Privacy Policy

This policy explains what personal data Technobot Technolgies Pvt Ltd collects when you use MomentumScore, why, who it is shared with, and the choices and rights you have. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

1. Who is responsible

Technobot Technolgies Pvt Ltd operates MomentumScore and decides how your personal data is used (the "Data Fiduciary"). Contact details are at the end of this policy.

2. What we collect

Data you give us

• Account: name, email address and password (stored only as a one-way hash). If you sign in with Google, we receive your name, email address and a Google account ID.
• Contact and alerts (optional): mobile number for WhatsApp alerts; for Telegram alerts, the bot token of the bot you create and your Telegram chat ID.
• Payments: the plan, amount, date, payment method and transaction reference. Card, UPI and bank details are entered on our payment partner's secure page; we never see or store your full card number, CVV, UPI PIN or net-banking password.
• Your work in the app: strategies, settings, portfolios, notes and backtest results you create.
• Support: messages and screenshots you send through Help & Requests, email or live chat, and the questions you ask the in-app AI help assistant.
• Broker Connect (optional): the broker name, your broker client ID and a label for each account you add, so orders go only to the account you chose.

Data collected automatically

• Usage records such as log-in times, backtests run and features used, to apply plan limits and improve the Service.
• Visit statistics, counted on our own server (no outside analytics service): the pages viewed, the website or link you came from, and whether you used a phone or a computer. Visitors who are not logged in are counted with an anonymous code that changes every day; we do not store their IP address for this. Kept for up to 180 days.
• Technical data such as IP address, browser and device type, recorded in security and error logs and used to prevent fraud and misuse (for example of referral rewards).
• Cookies and browser storage: a session cookie to keep you logged in, and small preferences (such as light or dark theme) kept in your browser. Our security and chat providers may set their own cookies. We do not use advertising cookies.

What we do not collect

With MomentumScore Connect, your broker password, API keys, secrets and access tokens stay encrypted on your own PC and are never sent to our servers. Your holdings, positions and P&L are read by the helper on your PC and shown in your browser for your own view; we do not sell, share or pool them.

3. Why we use it

• To create and run your account and provide the features of your plan.
• To process payments, activate plans, issue invoices and keep the records the law requires.
• To send service messages you need (email confirmation codes, password resets, plan expiry and renewal notices, rebalance reminders) and alerts you turned on.
• To answer support requests and AI assistant questions.
• To keep the Service secure, prevent fraud and abuse, fix errors and improve it.
• To meet legal obligations and respond to lawful requests from authorities.

We process your data on the basis of your consent (given when you sign up or turn a feature on) and for the legitimate uses the law allows, such as providing the service you asked for and meeting legal requirements. We do not sell your personal data.

4. Who we share it with

We share personal data only with service providers that help us run the Service, only as much as they need, and under confidentiality obligations:

• Hosting and security (our servers, and Cloudflare for network protection).
• Our payment gateway partner, to process payments and refunds.
• Email and messaging providers (email delivery, WhatsApp gateway, Telegram) for messages you receive.
• Google, if you choose "Continue with Google".
• Anthropic (Claude), which answers questions you type into the AI help assistant. Only your question and the chat are sent, not your account or portfolio data.
• Tawk.to, if you use live chat.
• Authorities, courts or regulators when the law requires it, or to protect our rights and users' safety.

Some of these providers may store or process data outside India. Where they do, we use providers with appropriate safeguards and only as permitted under Indian law.

5. How long we keep it

We keep your data while your account is active and for as long as needed for the purposes above. When you delete your account, we delete or anonymise your personal data within 30 days, except records we must keep by law (for example payment and tax records, usually up to 8 years) or to resolve disputes.

6. How we protect it

We use reasonable security practices, including encrypted connections (HTTPS), hashed passwords, access controls for staff, and encryption of sensitive tokens. No system is completely secure; if a breach affects your data, we will inform you and the authorities as the law requires.

7. Your rights and choices

• Access and correction: see and update your details on your Account page, or ask us for a summary of the data we hold about you.
• Erasure: ask us to delete your account and personal data.
• Withdraw consent: turn off WhatsApp, Telegram or email alerts in your account at any time, or withdraw consent altogether by deleting your account. This does not affect processing already done.
• Grievance and nomination: raise a complaint with our Grievance Officer, and nominate a person to exercise your rights in case of death or incapacity.
• If you are not satisfied with our response, you may approach the Data Protection Board of India.

To use any of these rights, write to [email protected] from your registered email address.

8. Children

The Service is for adults (18 and over). We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy. If the change is important, we will tell you in the app or by email before it takes effect.

10. Contact and Grievance Officer

We acknowledge privacy requests and complaints within 2 working days and respond within 30 days.

Last updated 14 October 2026.