YOUR DATA

Privacy Policy

This policy explains what personal data TradeForges collects, why we use it, when it may be shared, how long it is retained and the choices available to you.

Effective date: 1 September 2026Last updated: 18 September 2026Applies to tradeforges.in

Privacy at a glance: We collect the information needed to operate accounts, evaluation programs, payments, KYC, payouts, referrals and support. We do not ask for your card PIN, CVV or UPI PIN, and we do not sell personal data.

1. Scope and data controller

This Privacy Policy applies to TradeForges’ website, dashboard, evaluation programs, KYC process, payment flow, referral program, support inbox and related communications. TradeForges, the operator of tradeforges.in, determines why and how personal data is processed for these services.

This policy should be read with our Terms & Conditions and Refund Policy. Third-party websites and services have their own privacy policies.

2. Personal data we collect

Information you provide

  • Account details: legal name, email address, phone number, date of birth, country, password hash, referral code and account preferences.
  • Identity and KYC details: PAN image, masked Aadhaar front and back images, selfie or live-photo image, document metadata, consent records, verification status and review notes.
  • Bank verification details: account-holder name, bank name, account number and IFSC code. The full account number is encrypted at rest and only a masked value is displayed during review.
  • Payment and payout details: selected plan, amount, payment order and transaction identifiers, payment status, refund records, UPI ID or other payout details and payment-related support evidence.
  • Evaluation activity: challenge, phase, virtual balance, evaluation orders, positions, symbols, P&L, risk-limit usage, rule breaches, payout eligibility and referral activity.
  • Communications: support tickets, email messages, replies, attachments, feedback and information supplied in a complaint.

Information collected automatically

  • IP address, browser and device information, date and time, page requests, error and security logs, session or authentication information and basic usage events.
  • Precise device location: latitude, longitude, accuracy and capture time only after you select “Allow precise location” on the logged-in dashboard and grant the browser permission. Location is not collected if you decline or deny permission.
  • Information supplied by payment, email, market-data, hosting or security providers when necessary to verify or deliver a service.

Please do not provide information that we have not requested, particularly unmasked Aadhaar, account passwords, OTPs, card PINs, CVVs or UPI PINs.

3. How and why we use personal data

We process personal data for lawful purposes connected with the service, including to:

  • create, authenticate and secure your account, including email OTP verification;
  • use user-approved precise location to help review and protect the active login session;
  • display plans, verify payments and activate the digital evaluation service you requested;
  • calculate evaluation progress, risk limits, status, profit splits, referrals and payout eligibility;
  • review KYC, prevent duplicate or fraudulent accounts and meet legal or payment-provider requirements;
  • process eligible payouts and refunds and maintain financial records;
  • respond to support requests, complaints, data requests and disputes;
  • detect abuse, investigate security incidents and protect users and the platform;
  • maintain, diagnose and improve reliability, accessibility and user experience;
  • send essential service notices and, only where permitted, relevant promotional communications; and
  • comply with law, lawful requests, audits, tax, accounting and dispute-resolution obligations.

Depending on the context, processing is based on your request or contract with us, consent, compliance with law, or legitimate operational and security purposes recognised by applicable law. Where consent is required, you may withdraw it, but this does not affect processing already lawfully completed and may prevent us from providing a feature that needs the data.

4. KYC and identity documents

PAN, masked Aadhaar, selfie and bank-verification information is treated as restricted personal data within TradeForges. It is used to verify identity and age, prevent fraud, review payout eligibility and meet applicable compliance requirements. KYC images are stored outside the public website area and are available only through authenticated, authorised administrative review.

We ask users to submit masked Aadhaar only, with the first eight digits hidden. The full bank account number is encrypted on the server and is not returned in the user or admin list response; only a masked value ending in the final four digits is displayed.

After an administrator reviews a submission, its PAN, Aadhaar and selfie images are deleted. Bank details from an approved KYC remain encrypted and are available to authorised administrators only when needed to process a payout. Bank details from a rejected submission are deleted. Limited verification status, consent time, review time and review note may be retained for account administration, fraud prevention, disputes or legal compliance. We do not use KYC documents or selfie images for advertising or biometric profiling.

5. Payment information

A payment gateway processes the payment method you select. TradeForges ordinarily receives transaction information such as the gateway order ID, payment ID, amount, status, method category and verification result. The payment gateway, bank, card network or UPI provider processes sensitive payment credentials under its own privacy terms.

