Privacy Policy

Last updated: 1 May 2026

Information We Collect

We collect: (a) Account information — your name, email address, and a bcrypt-hashed password when you register. (b) Usage data — the NSE symbols you look up and timestamps. (c) Technical data — server logs, IP address, and browser user-agent for security and debugging purposes.

How We Use Your Information

We use your information to: authenticate your account, deliver the platform experience, track your trial period and subscription status, and improve our services. We do not sell your personal information to third parties.

Data Storage

Your data is stored on a PostgreSQL database hosted on Render (Oregon, USA). Passwords are stored exclusively as bcrypt hashes (cost factor 12). Plaintext passwords are never stored or logged.

Cookies & Sessions

We use HTTP-only JWT session cookies managed by NextAuth.js. These cookies are required for authentication and expire after 7 days of inactivity. No third-party tracking cookies are used.

Third-Party Services

De-Code uses Yahoo Finance (via public API), Kite API for market data, Anthropic Claude (via API) for AI-enhanced analysis, and Render for hosting. Each service has its own privacy policy. API calls to external services include only the stock symbol being queried — no personal information is transmitted.

Data Retention

Account data is retained as long as your account is active. You may request deletion of your account and all associated data by emailing hello@decode.trade. Historical score data may be retained in anonymised form for analytics.

Your Rights

Under applicable law, you have the right to access, correct, or delete your personal data. To exercise these rights, contact us at hello@decode.trade.

Security

We implement industry-standard security practices including HTTPS, encrypted JWT tokens, bcrypt password hashing, and parameterised SQL queries (preventing SQL injection). However, no system is 100% secure. If you discover a vulnerability, please disclose it responsibly to security@decode.trade.

Contact

For privacy-related inquiries: privacy@decode.trade