Privacy Policy
Last updated: 30 October 2026
This is a working version of our Privacy Policy, drafted in line with India's DPDP Act, 2023. It is under legal review and may be updated before or shortly after launch.
1. Who we are
JANUSLAB ("JanusLab") operates the JanusLab Platform. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for personal data you provide.
2. Data we collect
- Account data: name, email, password (hashed), and date of birth (to confirm age eligibility).
- Broker connection data: the API credentials/tokens needed to connect your Zerodha / Kite account, stored encrypted. We use these only to fetch market data for your use.
- Usage and device data: pages used, feature activity, approximate location, browser/device info, and, where you arrive via a campaign, attribution parameters (e.g. UTM tags, referrer).
- Payment data: processed by our payment processor (Razorpay). We do not store full card details.
- Support data: messages, bug reports, and correspondence you send us.
3. How we use your data
To create and operate your account; provide backtesting, paper-trading, charting and related features; process subscriptions; provide support; secure the Platform; understand how the Platform is used and improve it; and comply with legal obligations. We use your data only for the purposes for which it was collected (data minimisation).
4. Legal basis / consent
We process your personal data based on your consent (given at sign-up) and as necessary to provide the service you request. You may withdraw consent at any time (see Your Rights); withdrawal does not affect processing already carried out.
5. Sharing
We share data only with: (a) service providers who help us run the Platform (cloud hosting, our payment processor, error-monitoring and analytics), under confidentiality obligations; (b) your broker, to the extent needed to fetch your data; and (c) authorities, where required by law. We do not sell your personal data.
6. Data retention
We keep personal data only as long as needed for the purposes above or as required by law, then delete or anonymise it. You can request deletion; on account closure we remove or anonymise your data and delete stored broker credentials, subject to any legal retention requirements.
7. Security
We use encryption for sensitive data (including broker credentials), access controls, and other safeguards. No system is perfectly secure, but we take reasonable measures to protect your data and will notify you and the Data Protection Board of material breaches as required by the DPDP Act.
8. Your rights (DPDP Act)
You have the right to: access a summary of your personal data; correct or update it; request erasure; withdraw consent; nominate another person to exercise your rights; and seek grievance redressal. To exercise these, contact us at the grievance address below.
9. Children
The Platform is intended for adults (18+). We do not knowingly process the data of children without verifiable parental consent as required by the DPDP Act.
10. Cookies / local storage
We use browser storage and similar technologies for essential functionality (keeping you logged in, remembering preferences) and limited analytics. You can control these through your browser.
11. Cross-border transfers
Where data is processed outside India (e.g. by a cloud provider), we do so in accordance with applicable law.
12. Grievance redressal
In line with the DPDP Act, you may contact us at support@januslab.in. We will respond within the timelines prescribed by law.
13. Changes
We will post updates to this policy here and notify you of material changes.