Privacy Policy — DRAFT TEMPLATE
DRAFT TEMPLATE FOR OWNER REVIEW — not reviewed by a lawyer and not legally approved. The owner must review it with a qualified professional before relying on it or submitting it to a payment provider. Bracketed items are placeholders the owner must fill.
This static site
The public static deployment has no accounts, no sign-in, no analytics trackers and no AX server. Your browser connects directly to OKX's public market-data API; OKX sees your IP address as with any website request. If you press “Run live check” on the Data sources page, your browser also contacts Binance and Delta Exchange India's public APIs, which then see your IP address the same way. Workspace preferences are stored only in your browser's local storage.
Full-stack deployment (accounts)
When accounts are enabled (server deployment, not live yet) AX stores: your email, name, an argon2id password hash, session records (IP address and browser user-agent, for the session list you can revoke), plan/subscription and payment records (Razorpay payment ids, amounts, status — never card or UPI details, which stay with Razorpay), support tickets you submit, and audit events. Login-attempt and support records keep only salted hashes of IP addresses.
Retention: [OWNER TO SET, e.g. sessions 7 days after expiry; audit logs 1 year; billing records as required by Indian tax law]. You can delete your account from Account settings → Delete account (password required); this cancels any recurring Razorpay subscription and deletes your sessions, preferences, layouts, watchlists, drawings, subscriptions, payment rows and receipts. [OWNER TO REVIEW: Indian tax law may require keeping invoice records — decide retention before launch.] Processors: Razorpay (payments), [hosting provider], [SMTP email provider when configured — receives your email address and the link being sent], [AI provider when configured — receives market snapshots and your question, never your email]. Contact: [SUPPORT EMAIL].