Privacy & Data Policy
This policy explains what personal data KILLCRITIC collects, why, where it is kept, and how you can have it deleted. We follow the principles of India's Digital Personal Data Protection Act, 2023.
1. What we collect
- Account details: name, email, phone number and a hashed (not readable) password.
- Trading profile: the answers you give at signup (type of trader, years of experience, whether profitable, loss range). We use this to understand our users and improve the product.
- Licence and billing records: plan, licence key, dates and payment references. Payments are handled by Razorpay, and we do not store your card or UPI details.
- Broker connection data: the API credentials or tokens you provide so KILLCRITIC can read and act on your own broker account.
- Trading activity from your own account: orders, positions, profit and loss, and your rule settings and rule-break history.
- Technical data: basic visit and error logs, and the IP address from which you use the service. On our website we also keep a random browser identifier (no name or email) to count unique visitors and see which link brought you, and we note this against your account if you register.
- Telegram data: if you connect Telegram alerts, the chat identifier needed to send you alerts.
2. Why we use it
- To create your account, issue your licence and run your instance.
- To check your orders against your limits and send you alerts or take the actions you configured.
- To take payments, give support and meet legal and tax obligations.
- To keep the service secure and fix problems.
- If you tick the optional box at signup, to send you product updates and offers by email, WhatsApp or Telegram. You can withdraw this any time by writing to us, and account and licence messages will still reach you.
3. Where your data is kept
Each customer's rules and trading data are kept in their own separate instance on our servers, hosted with DigitalOcean. Account and licence records are kept on our main server. We limit access to the people who need it to run and support the service. Broker credentials are stored only to operate your account and are never shown to other users.
4. Who we share it with
We do not sell your data or give it to advertisers. We share it only with providers that help us run the service, each only for that purpose: DigitalOcean (hosting), Razorpay (payments), Telegram (alerts), your own broker (through its API, at your direction), and email delivery. We may disclose data if the law or a regulator requires it.
5. Order relay
If your broker needs a static IP, your order requests may pass through a relay server dedicated to your account. It forwards only to your broker's order endpoint and is not used to store your data.
6. How long we keep it
- While your licence is active, we keep your data to run the service.
- After your licence lapses or you cancel, we delete your account instance, trading data and broker credentials after 30 days, and release any dedicated relay server.
- We may keep limited records (such as payment and invoice records) for as long as the law requires.
- You can ask for earlier deletion at any time by emailing us.
7. Your rights
You can ask us to give you a copy of your data, correct it, or delete it, and you can withdraw your consent. Email us from your registered address. If you are not satisfied with our response, you may contact the Data Protection Board of India as provided under the law.
8. Security
We use reasonable safeguards, including hashed passwords, separate instances per customer and restricted access. No system is perfectly secure. Please keep your password, licence key and broker tokens private, and tell us at once if you suspect misuse.
9. Children
KILLCRITIC is for adults aged 18 and above. We do not knowingly collect data from children.
10. Changes
We may update this policy. The date above shows the latest version.
Contact
Questions or requests about this page: killcriticpro@gmail.com
KILLCRITIC