Privacy Policy
Last updated: 10 September 2026. Placeholder text — must be reviewed by legal counsel before launch.
1. Who we are
The Alpha Desk Research LLP (placeholder), registered address: 000, Placeholder Tower, Mumbai 400001. Data protection contact: privacy@thealphadesk.example.
2. Data we collect and why
- Email address and password (hashed) — to create and secure your account. Lawful basis: contract.
- Full name — for invoices and to personalise the report watermark. Lawful basis: contract / legal obligation (GST).
- Order and payment status — the Razorpay payment ID or the UPI reference/UTR you provide. We never store card numbers or bank details.
- Report viewing logs — a hashed, non-reversible IP and browser type each time a protected report is opened, to detect account sharing. Retained 12 months.
- Consent records — when and which policies you agreed to.
We do not collect phone numbers, postal addresses, PAN, or details of your holdings. We do not use advertising trackers.
3. Processors
Supabase (database, authentication, storage), Razorpay (payments), Formspree (contact form). Each is bound by data-processing terms.
4. Your rights
Under the Digital Personal Data Protection Act, 2023 (India) and, where applicable, the GDPR, you may access, correct, or request deletion of your data and withdraw consent by emailing privacy@thealphadesk.example. Financial records are retained for 8 years as required by law; other data is deleted or anonymised on request.
5. Security
Row-level security, encrypted transport, private storage buckets, and audit logging of administrative actions.
6. Grievance officer
Name Placeholder, grievance@thealphadesk.example. We respond within 30 days.