1. Who is responsible
Rakesh Poluri, an individual based in India, operating Trading-Sparks (trading-sparks.com). Personal data is handled in line with India's Digital Personal Data Protection Act, 2023.
2. What I collect
Accounts
- Email address — to create your account and send one-time sign-in links.
- Name and profile image — only if you sign in with Google, and only what Google shares for sign-in.
- Session — a cookie that keeps you signed in for up to 30 days, and the sign-in timestamps that go with it.
- Entitlement — whether, and until when, your account has Pro access.
Payments
Payments are processed by Razorpay. I receive confirmation that a payment succeeded, the amount, and a payment reference; I never receive or store card numbers, UPI credentials or bank details. Razorpay's own policy governs what they hold.
Contact form and waitlist
The contact form sends your name, email and message to me. The waitlist stores your email so I can tell you when something launches. Both are only used for that.
Technical
Server logs record IP addresses, request paths and timestamps for security, rate-limiting and debugging. They are rotated regularly and not linked to accounts except when investigating abuse.
Analytics
The site uses Google Analytics to understand which pages are read. It sets cookies and reports aggregate, pseudonymous usage. You can block it with a browser setting or extension; the site works without it.
3. What I do not collect
No trading accounts, holdings, broker credentials or portfolio data. The tools work on public market data and the selections you make on the page; those selections are not stored against your account.
4. Why (legal basis)
Accounts, payments and entitlements: to provide the service you asked for. Contact and waitlist: your consent, given when you submit the form. Logs and rate-limiting: legitimate interest in keeping the service running and fair. Analytics: consent through your browser settings.
5. Who processes it
The service runs on a small number of providers, each handling only what its role needs:
- Hosting — a cloud virtual machine in India, where the database and application run.
- Cloudflare — DNS and network proxy in front of the site.
- Razorpay — payment processing.
- Google — sign-in (if you choose it) and analytics; Google Apps Script relays contact-form messages.
- EmailOctopus — the waitlist mailing list.
- A transactional email provider — delivery of sign-in links.
I do not sell personal data, and I do not share it with anyone else except when the law requires.
6. Retention
- Account data: while the account exists, then deleted within 30 days of a deletion request.
- Payment records: 8 years, as Indian tax law requires.
- Contact messages: up to 2 years.
- Server logs: up to 90 days.
- Expired sign-in links and sessions: removed automatically.
7. Your rights
You can ask for a copy of the personal data I hold about you, ask me to correct it, or ask me to delete your account and its data. Send the request at [email protected] or through the contact form from the email address on the account; I will answer within 30 days. If you are unhappy with the answer you may complain to the Data Protection Board of India.
8. Cookies
- Session cookie (essential) — keeps you signed in. Set only after you sign in; expires in 30 days or when you sign out.
- Security cookies (essential) — protect sign-in forms against forgery.
- Google Analytics (optional) — usage statistics, as above.
No advertising cookies. No cookie banner is shown because nothing is set for tracking beyond analytics.
9. Children
The site is not directed at anyone under 18, and I do not knowingly collect data from them.
10. Changes
The date at the top shows the current version. If a change affects account holders materially, I will email them before it takes effect.
11. Contact
Privacy questions or requests: reach me at [email protected] or through the contact form. See also the Terms of Use.