Privacy Policy
Last updated: May 2026
1. Information We Collect
We collect the following categories of data:
- Account data: name, email address, hashed password
- Usage data: pages visited, agent missions run, companies viewed
- Broker data: If you connect Upstox, we store your access token and portfolio holdings to power the portfolio sync feature
- Payment data: Subscription status and Razorpay customer/subscription IDs. We do not store card numbers — Razorpay handles PCI-DSS compliance
2. How We Use Your Data
- To authenticate you and manage your subscription
- To run AI research agents on companies you request
- To send alerts and notifications you have opted into
- To improve platform quality and monitor for abuse
3. Data Sharing
We do not sell your personal data. We share data only with:
- Infrastructure providers: Vercel (hosting), Railway (worker hosting), Neon/Supabase (database), Upstash (rate limiting)
- AI providers: OpenAI and Mistral for agent reasoning (company research data is sent, not personal user data)
- Payment: Razorpay for subscription billing
- Email: Resend for transactional emails
- Analytics: PostHog for product analytics (anonymised)
4. Data Retention
We retain your account data for as long as your account is active. You may request deletion at any time via support@blackledger.in or through Settings → Delete Account. Agent run outputs and research memos may be retained in anonymised form for platform improvement.
5. Cookies
We use strictly necessary cookies for authentication (session token, CSRF token). We do not use advertising cookies. Analytics cookies are used only with your consent via the cookie banner.
6. Security
Passwords are bcrypt-hashed. All data is transmitted over HTTPS. Access tokens are stored encrypted at rest. We conduct periodic security reviews and use Sentry for error monitoring.
7. Your Rights
Under applicable Indian data protection law, you have the right to:
- Access the personal data we hold about you (via Settings → Export Data)
- Correct inaccurate data
- Delete your account and associated data
- Withdraw consent for optional processing
8. Contact
For privacy questions or requests, contact our data team at privacy@blackledger.in.