Privacy Policy

• Account data: email address, name (optional), and a securely hashed password. We never store your password in plain text.
• Watchlist data: which symbols you've starred.
• Broker session data: if you connect a Zerodha Kite account, we store a short-lived access token (expires daily, per Kite's own design) used solely to fetch market data on your behalf. We never receive or store your Zerodha login password.
• Trading and journal data: any trades, notes, or reflections you voluntarily log in the Trade Journal, and any settings you customize.
• Usage data: standard server logs (timestamps, request paths, status codes) retained by our hosting provider for operational and security purposes.

We use one essential cookie category — nothing else:

• Authentication / Security: a single encrypted session token that keeps you signed in. It is httpOnly (not readable by JavaScript) and is not used for tracking, advertising, or analytics of any kind.

We do not currently set preference or analytics cookies. If that changes, this section will be updated before any such cookie is set.

We rely on a small number of third-party infrastructure providers to operate the Service, each bound by their own security and data-processing terms:

• Supabase — hosts our PostgreSQL database (account data, application data).
• Vercel — hosts and serves the application itself.
• Resend — delivers transactional email (password resets, alerts).
• Zerodha Kite Connect — supplies market data, as described above.

EdgeRegime does not separately sell or share your data with these providers beyond what's needed to operate the Service. We do not currently use any third-party analytics provider.

• Account data is retained for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except log data retained for security purposes for a limited period consistent with our hosting providers' standard retention.
• Signal and score history (Trade Scores, decisions, and related scoring data) is retained indefinitely in de-identified/aggregate form to power the Backtest Evidence and Trade Journal features, even after an individual account is deleted — this data does not identify you personally once your account data is removed.