Privacy Policy

1. About Us

InvestLab (“we”, “our”, “us”) is operated by Jay Pankaj Mehta, Sole Proprietor trading as InvestLab, with a registered address at 2405, B Wing, Neelam Solstice, Eastern Express Highway, Ghatkopar - East, Mumbai - 400077, India.

This Privacy Policy explains how we collect, use, share, and protect information about you when you use our platform at investlab.in.

2. Information We Collect

2.1 Information you provide

• Name and email address (during registration or Google Sign-In)
• Password (stored as a one-way bcrypt hash — never readable by us)
• Stock holdings and watchlist data you enter manually
• Any messages you send via the contact form

2.2 Payment information

We do not store your card number, UPI ID, or bank account details. We only retain the transaction reference ID and payment ID for reconciliation purposes.

2.3 Usage and analytics data

• Pages visited, features used, and navigation patterns (via PostHog and Google Analytics 4)
• Browser type, device type, and approximate geographic location
• API error events (non-sensitive: endpoint name, HTTP status code)

3. How We Use Your Information

• To create and manage your account
• To deliver AI-generated stock analysis reports
• To process token purchases and maintain your wallet balance
• To send transactional emails (email verification, OTP codes)
• To analyse product usage and fix bugs
• To respond to your queries and support requests
• To comply with applicable laws and regulations

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Third-Party Services

We share limited data with the following trusted third parties, solely to operate the service:

5. Cookies

We use browser localStorage (not cookies) to store your authentication token and preferences. Google Analytics and PostHog may set cookies to track sessions across visits. You can disable cookies in your browser settings, though this may affect some functionality.

6. Data Retention

• Account data is retained until you request deletion
• Transaction records are retained for 7 years as required under Indian financial regulations
• Analytics data is retained per the respective platform’s data retention policies
• Session recordings are retained for 90 days

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data (subject to legal retention requirements)
• Opt out of analytics tracking (contact us to request this)

To exercise any of these rights, contact us at jay.mehta@investlab.in.

8. Security

We implement industry-standard security measures including HTTPS encryption, bcrypt password hashing, and JWT-based authentication. However, no system is completely secure. We encourage you to use a strong, unique password.

9. Children’s Privacy

Our service is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact