Privacy Policy

Introduction

This Privacy Policy describes how BharatStock ("BharatStock", "we", "our", "us") collects, uses, shares, protects, and otherwise processes your information and personal data through our website https://bharatstockapi.com/ and the BharatStock API (collectively, the "Platform"). BharatStock is a developer-facing REST API for Indian stock-market data; it is not a marketplace, and we do not sell physical goods. You can browse parts of the Platform without registering. Your personal data is primarily stored and processed in India. By using the Platform, creating an account, or availing any paid service, you agree to this Privacy Policy and our Terms of Use, and to processing in accordance with the laws of India (including applicable data-protection and privacy law). If you do not agree, please do not use the Platform.

Information we collect — we limit collection to what the Platform actually needs:

• Account details you provide at sign-up or sign-in — your email address, a password (stored only as a secure hash), and, if you sign in with Google or GitHub, the basic profile identifier those providers return.
• Optional business / usage profile you may provide to help us tailor plans and meet our data-source obligations — such as how you use the API, your intended audience, an estimated number of end-users, an entity name, a business domain, and (optionally) a GSTIN. These fields are optional and you can leave them blank.
• API usage and access records generated when you call the API — principally per-day request counts per API key and the client IP address(es) your key is called from. We use these to enforce rate limits, operate the service, and detect abuse. We do not log the full content of your individual API requests as a durable per-request record.
• Support communications you send us (for example, feedback or emails to support).

We do not collect biometric data, and we do not store your full card or bank-account credentials — payment details are handled directly by our payment processors / Merchant-of-Record partners (see Sharing, below). If anyone claiming to be BharatStock asks you for a card PIN, net-banking password, or OTP, do not share it — we never ask for these.

How we use your data — to create and operate your account and issue API keys; to provide, maintain, and secure the Services; to enforce rate limits and plan entitlements and to detect, prevent, and investigate abuse, fraud, or violations of our Terms; to process payments and manage subscriptions (via our payment partners); to respond to your support requests and send you service and account communications; to comply with legal, regulatory, and data-licensing obligations; and to produce aggregated, non-identifying analytics about usage of the Services. We use your email for essential service and account messages; any non-essential/marketing email is opt-out.

Sharing — we do not sell your personal data. We share it only as needed to run the Services: with payment processors and authorised Merchant-of-Record resellers (such as Paddle, Lemon Squeezy, Razorpay, PhonePe, or Cashfree) to take payments and manage subscriptions, subject to their own privacy policies; with infrastructure and service providers (such as hosting, database, email-delivery, and bot-protection providers) that process data on our behalf under appropriate safeguards; and with authentication providers (Google, GitHub) if you choose to sign in with them. We may disclose personal data to government or law enforcement agencies, or other parties, where we reasonably believe disclosure is necessary to comply with law or legal process, to enforce our Terms, or to protect the rights, property, or safety of BharatStock, our users, or the public.

Security Precautions- To protect your personal data from unauthorised access or disclosure, loss or misuse we adopt reasonable security practices and procedures. Once your information is in our possession or whenever you access your account information, we adhere to our security guidelines to protect it against unauthorised access and offer the use of a secure server. However, the transmission of information is not completely secure for reasons beyond our control. By using the Platform, the users accept the security implications of data transmission over the internet and the World Wide Web which cannot always be guaranteed as completely secure, and therefore, there would always remain certain inherent risks regarding use of the Platform. Users are responsible for ensuring the protection of login and password records for their account.

Data Deletion and Retention — you can delete your account from the account settings in your dashboard, or by writing to us at the contact address below; doing so deactivates your account and its API keys and cancels any active paid subscription. We may delay or decline deletion where we must retain data to resolve a pending dispute or claim, or to comply with a legal or data-licensing obligation. We retain personal data only for as long as needed for the purpose it was collected or as required by law. In particular, API usage and access records (per-day request counts and client IP addresses) are pruned on a rolling basis and are not kept beyond approximately thirteen (13) months, and API keys are stored only as a secure hash (never in plaintext). We may retain limited data longer where necessary to prevent fraud or abuse, meet a legal or compliance requirement, or maintain records of paid transactions, and we may keep aggregated, non-identifying data for analytics.

Your Rights- You may access, rectify, and update your personal data directly through the functionalities provided on the Platform.

Consent- By visiting our Platform or by providing your information, you consent to the collection, use, storage, disclosure and otherwise processing of your information on the Platform in accordance with this Privacy Policy. If you disclose to us any personal data relating to other people, you represent that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy. You, while providing your personal data over the Platform or any partner platforms or establishments, consent to us (including our other corporate entities, affiliates, lending partners, technology partners, marketing channels, business partners and other third parties) to contact you through SMS, instant messaging apps, call and/or e-mail for the purposes specified in this Privacy Policy. You have an option to withdraw your consent that you have already provided by writing to the Grievance Officer at the contact information provided below. Please mention “Withdrawal of consent for processing personal data” in your subject line of your communication. We may verify such requests before acting on our request. However, please note that your withdrawal of consent will not be retrospective and will be in accordance with the Terms of Use, this Privacy Policy, and applicable laws. In the event you withdraw consent given to us under this Privacy Policy, we reserve the right to restrict or deny the provision of our services for which we consider such information to be necessary.

Changes to this Privacy Policy- Please check our Privacy Policy periodically for changes. We may update this Privacy Policy to reflect changes to our information practices. We may alert / notify you about the significant changes to the Privacy Policy, in the manner as may be required under applicable laws.

Contact us:

Email: [email protected] Time: Monday - Friday (9:00 - 18:00)