Privacy (DPDP)

What we collect

• Account details you provide — your email address, and a phone number if you choose to add one — used to create and secure your account and to sign you in.
• Product usage — the watchlists, alerts, screens and feedback you create, so the research features work for you.
• Standard technical data (e.g. request logs) needed to run and protect the service.

Your Learn preset

Learn is free, public and readable with no account. If you choose to answer the eight questions on Pick your examples and save the result to your account, we store four things, and only these four:

• Your preset — one of nine, e.g. The Analyst
• Up to two interest tags — e.g. cricket, gadgets
• Your trading context — e.g. never traded, weekly options buyer
• Your language choice — Hinglish or simple English

What we do not store: your answers to those questions. What we never collect, anywhere in Tezofyn: your date of birth. The preset changes which worked example a lesson shows you and how it is written — never the facts, the figures or the dates, which are identical for every reader.

This is its own purpose with its own consent, recorded when you save it. Change or clear it any time in Settings › Learn; clearing removes it and records the withdrawal. If you never sign in, or never tap save, the preset stays in your own browser and never reaches us at all.

How we use it

Strictly to provide and improve the research features you use, to keep your account secure, and to contact you about the service. We do not sell your personal data, and we do not share it except with the processors needed to run Tezofyn (for example payment and messaging providers) or where the law requires it.

Where it lives

Tezofyn is built single-stack on our own infrastructure, rather than relying on a third-party identity provider — so your account and research data stay under our control instead of being spread across vendors.

During the alpha that infrastructure runs in the European Union. India-based data residency is planned and budgeted, and we will say so here on the day it is real rather than before. We would rather you knew exactly where your data sits than read a claim we cannot yet stand behind.

Cookies

Only what signing you in requires. A session cookie keeps you signed in, a short-lived marker tells our edge which pages to serve you, and your cookie choice itself is stored so we don’t ask again. There are no advertising cookies and no third-party trackers, and nothing optional runs until you press “Accept all” — being signed in is not treated as an answer to that question.

How long we keep it

Your account and the research you create — watchlists, alerts, screens, journal entries — stay until you delete them or close your account. Everything operational is deleted automatically on a schedule:

• Co-pilot conversations — 90 days
• AI usage records (which model answered, token counts) — 365 days
• Product usage events — 180 days
• Error records — 90 days
• Files attached to feedback — 90 days
• Alert delivery records — 90 days
• Sign-in logs (used to block password-guessing) — 30 days
• Journal import fingerprints (a one-way hash of a broker record you pasted, so pasting it again can skip rows you already have) — 30 days. The pasted text itself is never stored, and identifiers such as PAN, client code and address are removed before it is read. The entries you confirmed stay with your account.
• Reply address on a correction report — 1095 days after the report is resolved, then removed from the report, which is kept

Your Learn preset is not on a schedule: it is a preference, so it stays until you clear it or close your account.

Who else processes it

Only the services needed to run Tezofyn, and only the data each one needs:

• Brevo (EU) — sends account emails such as verification, password reset and alerts. Receives your email address.
• Groq (US) — runs the AI models behind the research co-pilot. Receives your question and the figures we ground the answer in. Not your identity. Contractually barred from training on your text.
• Google (US) — runs some of the same AI work on a paid service, which we use when the first provider is unavailable or the job needs it. Receives the same thing: your question and the figures behind it, never your identity. Paid services are not used to improve their products.
• Razorpay (India) — payments, once subscriptions open. We never see or store your card details.
• Sentry (US) — error reports, and only if you accept optional cookies. Decline and nothing is sent.

Some of these are outside India, which the DPDP Act permits. We name them here rather than say “service providers” because you cannot judge a transfer you have not been told about.

Age

Tezofyn is for adults. You confirm you are 18 or over when you create an account, and we record that. We do not offer a guardian-consent flow, so we cannot knowingly serve anyone under 18.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can request access to, correction of, or erasure of your personal data, and withdraw consent.

Three consents you withdraw yourself, in the product, where you gave them: AI processing in the AI notice, product updates in Settings › Privacy, and your learning preset in Settings › Learn. Your name and phone number are corrected from Settings › Account.

For a copy of your personal data (your usage comes summarised as counts), any other correction, deleting your account, or withdrawing any other consent, email support@tezofyn.com from your account email. None of them is behind a paid plan. Erasure requests are honoured within 30 days: deletion removes your personal data, and anonymised records we are required to keep for accounting or security are stripped of anything identifying you.

For anything else, or to raise a grievance, email support@tezofyn.com and we’ll act on it. Where that goes, and how to escalate if the reply does not resolve it, is set out on the contact page.