Privacy Policy

When you register, we collect your name, email address, and a hashed password. If you subscribe to a paid plan, billing details (card last four digits, billing address) are processed by our payment provider — we do not store raw card numbers.

You may upload or connect holdings data including stock symbols, quantities, purchase prices, transaction dates, and broker statements. This data is stored encrypted at rest and is used solely to compute the analytics you request. We do not sell, share, or use your portfolio data to inform any third-party decisions.

We collect anonymised product usage events (pages visited, features clicked, session duration) to understand how users interact with Spectrum and to improve the product. This data cannot be used to identify individual portfolios or holdings.

Our servers automatically record IP addresses, browser type, operating system, referrer URLs, and timestamps for each request. This information is retained for up to 90 days and is used for security monitoring, debugging, and abuse prevention.

Your account and portfolio data are used to authenticate you, run quantitative models (Sharpe ratios, beta regressions, drawdown analysis, factor attributions, etc.), render dashboards, and generate reports. The data is processed on our servers in India.

We send transactional emails (password resets, invoice receipts, data-import confirmations). With your consent, we may also send product updates and feature announcements. You can unsubscribe from marketing emails at any time via the link in the email footer.

Aggregated, anonymised usage patterns help us prioritise features, optimise performance, and fix bugs. No individual's portfolio data is used in this analysis.

We may use or disclose information where required by law, court order, or SEBI/regulatory directive, or to protect the rights, property, or safety of Spectrum, our users, or the public.

All user data is stored on servers located within India, in compliance with applicable data localisation requirements for financial information.

Portfolio data is encrypted at rest using AES-256. All data in transit is protected by TLS 1.2 or higher. Authentication tokens use signed JWTs with short expiry windows.

Access to production databases is restricted to a small number of engineers with role-based permissions and multi-factor authentication. All access is logged and audited.

In the event of a security breach affecting your personal or financial data, we will notify affected users within 72 hours of discovery and report to the relevant authorities as required by law.

We do not sell, rent, or trade your personal or portfolio data to any third party for commercial purposes.

We share data with a limited number of vetted sub-processors who help us operate the platform: our cloud infrastructure provider, payment processor, transactional email provider, and error-monitoring service. Each sub-processor is contractually bound to process data only as instructed and to maintain appropriate security standards.

We may disclose information if required by a valid legal process — such as a court order, SEBI investigation, or statutory audit — after verifying its authenticity. Where permitted, we will notify you before complying.

If Spectrum is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you in advance and ensure the successor entity honours this Privacy Policy.

We use session cookies to keep you logged in across page navigations. These are strictly necessary for the service to function and cannot be disabled.

With your consent, we place first-party analytics cookies to track aggregate usage patterns. We do not use third-party advertising cookies or tracking pixels.

You can control cookie settings through your browser preferences. Disabling essential cookies will prevent you from using authenticated features of the platform.

You may request a copy of all personal and portfolio data we hold about you. We will provide it in a machine-readable format (JSON or CSV) within 30 days of a verified request.

If any of your personal data is inaccurate or incomplete, you may correct it directly in your account settings or by contacting us.

You may request deletion of your account and all associated data. We will process this within 30 days. Note that we may retain minimal records required for legal, tax, or audit obligations for up to 7 years, as mandated by Indian financial regulations.

You may object to or restrict certain processing activities, such as use of your data for product analytics. Contact us at privacy@spectrumanalytics.in to exercise these rights.

We retain your data for as long as your account is active and for a reasonable period thereafter to handle support queries or disputes.

Upon account deletion, personal and portfolio data is purged from production systems within 30 days. Anonymised, aggregated statistical data may be retained indefinitely.

Transaction records and account information required by SEBI, the Income Tax Act, or other applicable Indian law are retained for the minimum period required — typically 7 years.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a prominent notice within the platform at least 14 days before the changes take effect.

Continued use of Spectrum after the effective date of a revised policy constitutes acceptance of the updated terms.

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at: privacy@spectrumanalytics.in. We will respond within 15 business days.

In accordance with the Information Technology Act 2000 and applicable rules, our designated Grievance Officer is Priya Mehta, reachable at the email address above. Complaints will be acknowledged within 24 hours and resolved within 30 days.