Privacy Policy

1. Who We Are

BRBStox is operated by BRB Plus AI Private Limited, a company incorporated in India.

In this Privacy Policy:

• “BRBStox,” “we,” “us” and “our” refer to BRB Plus AI Private Limited and the BRBStox platform.
• “Platform” includes the BRBStox website, applications, account dashboard and related services.
• “User,” “you” and “your” refer to the person accessing or using the Platform.
• “Personal data” means information relating to an identifiable individual.

Legal and Privacy Contact

• Company: BRB Plus AI Private Limited
• Registered office: A-152, Sector 63, NOIDA (UP), India
• Phone: +91 9319600650
• Privacy email: privacy@brbstox.com
• Support email: support@brbstox.com
• Grievance contact: privacy@brbstox.com

2. What This Policy Covers

This Policy applies to information processed through:

• The BRBStox website, account registration and login
• Professional Charting, Backtesting Lab, Market Replay, Trader Community and Trading Simulator
• Subscription and billing management, customer support, email, SMS and platform notifications
• Newsletter and marketing preferences, and any related BRBStox service that links to this Policy

Third-party websites and services have their own privacy practices. Their handling of information is governed by their respective privacy policies.

3. About the BRBStox Platform

BRBStox provides four connected tools:

• Market Replay — allows users to practice simulated trading on available historical market sessions while controlling how the session progresses. Market Replay uses historical market data with a minimum delay of 30 days.
• Backtesting Lab — allows users to test trading strategies, chart patterns, prebuilt setups, custom rules, options strategies and baskets using historical market data.
• Trader Community — a moderated community where registered users can share charts, ask questions, discuss market observations, strategies and testing findings.
• Trading Simulator — a simulated trading environment where users practise order placement, position management and execution using virtual capital and historical market data with a minimum delay of 30 days.

BRBStox does not execute real-money trades, maintain demat accounts or connect orders to a user's brokerage account.

4. Information We Collect

The information collected depends on the features you use.

4.1 Account Information

When you register or manage your account, we may collect full name, email address, mobile number, securely protected password, login and authentication information, OTP verification records, preferred language, profile photograph, voluntary profile details, account preferences, communication preferences, date of registration and account status.

4.2 Backtesting Lab Information

When you use the Backtesting Lab, we may process and store instruments selected, historical dates, strategy selections, options legs, strike and expiry selections, entry and exit conditions, targets and stop-losses, position-sizing settings, slippage assumptions, custom baskets, test reports, saved charts and workspaces, and related settings.

4.3 Market Replay Information

When you use Market Replay, we may process and store historical sessions selected, instruments viewed or traded, playback settings, simulated orders, open and closed positions, targets, stop-losses, trade timestamps, simulated profit and loss, charts, indicators, saved workspaces, session history and other Market Replay settings.

4.4 Trading Simulator Information

When you use the Trading Simulator, we may process and store virtual-capital balance and top-ups, instruments viewed or traded, simulated orders, quantity, order and product types, entry and exit prices, targets, stop-losses, trailing stop-loss settings, margin estimates, hedged positions, options strategies, custom baskets, open and closed positions, simulated profit and loss, trade timestamps, day-wise summaries, detailed trade reports, screener and watchlist activity, and other simulator settings. Virtual capital and simulated profits have no monetary value and cannot be withdrawn.

4.5 Trader Community Information

When you use the Trader Community, we may process display name, profile information, posts, replies, questions and accepted answers, chart screenshots, tags, shared backtesting summaries, shared baskets, follows, mentions, reputation points, badges, leaderboard activity, reports, moderation history, blocked-user preferences and notification settings. Content you post may be visible to other registered users according to the feature and your available privacy settings.

4.6 Subscription and Payment Information

When you purchase a subscription or virtual-capital top-up, we may collect or receive product selected, billing period, amount paid, taxes, invoice details, subscription start and expiry dates, automatic-renewal status, Razorpay customer or subscription identifier, payment transaction identifier, payment status, renewal status, failed-payment status, refund or dispute information, billing name and contact information, and GST information if voluntarily provided for invoicing. Payments and recurring mandates are processed through Razorpay. See the Razorpay Privacy Policy. BRBStox does not intend to store your complete card number, CVV, UPI PIN, banking password or other full payment credentials.

4.7 Technical and Usage Information

When you access the Platform, we may automatically collect IP address, browser type and version, operating system, device type, device or session identifiers, login timestamps, pages and features used, referring page, approximate location derived from IP address, language and time-zone settings, error logs, crash information, security events, failed-login attempts, cookie identifiers, session duration and performance information.

4.8 Support and Communication Information

When you contact us, we may collect your name, email address, mobile number, account identifier, message or enquiry, screenshots and files you provide, support-ticket history, complaint details, feedback and survey responses. Please do not send passwords, OTPs, UPI PINs, complete card information or brokerage-account credentials through support channels.

4.9 Marketing Information

When you subscribe to updates or agree to receive promotional communication, we may process email address, mobile number, communication preferences, campaign engagement, newsletter subscriptions and unsubscribe choices. Promotional communications are separate from essential account, payment, security and service messages.

