Last updated: 28 September 2026

Privacy Policy

This policy explains what personal data CryptoSignals collects, why, who we share it with, and the rights you have under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Who is responsible for your data

Web3India Technology, Kolkata, West Bengal, India, operates CryptoSignals and is the Data Fiduciary for your personal data. Contact: support@web3india.net.

2. What we collect

3. Why we use it

• To provide the service: run tip checks, readings, portfolio views, alerts, and the AI Advisor.
• Billing: manage trials, subscriptions, receipts, refunds, and records required by tax and accounting law.
• Safety and abuse prevention: secure accounts, enforce plan limits, prevent repeated free trials and fraud.
• Support: answer your questions and complaints.
• Improving the service: understand which features work, using aggregated or de-identified data where possible.
• Marketing: only if you separately opt in. You can opt out at any time from any email or your settings.

We process your data on the basis of the consent you give when you sign up (and any additional consents you choose), and for legitimate uses permitted by the DPDP Act, such as complying with law. You can withdraw consent at any time; this does not affect processing done before withdrawal, but some features may stop working.

4. AI processing

To analyse tips and answer your questions, the text, links and screenshots you submit, and relevant market data, are sent to our AI service providers (such as Anthropic) for processing. Tip content is treated as data, not as instructions. We never send your exchange API keys, passwords, or payment details to any AI system. We do not allow our AI providers to use your content to train their models where the provider offers that choice.

5. Who we share it with

We do not sell or rent your personal data. We share it only with service providers who help us run CryptoSignals, under contracts that require them to protect it, and only as much as they need:

• Cloud hosting, content delivery, and database providers
• Razorpay (payments)
• Email delivery providers
• Telegram (only if you link it)
• AI providers (see section 4)
• Analytics and error-monitoring tools (with personal details minimised)
• Your connected exchange (only to read your data with the read-only key you provide)

We may also disclose data if required by law, a court order, or a government authority, or to protect the rights and safety of our users or the public.

6. Transfers outside India

Some of our service providers store or process data outside India (for example, Singapore, the EU, or the USA). We only transfer data where permitted under the DPDP Act and take reasonable steps to make sure it stays protected.

7. How long we keep it

• Account and portfolio data: while your account is active. When you delete your account, we delete or anonymise your data within 30 days.
• Screenshots you upload: deleted automatically after 30 days.
• Server logs: kept for up to 30 days.
• Payment records: kept for as long as tax and accounting laws require, even after account deletion.
• Exchange keys: deleted as soon as you disconnect the exchange or delete your account.

8. How we protect it

• Encryption in transit (HTTPS) and at rest. Exchange keys use envelope encryption (AES-256-GCM) and are only decrypted in memory during a sync.
• Secure, httpOnly session cookies; optional two-factor authentication (required for our staff).
• Least-privilege access for staff, audit logs, and regular backups.

No system is perfectly secure. If a personal data breach happens, we will inform affected users and the Data Protection Board of India as required by law.

9. Cookies

We use essential cookies to keep you signed in and secure. We use analytics cookies only with your consent, and you can change your choice at any time. We do not use advertising cookies.

10. Your rights

Under the DPDP Act you have the right to:

• Access: get a summary of the personal data we process and who we shared it with. You can also download your data as a file from your settings.
• Correction and completion of inaccurate or incomplete data.
• Erasure: delete your account and data from your settings or by emailing us.
• Withdraw consent at any time.
• Grievance redressal: complain to our Grievance Officer (below).
• Nominate a person to exercise your rights in case of death or incapacity.

Email support@web3india.net from your registered email address to use any of these rights. We may need to verify your identity first.

11. Children

CryptoSignals is only for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

12. Grievance Officer

13. Changes to this policy

We may update this policy. We will post the new version here with a new date and tell you about important changes by email or in the app before they apply.