Privacy Policy

This Privacy Policy describes how EvenTrade (marketed as Watchlist Pro) handles information in connection with the EvenTrade Chrome extension and the website at eventrade.in (together, the "Service"). The Service is operated by the EvenTrade team ("EvenTrade", "we", "us" or "our"). By accessing or using the Service you acknowledge that you have read and understood this policy and agree to the practices described below and to our Terms of Service. If you do not agree, please do not use the Service. This policy may reference categories of service providers and tools; the specific providers we use may change over time without changing the substance of the protections described here.

1. Scope

This policy applies to the EvenTrade browser extension, the eventrade.in website, the public watchlist share pages we host, and the support channels operated by us. It does not apply to third-party services we link to (Screener.in, TradingView, Zerodha Kite, Google, BSE, Yahoo Finance, etc.), which are governed by their own privacy policies.

2. Information We Collect

Watchlists, notes and settings. Symbols, watchlist names, notes, layout preferences and extension settings are stored in Chrome Storage on your own device. We do not receive this content unless you choose to publish a watchlist or include it in a support message.

Anonymous visitor identifier. The website and extension generate a random UUID stored in localStorage under the key eventrade_visitor_id. This identifier lets us count unique users, deduplicate share views, and link pre-install website activity to post-install extension activity. It is not tied to your name or email.

Product telemetry. We record lightweight events such as install, uninstall, sidebar opened, watchlist synced, share viewed, share opened, share copied and error pings. Each event carries the anonymous visitor identifier, the event name, a timestamp, the extension version and a coarse user-agent string. Telemetry can be disabled from the extension's settings.

Published watchlists. If you choose to publish or share a watchlist, the payload you publish — symbols, list name, description or thesis, emoji, accent colour and author handle — is uploaded to our backend and served at a public URL of the form /w/<slug>. You can revoke or delete a published watchlist at any time.

Account information. If you sign in with Google to claim a handle or use the creator dashboard, we store your verified email address, your handle, and the anonymous visitor identifiers of the devices linked to your account.

Support content. If you contact support or use the in-app assistant, we retain the messages you send, any diagnostic snapshot you attach and the assistant's responses for quality review and abuse prevention.

3. How We Use Information

We use the information described above to operate, maintain, secure and improve the Service: to render the public share pages and directory you create, to match holdings against published lists for the recommendation strip, to deliver the alerts you have set up, to compute aggregated product analytics (such as active users, retention, feature adoption and conversion funnels), to respond to support requests, to enforce our Terms of Service, and to prevent, detect and address fraud, abuse, security incidents and other harmful or unlawful activity. As our business and features evolve, we may use information for related purposes consistent with this policy and applicable law. We do not sell personal information, do not engage in cross-context behavioural advertising, and do not share data with data brokers.

Aggregated and de-identified data. We may create aggregated, statistical or de-identified information that does not identify you, and we may use and disclose such information for any lawful purpose, including analytics, research, benchmarking, and improving and promoting the Service. We commit not to attempt to re-identify de-identified data except as permitted by law to test our own de-identification.

4. Legal Bases

Where applicable law (for example the EU GDPR or the Indian DPDP Act) requires a legal basis, we rely on your consent for optional features such as publishing a watchlist or signing in; on the performance of a contract to deliver features you have asked for; and on our legitimate interest in keeping the Service secure, reliable and improving over time, balanced against your privacy interests.

5. Third-Party Service Providers

We rely on reputable third-party service providers to operate the Service, including cloud and database hosting, authentication and serverless compute providers (such as, at the date of this policy, Supabase and Cloudflare), website hosting and content delivery providers, and payment processors for any paid features. The specific providers may change over time. These providers process information only on our behalf and under obligations of confidentiality and security. Google Sign-In is used only when you choose to sign in. We query public market-data sources (such as Yahoo Finance, Screener.in, BSE India and NSE) server-side to resolve symbols and quotes; these requests carry symbol identifiers only and do not include personal data. The extension is distributed through the Chrome Web Store, which is governed by its own terms. We do not integrate advertising networks or behavioural third-party trackers such as Google Analytics for Advertising, Mixpanel with advertising enabled, or Facebook Pixel.

