Privacy Policy

Last updated: 10 July 2026

This Privacy Policy explains how MarketQuants Private Limited ("we", "us") collects and uses personal data on tbtflow.com and the TBTflow dashboard (together, the "Service"). We have written it to be read, not skimmed past. It is designed to align with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000.

1. What we collect

We collect only what we need to run the Service and deliver what you asked for:

• Email and name — when you create an account, join the waitlist, or subscribe.
• Payment information — subscription payments are processed by our payment partner, Razorpay. We never see or store your card, UPI, or banking credentials on our servers. We receive only a payment confirmation, subscription status, and transaction reference.
• Subscription and account records — your plan, billing history, and login activity, so we can operate your subscription and support you.
• Usage analytics — anonymised or pseudonymised page-view and dashboard-interaction data (see Cookies below) to understand which features are useful.

We do not knowingly collect sensitive personal data, and we never ask for your broker credentials, demat details, or trading account information.

2. Why we collect it (purpose limitation and consent)

We use your data only for the purpose you gave it to us for:

• to provide the dashboard and features you explicitly signed up for;
• to process your subscription and provide customer support;
• to improve the Service through aggregate analytics;
• to meet legal and tax obligations.

Our basis for processing is your consent, given when you create an account or subscribe, and, for billing records, our legal obligations. We do not use your data for any purpose you did not sign up for.

3. Email marketing is opt-in only

We send marketing and product-update emails only to people who have opted in — for example, by joining the waitlist or creating an account. Every marketing email we send includes a one-click unsubscribe link. Unsubscribing stops marketing emails immediately; we may still send you transactional emails (such as billing receipts, renewal reminders, or service notices) that are necessary to operate your subscription. We never send cold email, and we never email addresses we did not collect directly from you with your consent.

4. Cookies and analytics

tbtflow.com and app.tbtflow.com set no analytics or tracking cookies. The only browser storage used is essential: your login session token, theme preference, and the waitlist form's basic function. Because nothing non-essential is stored, no cookie-consent banner is required on this Service. Should analytics ever be added, they will load only after an explicit opt-in alongside an equal-prominence "essential only" choice. We do not profile you for advertising. To request deletion of your personal data, write to our Grievance Officer at grievance@marketquants.in — acknowledged within 48 hours.

5. Who we share data with (and who we don't)

We do not sell personal data. Ever. We share data only with service providers who help us operate — such as Razorpay (payments), our hosting providers, our email-delivery provider, and our analytics provider — and only to the extent needed for them to do their job. We may also disclose data where required by law or a lawful order.

6. How long we keep it

• Account and waitlist emails: until you delete your account or ask us to delete them.
• Subscription and payment records: as long as required by tax and company law.
• Analytics data: retained in aggregate form; raw event data is retained for a limited period per our analytics provider's settings.

When data is no longer needed for its purpose, we delete or anonymise it.

7. Security and breach notification

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and access controls. No system is perfectly secure. If a personal-data breach occurs that affects you, we will notify the affected users and the Data Protection Board of India as required by the DPDP Act.

8. Your rights

Under the DPDP Act, you have the right to:

• access a summary of the personal data we hold about you;
• correct inaccurate or incomplete data;
• erase your data (subject to records we must keep by law);
• grievance redressal — raise a complaint with our Grievance Officer, and if unsatisfied, escalate to the Data Protection Board of India;
• withdraw consent at any time (for email, use the unsubscribe link; for anything else, email us).

To exercise any right, email support@tbtflow.com or our Grievance Officer below. We will respond within a reasonable time and in any case as required by law.

9. Grievance Officer

We will acknowledge your grievance within 48 hours of receipt and aim to resolve it within 15 days.

10. Children

The Service is intended for users aged 18 and above. We do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be flagged on the Service, and the "last updated" date above will change.

12. Contact

Privacy questions: support@tbtflow.com