Who we are
PropVexis (the website at propvexis.com and the app at app.propvexis.com) is operated by Anish Shejawale, a sole proprietor based in Bengaluru, Karnataka 560078, India. Under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the data fiduciary for the personal data you give us. Questions about this policy: privacy@propvexis.com.
What we collect
Your account
- Your name, email address and profile picture. If you sign in with Google, we also get your Google account ID.
- If you sign up with email, a scrypt hash of your password. We never store the password itself.
- When you created the account and last signed in, whether your email is verified, and how far you got in onboarding.
Your trading data
- The trades you sync, import or enter, such as symbol, direction, size, prices, times, profit and loss, and commission.
- Account details such as login number, broker server, balance, and the prop-firm challenge rules you configure.
- Payouts you record, plus the notes, tags and journal entries you write.
- Price candles around your trades, used for trade replay. These are market data, not personal data.
Broker connections
To sync a broker account, we store what the platform needs. That means your login and server, plus one of these:
- An MT5 investor (read-only) password.
- cTrader access tokens.
- A TradeLocker email and password.
All of these are encrypted before they reach the database, and they are never shown back to you or anyone else. The Security page explains how.
Technical data
- Our servers log requests, including your IP address, to keep the service secure and to debug problems.
- When the app hits an error, an error report is sent to our monitoring provider. It is configured not to attach personal data by default.
Why we use it
- To run the service. That covers signing you in, syncing your trades, calculating your analytics and prop-firm rules, and sending the emails the service needs, such as verification and password reset.
- To keep it secure. That covers rate-limiting sign-in attempts, detecting abuse, and fixing errors.
You consent to this processing when you create an account. We do not sell your data, share it with advertisers, or use it for advertising. We do not send marketing email without asking.
Cookies and tracking
The app sets one cookie, an httpOnly session cookie that keeps you signed in for up to 30 days. There are no advertising or analytics trackers, either in the app or on this website, and this website sets no cookies at all. If you choose “Sign in with Google”, Google's own sign-in script runs on the login page, and Google's privacy policy covers it.
Who processes your data for us
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting the app and its database (EC2), encrypted backups (S3), sending email (SES), storing server secrets (SSM), hosting this website (Amplify) | Mumbai, India (ap-south-1). This website is served from Amplify's global CDN. |
| “Sign in with Google”, only if you use it | Global | |
| Sentry | Error monitoring | Outside India |
| Your broker's platform: MetaQuotes (MT5), Spotware (cTrader) or TradeLocker | Reading your trade history when you connect an account | Set by the platform |
| Razorpay | Payments, once billing starts. Nothing is charged today. | India |
Our data and backups live in India. Google, Sentry and your broker's platform may process data outside India, as the DPDP Act permits.
How long we keep it
- While your account exists, we keep your account and trading data so the journal works.
- Disconnecting a broker account deletes its stored password or tokens straight away.
- Deleting a trading account in the app deletes its trades and credentials.
- Backups are kept for up to 90 days and then expire automatically. Deleted data disappears from them on that schedule.
Deleting your account
The app doesn't have a self-serve “delete my account” button yet. Until it does, email privacy@propvexis.com from the address on your account and we will delete your account and all its data. We'll confirm when it's done.
Your rights
Under the DPDP Act you can:
- ask what personal data we hold about you and how we process it;
- correct or update it;
- have it erased, and withdraw your consent, which means closing your account;
- nominate someone to exercise these rights if you die or become incapacitated;
- raise a grievance with us, and if we don't resolve it, complain to the Data Protection Board of India.
Email privacy@propvexis.com to use any of these. We aim to respond within 30 days.
Grievance officer
Anish Shejawale, privacy@propvexis.com, Bengaluru, Karnataka 560078, India.
Children
PropVexis is for adults. You must be 18 or older to use it, and we don't knowingly collect data from anyone younger.
Changes
If this policy changes, we'll update the date at the top. If a change materially affects how we use your data, we'll email you before it takes effect.