Privacy Policy
Effective 2 October 2026
How DeltaK, operated by Paras & Co collects and uses your personal data, under India's Digital Personal Data Protection Act, 2023. DeltaK is the Data Fiduciary for the data described here.
What we collect, and why
| Data | Why |
|---|---|
| Your email address and name | To create your account, send sign-in codes, receipts and service messages |
| Passkey public keys, sign-in sessions, IP address and browser type | To sign you in, keep the account secure and show you your active sessions |
| Username, bio, profile visibility, friends and shared trades | To run your public profile and the friends features, as your settings allow |
| Paper trades, positions, wallet, journal, watchlists and saved screens | To keep your paper book and preferences across your devices |
| Broker client code and the access token a linked broker issues | To read market data through your broker at your request. Tokens are stored encrypted |
| Credits balance, usage, orders and payment references | To run Credits, meet accounting and tax duties, and resolve payment problems. Card, UPI and bank details are entered with Razorpay and are never seen or stored by DeltaK |
| Screener questions, questions to the help assistant, and journal entries you ask to be written | Sent to an AI model to compile the screen, answer the question or write the entry |
| Pages visited, features used, device and approximate location | To understand how DeltaK is used and improve it |
| Error reports | To find and fix faults |
We collect it on the basis of your consent, given when you create an account or use a feature, and for the legitimate uses the Act allows, such as meeting a legal obligation. We do not sell personal data, and we do not use it for advertising.
Who processes it for us
These providers process personal data on DeltaK's behalf, only to run the service:
- Vercel — hosting and file storage
- Neon — the database
- A managed Redis provider — short-lived caches and rate limits
- Razorpay — payments
- Brevo and Zoho ZeptoMail — email delivery
- QuickEmailVerification — checking that a new account's email address can receive mail
- Cloudflare — network delivery, bot protection (Turnstile) and analytics delivery (Zaraz)
- Google Analytics and Amplitude — usage analytics, delivered through Cloudflare Zaraz
- Sentry — error reporting
- OpenRouter and the AI model providers it routes to — screener questions and journal writing
- Upstox, Dhan and Angel One — only when you link your own account with them
Some of these store data outside India. Transfers are made only as the Act permits, and not to any country the Government of India has restricted.
Cookies and local storage
DeltaK uses a sign-in cookie, which is needed for the service to work, and small cookies and browser storage for your preferences, such as the theme, the last wall you were on, the watchlist you had open and sound settings. Analytics tools delivered through Zaraz may set their own cookies.
How long we keep it
- Account, profile, paper book and preferences: while your account is open.
- After you ask us to delete your account: removed within 30 days, except what the law requires us to keep, such as payment and tax records, which are kept for the period that law sets.
- Sign-in codes and short-lived caches: minutes to days, then deleted automatically.
- Analytics and error reports: for the retention period set in each provider, and no longer than needed.
Your rights
Under the DPDP Act you can:
- ask what personal data we hold about you and how it is used;
- ask us to correct, complete or update it;
- ask us to erase it, and withdraw your consent, which closes your account;
- nominate someone to exercise these rights if you die or become unable to; and
- have a grievance about any of this answered.
Email admin@deltak.in from the address on your account. We acknowledge within 48 hours and respond within 30 days. Withdrawing consent does not affect what was done before it.
Children
DeltaK is for people aged 18 and over, and we do not knowingly collect data from children. If you believe a child has created an account, write to us and we will delete it.
Security
Data travels over HTTPS, broker tokens are encrypted at rest, sign-in codes are stored hashed, and access to production data is limited to the people who run DeltaK. If a breach affects your data, we will tell you and the Data Protection Board as the Rules require.
Grievance Officer
Grievance Officer. Email admin@deltak.in. If you are not satisfied with our response, you may complain to the Data Protection Board of India. See also Contact and Grievances.
Changes
When this notice changes, the date at the top changes with it, and a material change is emailed to account holders before it takes effect.
Contact
Email admin@deltak.in