Privacy Policy

1. Summary

2. Who is responsible for your data

The “Data Fiduciary” (the party that decides how and why your personal data is used) is Akash Paikra, operating as AKQX QuantumTrade, an individual founder based in India, who runs https://akqxquantum.tech. (Company details: coming soon.) If the business is incorporated, the new company will take over this role and we will update this policy and tell you.

This policy follows the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the DPDP Rules, 2025, and, until the Rules fully apply, the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. It applies together with our Terms & Conditions.

Contact: founder@akqxquantum.tech.

3. What we collect

We do not intentionally collect your PAN, Aadhaar, bank account number, or identity documents. Your broker or exchange collects those for its own KYC.

Your two data options. You can use the market data that AKQX provides (free; provider approvals are pending, coming soon, and availability may change), or work with your own data, live or historical, by connecting your own account or, soon, importing your own files. Market data that AKQX provides is not personal data about you. Data you bring stays private to your account.

4. Why we use it, and on what basis

We use your personal data only for these purposes. Where the DPDP Act requires, we rely on your consent, which you give by a clear action (for example ticking the box at sign-up, connecting a broker, or enabling alerts) and which you can withdraw. For some purposes the law lets us rely on a “legitimate use” instead.

We do not use your personal data to make automated decisions that produce legal effects on you, and we do not use it to show third-party ads.

5. Broker API keys and tokens

Your broker API credentials are the most sensitive thing you give us, so:

• They are stored encrypted, not in plain text. The encryption key is kept in server configuration, separate from the database.
• We use them only to do what you enabled: read market or account data and place, modify and cancel orders according to your settings. We do not use them for any other purpose.
• Please create keys with trading permission only and withdrawals disabled, and restrict them by IP address where your broker supports it. We cannot move money out of your broker account with a trade-only key.
• You can disconnect a broker in the app, which removes the stored credentials from active use, and you should also revoke the key at your broker.
• Access to production systems that can decrypt credentials is limited to the operator. We do not read or share your credentials except as the law requires.

6. Who we share data with

We do not sell personal data. We share it only as needed, with:

• Your broker or exchange: orders and requests you instruct us to send, using your credentials;
• Payment gateway (coming soon), once paid plans exist: amount, plan and your contact details so it can process payments and refunds;
• Service providers (data processors) who act on our instructions: server hosting and infrastructure, e-mail and SMS delivery (for example Brevo, Twilio), Google (for sign-in), Telegram (for alerts you enable), and the AI providers that process what you type into the Strategy Builder assistant;
• Professional advisers such as lawyers and accountants, under confidentiality;
• Authorities, courts or regulators, where the law requires it or to protect rights and safety;
• A successor, if the business is incorporated, merged or sold, subject to this policy.

Where a processor handles data for us, we require appropriate security and use of the data only for our purposes. Other users never see your trading data unless you choose to share it. Data you import is private to your account and is not shown to other users.

7. Transfers outside India

Some of our providers (for example e-mail or SMS delivery, Google, Telegram and AI providers) may process data on servers outside India. Our own hosting server is located in coming soon. The DPDP Act allows transfers abroad except to countries the Government may restrict. We transfer only the data needed for the service and use providers with reasonable security safeguards.

8. Cookies and local storage

We do not use advertising or cross-site tracking cookies. We use your browser's local storage to keep you signed in and to remember interface preferences such as panel layout, theme and chart settings. This is needed for the Platform to work. Sign-in with Google may load Google's own scripts and set Google's own cookies, which Google's policy governs. You can clear storage and cookies in your browser; you will then be signed out. If we add analytics or other optional cookies, we will ask for your consent first and update this policy.

9. How long we keep data

• While your account is active: account, profile, settings and trading data, so the service works.
• After you close your account or ask for erasure: we delete or anonymise personal data within 30 days, except what we must keep by law, for example payment and invoice records for as long as tax and accounting law requires, and records needed to handle a dispute or legal claim.
• Security and access logs: kept for a minimum period required by law (reported to be at least one year under the DPDP Rules) and then deleted.
• Inactive accounts: if an account stays unused for a long time we will give you notice before deleting it.
• Broker credentials: removed when you disconnect the broker or close the account.

Closing your account does not erase records held by your broker, exchange or payment gateway; those parties keep data under their own policies.

10. Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and the parties we have shared it with;
• Correct inaccurate or incomplete data, and update it;
• Erase your personal data when it is no longer needed for the purpose, subject to legal retention;
• Withdraw consent at any time, as easily as you gave it. Withdrawing may mean we can no longer provide a feature that needs the data, and does not affect what was done before;
• Grievance redressal: complain to us and get a reply;
• Nominate another person to exercise these rights for you if you die or become unable to.

How to use them: e-mail founder@akqxquantum.tech from your registered e-mail address, saying which right you want to use. We may ask you to verify your identity first. We aim to respond within 30 days and in any case within the maximum period the law allows. Account deletion is handled through this e-mail request: write to us and we will delete your account and data as described above.

You can also change your profile, preferences, notification settings, two-factor authentication and connected brokers from inside the app.

11. Children

AKQX is for adults only. You must be at least 18 years old. We do not knowingly collect personal data of anyone under 18. If we learn that we have, we will delete it and close the account. If you believe a child has signed up, tell us at founder@akqxquantum.tech.

12. Security

We use reasonable security safeguards appropriate to the data, including:

• encrypted connections (HTTPS) between your browser and the Platform;
• hashed passwords, one-time codes and backup codes, and encrypted broker credentials and two-factor secrets;
• optional two-factor authentication, account lockout after repeated failures, and revocable sessions;
• access controls on servers and databases, network restrictions, and regular backups;
• security and audit logs.

No system is completely secure. Please use a strong, unique password, turn on two-factor authentication, and keep your own devices and broker keys safe.

13. Data breaches

If a personal-data breach occurs we will investigate and contain it quickly. Where the law requires, we will inform the Data Protection Board of India and each affected person without delay, and give the Board the detailed report within the time the DPDP Rules set (72 hours). The notice to you will say what happened, what data was involved, what we have done, and what you can do to protect yourself, including steps such as revoking broker keys.

14. AI assistant

AKQX does not offer “AI trading”: trades are placed only by the rules you create. Where we offer an AI-assisted Strategy Builder, the text you type (for example a description of a strategy) and the strategy draft being worked on are sent to an AI provider so that it can produce a response. That provider is either one we work with or, if you connect your own key, the provider you choose (for example Gemini, Groq, OpenAI or OpenRouter). These providers process the data under their own terms and may be outside India (see “Transfers outside India”). The assistant is designed not to receive your exchange or broker credentials or passwords, and you should not type them, or personal details, into it.

If you connect your own AI key, we store it encrypted, show only its last four characters, and use it only to send your requests to the provider you chose. You can remove it at any time. We do not use your personal data to train third-party models.

15. Changes to this policy

We may update this policy, for example for new features, paid plans, incorporation, or changes in law. We will change the “last updated” date and, for material changes, notify you in-app or by e-mail before they take effect. Where the law requires fresh consent, we will ask for it.

16. Grievance Officer and Data Protection Board

Please contact our Grievance Officer first with any concern about your personal data:

We acknowledge every complaint within 24 hours and aim to resolve it within 15 days of receipt. For consumer complaints about paid services we also meet the e-commerce timelines (acknowledgement within 48 hours, resolution within one month). Requests about your personal data are answered as set out in the Privacy Policy.

If you are not satisfied with our response, you may complain to the Data Protection Board of India once the Board's complaint process is operating, as the DPDP Act provides. You must first have used our grievance process.