Privacy Policy

01Who we are

This Privacy Policy explains how ClusterMicro Technologies ("we", "us") handles personal data when you use StockLearn Stock Breakout Scanner. We are the data fiduciary for that information. The policy is written to align with India's Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (the "DPDP Act").

ClusterMicro Technologies
Bengaluru – 560092, Karnataka, India
Email: contact@clustermicro.com

02What we collect

Information you give us

• Account details — your name, email address, and a password (stored only as a hashed value).
• Payment details — handled by Razorpay. We receive confirmation of a transaction, not your full card number.
• Preferences — watchlists, filters, and settings you create. Watchlists and personal settings are private to your account and are never made public unless you explicitly choose to share them.
• Correspondence — messages you send to our support address.

03What we never collect

We deliberately do not collect:

• your broker or demat login credentials or trading passwords;
• details of your actual holdings, portfolio, or trades;
• sensitive personal data such as health, religion, caste, or biometric information;

04Why we use it

We use the personal data you give us only to run the Service — to create and manage your account, give you access to features, process and confirm your subscription, remember your preferences and watchlists, provide support, and send you essential account and service notices.

05Legal basis (DPDP)

Under the DPDP Act, we process your personal data on the basis of performance of a contract — that is, to deliver the subscription Service you have signed up for and to maintain your account.

06Who we share with

We share data only with service providers who help us operate, and only as far as needed:

• Razorpay — to process subscription payments securely;
• Cloud hosting — to store data and serve the application.

We may also disclose data where the law requires it — for example to comply with a valid legal order, to enforce our Terms, or to prevent fraud or harm. We do not sell, rent, license, or monetize your personal data to advertisers, brokers, or third-party marketing companies.

Third-party services

We rely on trusted third-party providers, including cloud hosting providers and payment processors. These providers process only the information necessary to deliver the Service and are contractually required to protect it.

07Cookies

We use a small number of cookies: essential cookies that keep you logged in and make core features work, preference cookies that remember your settings, and analytics cookies that help us measure and improve usage. You can manage or block cookies in your browser settings, though disabling essential cookies will affect how the Service works.

08How we protect it

We apply industry-standard safeguards: encrypted transport over HTTPS/TLS, passwords stored using a salted hash, access limited to those who need it, and periodic security review. Payment handling is delegated to a PCI-DSS-compliant processor. No system is perfectly secure, so while we work hard to protect your data we cannot guarantee absolute security.

09How long we keep it

We keep account data while your subscription is active and for a limited period afterwards to meet legal, tax, and dispute-resolution needs, after which it is deleted or anonymised. You can ask us to delete your data sooner, subject to any retention the law requires. Aggregated, anonymised statistics that no longer identify you may be kept for product analysis.

10Your rights

Subject to the DPDP Act and applicable law, you may ask us to:

• access the personal data we hold about you;
• correct data that is wrong or incomplete; or
• delete your account and associated data.

Write to contact@clustermicro.com and we will respond within 30 days. You also have the right to raise a complaint with the Data Protection Board of India.

11International transfers

Your data is mainly stored and processed in India. Some providers may process limited data on servers outside India; where that happens we rely on appropriate contractual safeguards to keep your data protected to the standard described here.

12Children

The Service is intended only for adults aged 18 and over. We do not knowingly collect data from minors, and if we learn that we have, we will delete it. If you believe a minor has provided us data, please contact us.

13Updates

We may update this policy as the Service or the law evolves. The date at the top reflects the latest version; material changes will be highlighted where appropriate.

14Contact & grievances

For any privacy question or to exercise a right above, contact our grievance point of contact at contact@clustermicro.com.