indexbreadth

Privacy Policy

Effective date: 19 September 2026 · Last updated: 19 September 2026

This Privacy Policy explains how Index Breadth ("Index Breadth", "we", "us", or "our"), operated by IndexBreadth, collects, uses, shares, and protects your information when you use our website indexbreadth.com, the application at app.indexbreadth.com, and our Android/iOS apps (together, the "Service"). Index Breadth is a market-analytics platform providing breadth and participation analytics for Indian equity markets. It is software; it is not investment advice.

1. Information we collect

a. Information you provide

• Account details — your name, email address, and mobile number when you register, and a password (which we store only as a salted one-way hash, never in plain text).
• Verification — a one-time code (OTP) sent to your mobile or email to verify sign-up and to reset a password.
• Payment information — when you buy a subscription, payment is processed by our payment gateway (Razorpay). We receive and store a record of the transaction (plan, amount, date, status, and a gateway reference). We do not receive or store your full card number, CVV, UPI PIN, or bank credentials — those are handled by the payment gateway.
• Support communications — messages you send us by email.

b. Information collected automatically

• Authentication & security data — session identifiers and your IP address, used to keep you signed in, enforce one active session, and rate-limit sign-in / password-reset attempts against abuse.
• Technical & usage logs — standard server logs such as device/browser type, pages or features accessed, and timestamps, used to operate, secure, and improve the Service.
• Local storage — after you sign in, we store a session token in your browser's/app's local storage so you stay logged in. You can clear it by signing out.

c. What we do not collect

We do not access your contacts, photos, precise location, microphone, camera, SMS, or call logs, and we do not collect sensitive personal data. The mobile app is a secure viewer for your account — the market-data engine runs on our servers, not on your device.

2. How we use your information

Purpose	Data used
Create and manage your account; provide the Service and your subscription tier	Account details, payment records
Authenticate you and keep your account secure	Password hash, session & IP, OTP
Process payments and issue access	Payment records (via gateway)
Provide support and send service messages (e.g., password reset)	Email, mobile, support messages
Operate, secure, debug, and improve the Service; prevent abuse and fraud	Technical & usage logs
Comply with legal, tax, and accounting obligations	Payment records, account details

3. Legal bases

We process your information under India's Digital Personal Data Protection Act, 2023, on the basis of your consent (given at sign-up), the necessity to perform our contract with you (providing the Service you subscribed to), our legitimate uses (security, fraud prevention, service improvement), and compliance with law.

4. How we share information

We do not sell your personal data or share it for advertising. We share it only with service providers who help us run the Service, under contract and only as needed:

• Payment gateway (Razorpay) — to process payments.
• Email delivery (Hostinger) — to send verification and service emails.
• Hosting / infrastructure (Hostinger) — to host the Service.
• Legal — where required by law, court order, or to protect our rights, users, or the public.

5. Data retention

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except records we must keep for legal, tax, or accounting reasons (for example, invoice/payment records, typically retained for up to 8 years as required by law) and minimal security logs. See Account Deletion.

6. Security

We protect your data with measures including encryption in transit (HTTPS), salted password hashing, session controls, and access restrictions. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the authorities of a breach where the law requires.

7. Your rights

Subject to applicable law, you may:

• Access the personal data we hold about you (available in your in-app My profile).
• Correct inaccurate data.
• Delete your account and personal data — see Account Deletion.
• Withdraw consent at any time (this may end your access to the Service).
• Raise a grievance with our Grievance Officer (below) or the Data Protection Board of India.

8. Children

The Service is not directed to children and is intended for users aged 18 and above. We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the "Last updated" date; significant changes will be notified in the Service or by email.

10. Contact & grievance officer

For any privacy question or to exercise your rights, contact us at support@indexbreadth.com.

Grievance Officer: Lovelesh Sharma, support@indexbreadth.com, 125 Bansi Trade Center, Indore, Madhya Pradesh 452001. We aim to respond to grievances within 30 days.