🔒 Privacy Policy
Learn how StockFaves protects your privacy, secures session tokens, and safeguards broker API credentials.
1. Information We Collect
StockFaves collects only the minimum necessary information required to authenticate your access and provide algorithmic screener capabilities:
- Google OAuth Identity: Basic profile info (Name, Email address, and Profile avatar) provided securely via Google Sign-In protocol to manage your account whitelist and authorization status.
- Angel One SmartAPI Session Tokens: When you connect your Angel One account for trade execution, your session tokens are held in ephemeral, encrypted in-memory session states strictly for order execution.
- Technical Telemetry: Anonymized HTTP logs, IP addresses, and browser user-agents utilized strictly for system security and DDoS protection.
2. How We Use Your Information
3. Zero Permanent Storage of Financial Credentials
We adhere to strict zero-knowledge security standards for your financial accounts:
- We NEVER store your Angel One MPIN, trading passwords, TOTP secret seeds, or Demat account passwords on disk.
- We NEVER have access to your bank account credentials, UPI PINs, or funds withdrawal capabilities.
- All order requests are signed and dispatched through ephemeral session JWTs that automatically expire upon session logout.
4. Cookies & Session Storage
StockFaves utilizes HTTP-only, secure authentication cookies solely to maintain your signed-in state across page reloads. We do not embed third-party advertising cookies, marketing tracking pixels, or cross-site tracking scripts.
5. Data Retention & Deletion Rights
You retain total control over your information. You may request immediate deletion of your authorized account profile and session records at any time by contacting our support team at redmondsoft@gmail.com.