International transfers

Google and Cloudflare may process data on servers outside India, including in the United States. The DPDP Act allows this except to countries the Government of India restricts. For visitors covered by the GDPR, these providers rely on recognised safeguards such as the European Commission’s standard contractual clauses.

9. How we protect data

The site is served over HTTPS through Cloudflare, Operator-only features require private authentication, and we collect as little personal data as we can. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will inform you and the relevant authority as the law requires.

10. Your rights

Under the DPDP Act you have the right to:

• obtain a summary of the personal data we process about you and how we process it, and the identities of those we have shared it with;
• have inaccurate or incomplete data corrected or completed, and have data erased when it is no longer needed;
• withdraw consent at any time, as easily as you gave it; this does not affect processing done before you withdrew;
• have your grievances addressed by us (see section 13);
• nominate another person to exercise your rights if you die or become incapable; and
• complain to the Data Protection Board of India once you have used our grievance process.

If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, objection, data portability and to lodge a complaint with your local supervisory authority.

How to exercise them. Email [email protected]. Because we do not hold accounts, we may need details such as the date, time and IP address of your visit to find any data about you, and we may need to confirm your identity before acting. To withdraw consent, stop using the Service, clear this site’s data in your browser, and use Google Ads Settings (or, in the EEA, UK and Switzerland, the privacy and cookie settings link in Google’s consent message) to turn off personalised ads.

11. Children

The Service is only for people aged 18 or over. We do not knowingly process personal data of anyone under 18. If you believe a child has used the Service and we hold their data, contact us and we will delete it.

12. Changes to this policy

We may update this policy. The version number and effective date at the top show which version applies. If we make a material change, the dashboard will ask you to review and accept the new version.

13. Contact and Grievance Officer

The Operator acts as Grievance Officer for privacy matters and for the purposes of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the DPDP Act.

• Email: [email protected] (please put “Privacy” or “Grievance” in the subject line)
• Location: Vuyyuru, Krishna District, Andhra Pradesh, India
• Response: we aim to acknowledge within 72 hours and to resolve within 30 days, and in any case within the time limits set by law.