1. Who we are
Optwise Technologies Private Limited (CIN U62013ME2026PTC476154), registered office: Nanded, Maharashtra, India — the data fiduciary for the personal data described here.
2. What we collect, and why
Contact and demo requests
Name, work email address, organisation and role, and anything you write in the message. Purpose: to respond to your enquiry and arrange a demo. Lawful basis: your consent, given when you submit the form.
Platform accounts
Login email, authentication tokens, plan and billing status. Purpose: to provide the service you subscribed to. Lawful basis: performance of the contract with you.
Security and operational logs
IP address, request timestamps, user agent and error traces. Purpose: securing the service and diagnosing faults. Lawful basis: our legitimate use in operating the platform securely.
We do not collect positions, portfolio holdings or trading activity. Every subscriber sees the same screen. The product holds no risk profile for anyone.
3. Retention
- Security logs: 180 days, then deleted.
- Contact enquiries: until the enquiry is closed, or until you ask us to erase them, whichever is sooner.
- Account data: for the life of the account and as long afterwards as tax and company law require us to keep billing records.
4. Your rights
Under the DPDP Act 2023 you may:
- Access — ask what personal data we hold about you and how it is used.
- Correction — ask us to correct or complete inaccurate data.
- Erasure — ask us to delete your personal data where we no longer need it for the purpose it was collected.
- Withdraw consent — at any time, for processing based on consent, without affecting what was done before.
- Grievance — raise a complaint with our Grievance Officer, and if unresolved, with the Data Protection Board of India.
5. Grievance Officer
Grievance Officer, Optwise Technologies Private Limited
Email: onkar@optwise.in · Phone: +91 95038 64627
Registered office: Nanded, Maharashtra, India
We acknowledge every request within 7 days and resolve it within 30 days of receipt, as the Act requires. Identity may be verified before data is released or erased.
6. Sub-processors
We use the following categories of service provider, each bound to process data only on our instructions:
- Hosting and compute: Google Cloud, Mumbai region (asia-south1).
- Database: managed database hosting in the same region.
- Payments: a payment processor handles card details directly. We never see or store your card number.
- Messaging: Telegram, for subscribers who opt into structure-change alerts.
- Model provider: a hosted language-model service powers the analyst feature. Prompts contain market data, not your personal data.
Personal data is stored in India. Where a provider processes data outside India, it does so under contractual safeguards.
7. Cookies
The site uses only the cookies needed to keep you signed in and to protect forms from abuse. There is no advertising tracking and no cookie banner because none is required.
We test the wording of the home page. Your browser stores a random letter locally to keep the wording you see consistent between visits. That letter is not a cookie, it identifies nobody, and it never leaves your device except when you send us an enquiry, where it tells us which wording you read.
8. Security
We encrypt data in transit with TLS. The hosting provider encrypts data at rest. Access to production systems is limited to named staff with multi-factor authentication.
9. Changes
When this policy changes, the date at the top changes with it. Material changes to how we use your data will be notified to account holders by email before they take effect.