6. When We Disclose Information

We do not sell your personal information. We may disclose information: (a) to the service providers described above who process it on our behalf; (b) when you choose to make it public (for example, by publishing a watchlist); (c) to comply with any applicable law, regulation, legal process, subpoena, court order or lawful request by a public or governmental authority, including outside your country of residence; (d) to enforce our Terms of Service, or to protect the rights, property, safety or security of EvenTrade, our users or the public, or to prevent or investigate fraud, abuse or security incidents; and (e) with your consent or at your direction. We may disclose the minimum information reasonably necessary for these purposes and are not required to notify you where notice is prohibited or impractical.

7. Business Transfers

If we are involved in a merger, acquisition, financing, corporate reorganisation, sale of assets, bankruptcy, or similar transaction, or in negotiations for one, information we hold may be transferred or disclosed to the counterparties, their advisers, and the successor entity as part of that transaction, subject to reasonable confidentiality protections. The successor may continue to use the information as described in this policy or a successor policy.

8. Cookies and Local Storage

The website does not set advertising or tracking cookies. We use browser localStorage to keep the anonymous visitor identifier described in Section 2, a one-time flag (eventrade_visitor_migrated_to_ext) used to merge pre-install activity into your post-install identifier, and short-lived sign-in handoff tokens. Clearing site data removes all of these. The extension separately uses Chrome Storage for your watchlists and settings, which is cleared when you uninstall the extension or clear extension storage.

9. Data Retention

Locally stored watchlists and settings remain on your device until you uninstall the extension or clear its storage. Published watchlists are retained until you delete them, revoke the share, or delete your account. Telemetry events are retained for up to twelve months and are then deleted or aggregated. Account and identity records are retained while your account is active and for a short period afterwards to handle deletion requests and resolve disputes. Support tickets and assistant chat logs are retained for up to twenty-four months. We may retain information for longer where required by law, or where reasonably necessary to resolve disputes, enforce our agreements, or protect our legal rights.

10. Your Rights

Depending on where you live, you may have the right to access, correct, export or delete personal data we hold about you, to withdraw consent, to object to certain processing and to lodge a complaint with your local data protection authority. You can delete a published watchlist from the creator dashboard, disable telemetry from the extension's settings, and request deletion of your account by emailing support. We respond to verified requests within the timelines required by applicable law.

11. International Transfers

Our service providers may operate data centres outside India. When personal data is transferred internationally, we rely on the safeguards offered by those providers, including contractual and organisational measures such as standard contractual clauses and similar mechanisms where applicable. By using the Service, you understand that your information may be processed in countries whose data-protection laws may differ from those of your country of residence.

12. Security and No Guarantee

We implement reasonable technical and organisational measures designed to protect information, such as row-level access controls on server-side data, encryption in transit over HTTPS, and privileged operations that run through authenticated functions. Watchlist data on your device is protected by the security boundary of your browser profile. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee the absolute security of any information. To the maximum extent permitted by applicable law, we are not liable for any unauthorised access to, alteration of, or loss or disclosure of information that occurs despite our reasonable measures, including as a result of factors beyond our reasonable control. You are responsible for keeping your device, browser and credentials secure and for reporting anything suspicious to us.

13. Children

The Service is intended for adult retail investors and is not directed at children under the age of 18 (or the minimum age required to consent to data processing in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take reasonable steps to delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time as the Service, our practices, or applicable law evolve. When we make changes, we will update the "Last updated" date above and, where appropriate, provide additional notice in the extension or on the website. Changes are effective when posted unless a later effective date is stated. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy. If you do not agree, you must stop using the Service.

15. Contact

For questions about this policy, data access or deletion requests, or to report abuse, write to us at support [at] eventrade.in.