TradeForges does not ask for or store your complete card number, CVV, card PIN, online-banking password or UPI PIN. Never share these details with anyone claiming to be TradeForges support.

Refunds are processed in accordance with our Refund Policy and may require transaction information to confirm the original payer and payment method.

6. When personal data may be shared

We may share only the data reasonably required with:

  • Payment and banking providers to authorise, verify, settle, refund or investigate transactions;
  • Email and communications providers to deliver OTPs, notices and support messages;
  • Hosting, infrastructure, market-data and security providers that help operate and protect the service;
  • Professional advisers, auditors or insurers under confidentiality obligations;
  • Government, regulatory, law-enforcement or judicial authorities where disclosure is required or lawfully requested; and
  • A successor organisation in a lawful merger, reorganisation or transfer, subject to appropriate safeguards and notice where required.

Service providers are expected to use data only for the contracted purpose and to apply reasonable security. We do not sell or rent your personal data. Referral participants do not receive your KYC or payment credentials.

Some providers may process data outside India. Where this occurs, we use available contractual and technical safeguards and comply with restrictions applicable to cross-border processing.

7. Data retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including service delivery, account administration, security, fraud prevention, tax and accounting records, payment reconciliation, dispute resolution and legal compliance.

  • Active account and evaluation records are retained while the account is in use.
  • User-approved precise location is encrypted, attached only to the relevant login session and removed when that session record expires or is deleted.
  • Payment, refund and payout records may be retained for the period required by financial, tax, audit or legal obligations.
  • Incomplete KYC drafts and their private images are automatically removed after a limited period.
  • Submitted PAN, masked Aadhaar and selfie images are deleted after review. Verified bank details remain encrypted only while needed for payout processing, security and applicable financial record-keeping; rejected bank details are deleted.
  • Security logs and support records are retained for a limited operational or dispute-resolution period.

When retention is no longer required, information is deleted, anonymised or securely isolated, subject to backup rotation and legal holds.

8. Security

We use reasonable administrative, technical and organisational measures designed to protect personal data. These include access controls, password hashing, restricted non-public KYC storage, authenticated admin-only document routes, no-store response controls, encryption of full bank-account details and precise location, transport encryption, private credential storage, logging and review of sensitive administrative actions.

No internet service or storage system is completely secure. You must use a strong unique password, protect OTPs and devices, log out on shared devices and promptly report suspected unauthorised activity. We will assess and respond to a personal-data breach as required by applicable law.

9. Your choices and rights

Subject to applicable law and necessary identity verification, you may ask for information about our processing of your personal data or request correction, access or deletion of eligible information. You may also withdraw consent where consent is the applicable basis, close your account, opt out of optional marketing, or raise a grievance.

You may decline the precise-location request and continue using the dashboard, or revoke future location access in your browser settings. To request deletion of a previously captured location before its login-session record expires, contact support.

Some information cannot be deleted immediately where it is required to complete a transaction, protect another person, investigate fraud, preserve evidence, comply with tax or legal duties, or establish or defend a legal claim.

To make a request, email support@tradeforges.in from your registered email address. Describe the request clearly. We may ask for limited information to verify that the request concerns your account.

10. Cookies, local storage and similar technology

TradeForges may use browser storage, cookies or similar technology that is necessary to keep you signed in, preserve security tokens, remember display preferences such as theme, support referral attribution and maintain essential service state. We may also use limited technical logs to understand errors and service performance.

You can clear browser storage or block cookies using browser settings, but authentication and other essential features may stop working. We do not use sensitive KYC documents for behavioural advertising.

11. Children

TradeForges is intended only for people aged 18 or older. We do not knowingly offer evaluation accounts to children. If you believe a child has provided personal data, contact us so that we can investigate and take appropriate action.

12. Changes to this Privacy Policy

We may update this policy to reflect service, provider, security or legal changes. The latest version will be published on this page with an updated date. We will provide additional notice for material changes where reasonably required.

13. Privacy contact and grievances

Contact the TradeForges Support Team for privacy questions, requests or complaints. Do not attach identity documents unless support specifically asks you to use an approved submission method.

Data controller and operatorTradeForgesWebsitehttps://tradeforges.inPrivacy and grievance emailsupport@tradeforges.inService areaIndia