5. Information We Do Not Need

BRBStox does not require a demat account or brokerage account to provide its services. Unless specifically required for a lawful support or payment-resolution purpose, you should not provide demat credentials, broker login credentials, trading passwords, transaction PINs, UPI PINs, OTPs, complete card details, bank-account passwords, Aadhaar or PAN documents, brokerage statements containing unnecessary personal information, real portfolio information, personal financial records, or information about another person without authority.

If you voluntarily post sensitive or financial information in the Trader Community, other users may be able to see or copy it. You should remove unnecessary personal information before uploading charts, screenshots or reports.

6. How We Collect Information

• Directly from you — when you register, create a profile, run a test, place a simulated trade, publish a community post, make a payment or contact support.
• Automatically — through cookies, logs, device information and your interaction with the Platform.
• From payment providers — Razorpay may provide transaction status, subscription identifiers, mandate status, payment confirmation and related billing information.
• From other users — when another user mentions you, follows you, replies to your post or reports content involving your account.
• From service providers — we may receive delivery, security, fraud-prevention, analytics or support information from companies that provide services to us.

7. Why We Use Your Information

We may use personal data to create and operate your account; provide BRBStox services; process subscriptions and automatic renewals; moderate and protect the Trader Community; provide support; communicate with you; improve the Platform; maintain security and prevent misuse; and meet legal obligations.

Essential communications may include OTPs, login and security alerts, subscription confirmations, renewal notices, failed-payment notices, invoices, service updates, data-retention notices, account-deletion confirmations, policy or Terms updates, support responses and community moderation notices. You may not be able to opt out of essential messages while maintaining an active account.

8. Consent and Your Choices

Where consent is required, we will seek it through a clear affirmative action. Consent may be requested for activities such as creating an account, receiving promotional messages, using non-essential cookies, publishing optional profile information, enabling optional features, or processing information for a new purpose not reasonably connected with the original purpose.

You may withdraw consent through available account settings or by contacting us. Withdrawal does not affect processing that occurred lawfully before withdrawal. We may continue to process limited information where retention or processing is required or permitted by law.

9. Public and Community Information

Depending on the feature and access settings, display name, profile photograph, biography, posts, replies, charts, backtest summaries, shared baskets, reputation, badges, follower information, accepted answers and leaderboard activity may be visible to other users. Do not publish information you do not want other users to view.

When you report another user or content, we may retain the reported content, your reason for reporting, related posts, moderation decisions, account restrictions, appeals and internal review notes.

10. Cookies and Similar Technologies

BRBStox may use cookies, local storage, pixels and similar technologies.

• Essential cookies — needed for login, authentication, security, session continuity, fraud prevention, account preferences and payment workflows.
• Preference cookies — remember choices such as language, theme, chart preferences, saved sessions and interface settings.
• Analytics cookies — where used, help us understand feature usage, page performance, navigation paths, errors and general usage patterns.
• Marketing cookies — if used, will be used only after any required consent has been obtained.

You can manage cookies through your browser settings. Blocking cookies may affect Platform functionality.

11. Automatic Renewal Through Razorpay

Paid BRBStox subscriptions renew automatically through Razorpay when the user authorises a recurring-payment mandate. We may store Razorpay customer ID, subscription ID, mandate status, payment status, billing period, renewal date, transaction reference and limited payment-method information supplied by Razorpay, such as the payment type or masked details.

You can cancel future automatic renewal through the subscription-management option made available by BRBStox. Cancellation of renewal does not ordinarily provide a refund for a completed payment and does not end access already paid for. Deleting the BRBStox application from a device does not, by itself, cancel an active Razorpay subscription.

12. When We Share Information

We do not sell or rent personal data to advertisers, data brokers or unrelated parties for their own independent marketing.

We may share limited information with other community users according to the feature and settings; service providers such as cloud hosting, email delivery, analytics, payment processing and fraud prevention; Razorpay and financial institutions involved in processing transactions; legal and regulatory authorities where reasonably necessary; professional advisers; successor entities in a business transfer; and with your direction or consent.

13. Processing and Storage Locations

BRBStox may use service providers operating in India or other countries. As a result, information may be stored or processed outside the state or country in which you live. Where information is transferred internationally, we will take reasonable steps to use contractual, technical and organisational safeguards and comply with any transfer restriction imposed under applicable Indian law.

14. Data Security

We use reasonable technical and organisational measures appropriate to the nature of the information and the risks involved. These measures may include encryption in transit, secure password hashing, access controls, role-based permissions, monitoring and audit logs, backup and recovery processes, vendor-security assessment and incident-response procedures. No internet service can guarantee absolute security. Users should protect their passwords, avoid sharing OTPs and notify us promptly if they suspect unauthorised account access.

15. Personal-Data Breaches

If we become aware of a personal-data breach, we may investigate the incident, take steps to contain it, restore affected systems, assess potential harm, preserve relevant records, notify affected users where required, notify the appropriate authority where required, provide practical steps users can take, and implement measures intended to reduce recurrence. Security notifications may be sent by email, SMS, in-platform notice or another appropriate method.

16. How Long We Retain Information

We do not intend to keep personal data indefinitely. Retention depends on the type of information, the purpose for which it was collected, legal requirements, security requirements and whether the account or subscription remains active.

• Active accounts — account information is generally retained while the account remains active and for as long as reasonably necessary to provide the Platform.
• Market Replay data after expiry — associated Market Replay data is retained for up to 180 days from the relevant subscription-expiry date. If renewed within the retention period, retained information may become accessible again. After the retention period, the applicable product data may be deleted from active systems or irreversibly anonymised, unless longer retention is required by law.
• Backtesting Lab data after expiry — associated paid-product data is retained for 180 days from the subscription-expiry date. If renewed within 180 days, retained information may become accessible again. After 180 days, the relevant paid-product data may be deleted or irreversibly anonymised unless a longer period is required by law.
• Trading Simulator data after expiry — associated simulator data is retained for 180 days from the subscription-expiry date under the same renewal and deletion rules.
• Community content — may remain available while your account is active. If you delete your account, we may delete, anonymise or retain content where reasonably necessary for moderation, fraud prevention, legal compliance, dispute resolution or protection of other users.
• Payment and accounting records — may be retained for the period required under applicable law, even after an account or subscription is closed.

Information deleted from active systems may remain temporarily within encrypted or protected backups until those backups are replaced under the normal backup cycle.

17. Your Privacy Rights

Subject to applicable law, you may request to access a summary of personal data associated with your account; correct inaccurate information; complete or update outdated information; delete eligible personal data; withdraw consent; change communication preferences; opt out of promotional communications; request account closure; receive information about the categories of service providers with whom data has been shared; raise a privacy grievance; or nominate another person to exercise applicable rights in the event of death or incapacity, where legally available.

For privacy requests, contact privacy@brbstox.com. We may need to verify your identity before completing a request. A request may be limited or declined where retention is required by law, the information is needed for security or fraud prevention, the information relates to another person, or another lawful exception applies.

18. Withdrawing Consent

You may withdraw consent for optional processing through the available account control or by contacting us. Examples include promotional email, promotional SMS, optional profile details, non-essential cookies and optional features requiring separate consent. Withdrawal may prevent continued use of a feature that depends on the relevant information and does not invalidate processing that occurred before the withdrawal.

19. Account Deletion

You may request deletion through the available account setting or by contacting privacy@brbstox.com. Account deletion may result in loss of access to BRBStox, loss of Backtesting Lab, Market Replay and Trading Simulator access, removal or anonymisation of community profile information, deletion of eligible saved data and inability to recover deleted configurations or reports.

Account deletion does not create a right to a refund for a subscription period already purchased. Certain information may remain where required for payment records, legal compliance, fraud prevention, cybersecurity, dispute resolution or enforcement of rights.

20. Children's Privacy

BRBStox is intended only for persons aged 18 years or older. We do not knowingly permit children to register or intentionally collect personal data from children. If we learn that an account belongs to a person under 18, we may suspend the account and take reasonable steps to delete the associated information, subject to legal and security requirements. A parent or guardian who believes that a child has provided personal data may contact privacy@brbstox.com.

21. Your Responsibilities

You should provide accurate account information, protect your login credentials, use a unique password, avoid sharing OTPs, remove personal details from chart screenshots, avoid posting brokerage statements publicly, respect other users' privacy, obtain permission before sharing another person's information, report suspicious messages, keep contact information updated and review the privacy settings available to you. Do not attempt to obtain another user's personal data through deception, scraping, harassment or unauthorised access.

22. Aggregated and De-identified Information

We may create statistics or reports using information that has been aggregated or de-identified so that it is not reasonably linked to an individual user. Such information may be used to understand product usage, improve Platform performance, conduct internal research, develop features, prepare business reports, measure community health and analyse general backtesting or simulator behaviour. We will not deliberately re-identify de-identified data except where necessary to test privacy protections, investigate misuse or comply with law.

23. Third-Party Links and Integrations

BRBStox may contain links to third-party websites or services. We are not responsible for the privacy practices, security or content of a third party merely because the Platform links to it. You should review the relevant third party's privacy policy before providing information.

24. Changes to This Privacy Policy

We may update this Policy to reflect product changes, new features, changes in service providers, legal requirements, security improvements or changes in our data practices. The updated date will appear at the top of the Policy. For material changes, we may provide notice through email, SMS, your account dashboard or a prominent Platform notice. Where required, we will request fresh consent before using personal data for a materially different purpose.

25. Privacy Complaints and Grievances

Questions, requests and complaints concerning personal data may be sent to privacy@brbstox.com. Please include your registered email or mobile number, a clear description of the request or concern, and any relevant transaction or support reference.

We may contact you to verify your identity or obtain further information. If you are not satisfied with our response, you may use any further grievance or complaint mechanism available under applicable law.