Privacy Policy

Last updated: 30 October 2026

This policy explains how Orvexa AI Technologies Private Limited ("Orvexa", "we") handles personal data in the Orvexa Markets app and on orvexamarkets.com. We follow India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

What we collect

• Account: your email address, an optional display name, and your password as a one-way hash (we never store or see the password itself).
• Sign-in sessions: when each session started and was last used, and the device's app/browser description, so you can see and end sessions.
• Account security: when your password was last changed, hashes of your previous 4 passwords (so they can't be reused), failed sign-in counts, and, if you turn on two-factor authentication, its secret, encrypted.
• Security log: sign-ins, failed sign-ins, sign-outs and other sensitive actions, with the IP address they came from.
• What you do in the app: watchlists, your risk limits and settings, paper (virtual-money) trades and their orders and fills, and the Orvexa AI signals shown to you.

We do not collect your contacts, photos, location, government ID numbers or bank details, and the app has no advertising or third-party analytics trackers.

Exchange accounts (when available)

Connecting an exchange account is in development. When it is available and you choose to connect one, we will store the access token or API key the exchange issues, encrypted at rest, and use it only to read your account and place the trades you approve or allow within your limits. We never request withdrawal permission and never hold your funds. You can disconnect at any time, and we then delete the stored token or key.

How we use it

• To run your account and the app's features, and to keep your paper trading history.
• To protect the service: detecting misuse, securing sign-ins and investigating incidents.
• To measure and improve Orvexa AI: signals are scored against what the market did next. This uses market data and signal outcomes, not your identity.
• To contact you about your account or important changes to the service.

We do not sell personal data, and we do not use it for advertising.

Who we share it with

• Our hosting provider, which runs the servers and database that store the data for us.
• Your exchange, only if you connect your account, and only the order and account requests needed to do what you asked.
• Google Workspace, which delivers our emails to you (password reset codes and security notices).
• Authorities, when Indian law requires it.

The app reads public market data and news (for example exchange price feeds and news headlines); none of your personal data is sent to those sources. To refuse passwords known from data breaches, we send the first 5 characters of a one-way hash of a new password to the Have I Been Pwned service; the password itself never leaves our server.

How we protect it

All traffic is encrypted with HTTPS. Passwords are hashed with argon2id; two-factor secrets are encrypted with AES-256-GCM; reset codes are stored only as keyed hashes. Refresh tokens are stored on your device in its secure keychain or keystore, and on our servers only as hashes. Access to production systems is limited to the people who run the service.

How long we keep it

We keep your data while your account exists. When you delete your account, your account, sessions, watchlists, settings and paper trading records are deleted immediately. The security log is kept to protect the service, with the link to you removed.

Your rights

You can see and correct your details in the app, delete your account at any time, and ask us about the data we hold about you, to correct it or erase it, by writing to the Grievance Officer below. We reply within 30 days. Orvexa Markets is not intended for anyone under 18.

Grievance Officer

Gurmeet Singh
Orvexa AI Technologies Private Limited
209, Kohinoor Enclave, Jalandhar, Punjab 144009, India
office@orvexatechnologies.com

Changes

We will update this page when our practices change, and tell you in the app before a significant change takes effect.