Privacy Policy

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

• Name, email address, and contact details if you register or contact us.
• Feedback, bug reports, or communications you send us.
• Any other information you voluntarily submit through forms or correspondence.

1.2 Information Collected Automatically

• Device information: device type, model, operating system, browser type and version, unique device identifiers, and mobile network information.
• Log data: IP address, access timestamps, pages and features accessed, referring URLs, session duration, and application crash reports.
• Usage data: how you interact with the Platform, which commodities you view, which timeframes and features you use, frequency of visits, and user journey patterns.
• Location data: country and city-level location inferred from your IP address only. We do not collect GPS-level precise location data without your explicit consent.
• Cookies and similar tracking technologies as detailed in Section 5 of this policy.

1.3 Information from Third-Party Services

• Google Analytics: aggregated usage statistics, demographics, and behaviour flows. This data is anonymised and cannot identify you individually.
• Google AdSense: advertising interaction data, interest signals, and contextual data used to serve relevant advertisements. Google's data practices are governed by Google's own Privacy Policy.
• Market data providers: commodity price data and financial information. We do not share personal data with market data providers.

2. HOW WE USE YOUR INFORMATION

We process your information for the following legitimate purposes:

• To operate, maintain, improve, and enhance the Platform and its features.
• To personalise your experience, including displaying preferred commodities and chart settings.
• To display relevant, interest-based, and contextual advertising through Google AdSense and its authorised partner networks.
• To monitor Platform performance, analyse usage trends, and diagnose technical issues.
• To detect, prevent, and address fraud, security breaches, and unauthorised access.
• To send administrative communications including policy updates and service announcements. We do not send marketing emails without your explicit opt-in consent.
• To comply with applicable laws and regulations of the Republic of India, including the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• To enforce our Terms and Conditions and protect the rights, property, and safety of our users.

3. LEGAL BASIS FOR PROCESSING

For users in jurisdictions subject to the GDPR, the Digital Personal Data Protection Act, 2023 (DPDPA) of India, or similar data protection laws, our legal basis for processing personal data includes:

• Contractual Necessity: Processing required to provide the services you have agreed to use.
• Legitimate Interests: Processing necessary for our legitimate business interests, including improving the Platform, preventing fraud, and serving contextual advertising — provided such interests are not overridden by your fundamental rights.
• Consent: Where you have given clear, informed, and freely given consent — for example, consent to cookies and tracking technologies.
• Legal Obligation: Processing necessary to comply with applicable laws, regulations, or lawful requests from government authorities.

4. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers for hosting, analytics, and advertising. All providers are contractually obligated to handle your data securely and only for specified purposes.

4.2 Google AdSense and Advertising Partners

We use Google AdSense to display advertisements. Google and its partners may use cookies to serve ads based on your prior visits to this and other websites. You may opt out of personalised advertising at adssettings.google.com.

4.3 Legal and Regulatory Disclosure

We may disclose your information if required by law or in response to valid legal processes such as a court order, subpoena, or government request from competent Indian or international authorities.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of our business, your information may be transferred to the acquiring entity, subject to equivalent privacy protections.

5. COOKIES AND TRACKING TECHNOLOGIES

• Essential Cookies: Required for the Platform to function. These cannot be disabled.
• Analytics Cookies: Used by Google Analytics to collect anonymised usage data.
• Advertising Cookies: Used by Google AdSense and partners to serve personalised or contextual ads.
• Preference Cookies: Store your display preferences and settings between sessions.

You can manage cookie preferences through your browser settings or Google's opt-out tools. Disabling cookies may affect Platform functionality.

6. DATA RETENTION

• Usage logs and analytics data: retained for up to 26 months, in line with Google Analytics default settings.
• Account information (if applicable): retained for the duration of your account and up to 3 years after closure.
• Legal and compliance records: retained for up to 7 years as required under Indian tax and corporate laws.
• All other data: deleted or anonymised when no longer required for its original purpose.

7. DATA SECURITY

We implement reasonable technical and organisational security measures including HTTPS encryption, HMAC-signed API requests, access controls, and regular security reviews. However, no method of internet transmission is 100% secure. We cannot guarantee absolute security.

8. YOUR RIGHTS

Subject to applicable law, you have the following rights:

• Right of Access: Request a copy of personal data we hold about you.
• Right of Rectification: Request correction of inaccurate or incomplete data.
• Right of Erasure: Request deletion of your data, subject to legal retention obligations.
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.
• Right to Lodge a Complaint: Contact the Data Protection Board of India (under DPDPA 2023) or your local data protection authority.

To exercise any rights, contact: support@niftycallput.com

9. CHILDREN'S PRIVACY

The Platform is not directed at individuals under 18. We do not knowingly collect data from minors. If you believe your child has provided us data, contact us immediately and we will delete it promptly.

10. INTERNATIONAL DATA TRANSFERS

Your data may be processed on servers outside India. We ensure appropriate safeguards including standard contractual clauses or equivalent mechanisms are in place.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy at any time. Material changes will be communicated by updating the Effective Date above and displaying a notice on the Platform. Continued use constitutes acceptance of the revised policy.

12. CONTACT US

We respond to all legitimate requests within 30 days.