1. Overview and Commitment
Stockmexa, operated by Zamzy Technologies ("we", "our", or "us"), is committed to safeguarding your privacy and ensuring the security of your personal data. This Privacy Policy outlines our practices concerning the collection, use, processing, and protection of information obtained through our website (stockmexa.com) and our proprietary algorithmic multi-broker trading execution cockpit.
2. Information We Collect
In order to provide low-latency parallel trade replication services across supported Indian broker platforms, we collect the following categories of information:
- Personal Identification Details: Full Name, Email Address, and Phone Number provided during account registration.
- Billing Information: Payment details processed securely through our authorized payment gateway partner, Razorpay. We do not store your complete credit card numbers, debit card numbers, or CVV codes on our servers.
- Broker API Credentials: Client IDs, API Keys, App Secrets, and TOTP seeds provided by you to authorize trade replication on your respective broker accounts (e.g., Angel One, Zerodha, Upstox, Dhan, FYERS, etc.).
- Technical and Device Metadata: IP addresses, browser specifications, login timestamps, and system diagnostics for security whitelisting and fraud prevention.
All sensitive broker API credentials, app secrets, and TOTP seeds are encrypted at rest using military-grade AES-256-GCM encryption. Your plain-text broker passwords and trading PINs are never stored or logged in plain text.
3. Purpose of Data Processing
We process your data strictly for the following purposes:
- To establish secure WebSocket and REST API connections with your configured broker accounts.
- To execute and synchronize copy-trading orders from designated Master accounts to Child accounts in sub-100ms latency.
- To authenticate and manage your subscription plans (Starter: 3 accounts @ ₹900, Pro: 10 accounts @ ₹3,000, Scale: 25 accounts @ ₹7,500).
- To comply with regulatory compliance frameworks established by SEBI and Indian stock exchanges (NSE, BSE, MCX) regarding algorithmic execution gateways.
4. Data Sharing and Third Parties
We do not sell, rent, monetize, or trade your personal or financial data to any third-party advertisers or data brokers under any circumstances.
Information is disclosed solely to the following trusted entities strictly as necessary to deliver our services:
- Payment Processors: Razorpay Software Private Limited for secure handling of subscription fees.
- Broker Gateways: Directly to the official APIs of authorized Indian brokers (Zerodha Kite, Angel One SmartAPI, Upstox, DhanHQ, etc.) via HTTPS/TLS 1.3 channels.
- Legal and Regulatory Authorities: Where mandated by Indian law or judicial court orders.
5. Cookies and Tracking
We use strictly necessary session cookies and local storage tokens (such as sd_token) to keep you authenticated in your trading dashboard. We do not employ intrusive tracking cookies or cross-site tracking pixels.
6. Data Retention and Account Deletion
You retain the right to terminate your account and wipe all stored broker credentials at any time. Upon receiving an account deletion request via no-reply@stockmexa.com, all associated broker tokens and encryption keys are permanently erased from our active databases within 48 business hours.
7. Grievance Redressal and Contact Details
In accordance with the Information Technology Act, 2000 and rules made thereunder, our Grievance Officer details are: