🛡️
Your Trading Privacy is Absolute
We do NOT sell, rent, or monetize your trading journal, execution logs, financial figures, or strategy notes to hedge funds, brokers, or third-party advertisers. Your journal data belongs solely to you.
1. Information We Collect
When you register and interact with Shaikhoology TMS, we may collect the following categories of information:
- Account Details: Name, email address, password hash (one-way bcrypt hashed), and Google OAuth profile identifier when logging in via Google.
- Profile & Psychology Metadata: Trading experience level, trading goals, psychological reflections, and mistake tags chosen by you.
- Technical Diagnostics: IP address, browser type, device information, and access timestamps used strictly for security monitoring and fraud prevention.
2. Trading & Journal Data Privacy
Shaikhoology TMS is designed to be an introspective journaling sanctuary for serious market participants. We treat trade records with the highest confidentiality:
- Private by Default: All trades, entries, exits, stop losses, profit targets, checklists, screenshots, and emotions are private to your user account.
- No Aggregated Strategy Front-Running: We do not conduct high-frequency aggregation or sell trade positioning data to market makers or proprietary trading firms.
- Public Leaderboards: If you voluntarily participate in public leaderboards, only pseudonymous stats (e.g., win rate percentage, R-multiple stats) are displayed according to your explicit privacy preferences.
3. Broker APIs & Access Tokens
If you connect broker accounts (e.g., Zerodha Kite, Angel One, Dhan, Upstox) for automated journal sync:
- API Credentials Encryption: API keys and access tokens are encrypted in transit (TLS 1.3) and encrypted at rest in the database using industry-grade AES-256 encryption.
- Read-Only Scopes Preferred: The platform requests read-only orderbook/tradebook synchronization privileges wherever supported.
- No Custody or Fund Access: Shaikhoology TMS does NOT have access to withdraw, transfer, or manage your capital or bank accounts.
4. How We Use Information
We process your data strictly for legitimate operational purposes:
- To calculate risk metrics, R:R analytics, psychological habit loops, and performance analytics.
- To verify account authentication and send security alerts or password reset emails.
- To provide technical customer support when you submit feedback or error reports.
- To comply with statutory legal requirements under applicable Indian cybersecurity guidelines.
5. Cookies & Local Storage
We use essential cookies and browser LocalStorage solely to maintain your active login session, persist your theme preferences (e.g., paper/real trade toggle, dark/light mode), and secure cross-site request forgery (CSRF) tokens. We do not use intrusive third-party cross-site advertising cookies.
6. Security & Data Retention
🔒 Multi-Layered Protection
Our database employs strict role-based access controls, automatic regular backups, and SQL injection protections provided by the modern Laravel framework. All web traffic is strictly served over encrypted HTTPS/SSL.
We retain your journal data for as long as your account remains active or until you request account closure and data purging.
7. User Rights & Account Deletion
You have full autonomy over your data:
- Export Data: You can export your trading records via PDF or spreadsheet export tools inside your dashboard.
- Data Modification: You may edit, update, or delete individual trade entries and psychology notes at any time.
- Complete Account Purging: You may request complete erasure of your personal account and all associated trade journals by emailing our support team.