Privacy policy.
This policy explains what information we collect when you use tradertalk.in, why we collect it, who we share it with, and your rights under Indian and international data-protection law. It applies to TraderTalk, a product of CodeMingle ("we", "us").
1. Who we are
TraderTalk is operated by CodeMingle, based in Mumbai, Maharashtra, India. For privacy-related queries, contact privacy@tradertalk.in or our Grievance Officer (see the contact page).
2. What we collect
Information you give us
- Email address — required to sign in. We use a magic-link login, so we never see or store your password.
- Profile information — username, display name, bio, link, location and avatar that you choose to add.
- Content you create — posts, replies, votes on polls, reactions, bookmarks, chat-room messages, direct messages, reports.
- Notification preferences — including whether you want the weekly calibration email.
- Watchlist symbols — tickers you choose to follow on your personalised home tape.
Information we collect automatically
- Authentication cookies — set by NextAuth to keep you signed in. First-party only.
- Theme preference — stored in your browser's local storage so the page doesn't flash on reload. Never sent to our servers.
- Server logs — IP address, user-agent, referrer URL, request path and timestamp, kept for up to 30 days for security and debugging.
- Activity timestamps — when you voted, posted or signed in, used to build streaks and leaderboards.
We do not collect bank details, PAN numbers, Aadhaar numbers, or any other financial-account credentials. TraderTalk does not move money.
3. Why we use it
- To run the service — sign-ins, posting, voting, scoring, leaderboards.
- To keep the community safe — automated content moderation, spam detection, abuse handling.
- To send service email — magic-link sign-in messages, the optional weekly calibration check-in, and required transactional notices.
- To debug and improve the product — aggregated analytics on which features are used, error reports.
- To comply with law and respond to lawful requests.
We do not sell your personal data. We do not run third-party advertising networks on tradertalk.in. We do not build advertising profiles of you.
4. Who we share it with
We share data only with service providers that help us run the platform, under contract and only to the extent necessary:
- Hosting
- Amazon Web Services (Mumbai region) — runs the application servers.
- Database
- MongoDB Atlas (India region) — stores accounts, posts and votes.
- Email delivery
- Google Workspace — sends magic-link sign-in emails and transactional notices.
- Market data
- A licensed Indian market-data provider — supplies live index and stock prices used to display the live tape and auto-resolve polls.
- Content services
- A third-party content-processing service — used for automated content moderation and contextual content generation. Posts and chat messages are sent for moderation analysis; we do not share account identifiers in those requests.
- Analytics
- First-party only at this time. If we add a third-party analytics provider, we'll update this list and notify users.
We never give your email address to advertisers. We never share your DMs with anyone except as required by law.
5. How long we keep it
- Account & profile: until you delete your account.
- Posts and votes: retained for the lifetime of the account; soft-deleted (visibility removed) within seconds of you deleting them, hard-deleted from backups within 30 days.
- Server logs: 30 days.
- DMs: retained until either party deletes the conversation.
- Backups: rolling 30-day window, encrypted at rest.
6. Your rights
Under the Digital Personal Data Protection Act, 2023 (India) and other applicable laws, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data — most fields are editable in
/settings. - Erase your account and associated data.
- Withdraw consent for the optional weekly email at any time, from the settings page.
- Nominate another individual to exercise these rights on your behalf in case of incapacity or death.
- File a grievance with our Grievance Officer (see the contact page).
To exercise any of these rights, email privacy@tradertalk.in from the address on your TraderTalk account. We respond within 30 days.
7. Security
Data is encrypted in transit (HTTPS via Let's Encrypt). Database backups and storage are encrypted at rest. Sign-in is passwordless (magic link), so we never hold a password to be leaked. Access to production systems is limited to the founding team and audited.
No system is perfectly secure. If we discover a breach involving your personal data, we will notify you and the Data Protection Board of India as required by law.
8. Children
TraderTalk is intended for users aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a minor has registered, email privacy@tradertalk.in and we will delete the account.
9. International transfers
Our infrastructure is hosted in India. Some of our processors (notably the email delivery, content services and market data providers described in section 4) may process data outside India. Where this happens, we rely on contractual safeguards permitted under the DPDP Act and the GDPR.
10. Changes to this policy
We may update this policy. The "last updated" date at the top of this page reflects the most recent version. For material changes, we'll notify signed-in users by email at least 14 days in advance.
11. Contact
Questions, requests or complaints about this policy go to privacy@tradertalk.in. If we don't resolve your concern, you may also contact the Data Protection Board of India.