Privacy Policy

1.Introduction & Scope

This Privacy Policy explains how we handle personal data when you use StockYatra. It must be read together with our Terms of Use.

1. 1.1StockYatra is an educational paper-trading simulator. It uses simulated NEPSE prices and virtual money only, executes no real trades, and holds no client securities. This means the personal data we need is limited, and this policy reflects that.
2. 1.2This policy covers the StockYatra website, mobile apps and any related service (together, the "Service"). It applies to visitors, registered account holders, and anyone who contacts us.
3. 1.3"Personal data" means information that identifies you or that can reasonably be linked to you. Where this policy uses "we", "us" or "our", it means the data controller identified below.
4. 1.4If you do not agree with this policy, please do not use the Service.

2.Who We Are (Data Controller)

1. 2.1StockYatra is operated by Lacspace Corporation Pvt. Ltd. ("Lacspace"), registered in Nepal (Reg. 377566/82/83), with its registered office in Kathmandu, Nepal. Lacspace is the controller responsible for your personal data.
2. 2.2For any privacy question, request or complaint, contact us at privacy@stockyatra.com. We aim to respond within a reasonable timeframe.

3.What Personal Data We Collect

We collect only what we need to provide and improve the Service. Depending on how you use it, this may include:

1. 3.1Account details — the information you give us when you register or manage your account:
   • your name or display name;
   • your email address;
   • your phone number, only if you choose to provide it;
   • a password (stored only in a hashed form, never as plain text).
2. 3.2Profile information you choose to add, such as a photo, a short bio, or preferences and settings.
3. 3.3Virtual-portfolio and usage activity — your simulated trades, watchlists, virtual cash and coin balances, rankings, progress, and how you interact with features and educational content.
4. 3.4Device and log data collected automatically, such as:
   • device type, operating system and app version;
   • IP address and approximate, network-derived region;
   • log events, timestamps and diagnostic or crash reports.
5. 3.5Cookies and local storage on the website, and equivalent local storage on the mobile apps, used to keep you signed in and remember preferences. See our Cookie Policy.
6. 3.6Support communications — the content of messages, emails and feedback you send us, so we can help you and keep a record.
7. 3.7Optional-purchase and deposit information. If you make an optional deposit or purchase, the transaction is processed by our payment providers. We receive limited confirmation details (such as a reference, amount and status) but we do not store full card numbers or complete payment credentials.
8. 3.8We do not intentionally collect special-category or sensitive personal data through the Service, and we ask that you do not submit it.

4.How We Collect It

1. 4.1Directly from you — when you register, set up a profile, make an optional deposit, contact support, or otherwise use features that ask for information.
2. 4.2Automatically — through the app and website as you use the Service, including device and log data and cookies or local storage.
3. 4.3From providers — limited information from our service providers, such as confirmation details from a payment provider, or aggregated diagnostics from analytics and crash-reporting tools.

5.Why We Use Your Data & Our Lawful Bases

We use personal data for the purposes below, each supported by a lawful basis such as performing our contract with you, our legitimate interests, your consent, or complying with law:

1. 5.1To provide the Service — create and maintain your account, run your virtual portfolio, save your progress and deliver features you request (basis: performance of our contract with you).
2. 5.2To keep the Service secure and prevent fraud, abuse and misuse of the simulation, virtual balances and coins (basis: our legitimate interests and, where relevant, legal obligation).
3. 5.3To improve the Service — understand how features are used, fix bugs, and develop new educational content (basis: our legitimate interests).
4. 5.4To communicate with you — send service and transactional messages, respond to support requests, and notify you of important changes (basis: performance of our contract and our legitimate interests).
5. 5.5To comply with law — meet legal, regulatory, accounting and record-keeping obligations, and respond to lawful requests (basis: legal obligation).
6. 5.6For marketing — send optional updates, tips and offers where you have opted in or where permitted, subject to your right to opt out at any time (basis: consent, or our legitimate interests where the law allows).

6.Push Notifications & Marketing Communications

1. 6.1We may send push notifications about your activity, alerts you set, and important Service updates. You can control or disable push notifications in your device settings or in the app.
2. 6.2Marketing emails and messages are optional. Every marketing message includes a way to unsubscribe, and you can also opt out by emailing privacy@stockyatra.com.
3. 6.3Opting out of marketing does not stop essential service messages, such as security alerts, account notices or transaction confirmations, which are part of providing the Service.

7.Cookies & Similar Technologies

1. 7.1We use cookies and local storage on the website, and equivalent local storage in the apps, to keep you signed in, remember your preferences, and understand how the Service is used.
2. 7.2You can manage or clear cookies through your browser settings. Blocking some cookies may affect how parts of the Service work. Full details are in our Cookie Policy.

8.Analytics & Performance

1. 8.1We use privacy-respecting analytics and crash-reporting to measure performance, diagnose problems and improve the Service. Wherever possible this data is aggregated or does not directly identify you.
2. 8.2We do not use analytics for cross-site advertising or ad targeting, and we do not build advertising profiles about you.

9.How We Share Data

We do not sell your personal data. We share it only in the limited circumstances below:

1. 9.1Service providers and sub-processors — trusted vendors who help us run the Service, such as hosting, analytics, email and payment providers. They may process personal data only on our instructions, under contract, and to the extent needed to deliver their service.
2. 9.2Legal and safety — where we reasonably believe disclosure is required to comply with law, respond to a lawful request, enforce our Terms of Use, or protect the rights, safety and property of our users, the public or us.
3. 9.3Business transfer — if we are involved in a merger, acquisition, financing or sale of assets, personal data may be transferred as part of that transaction, subject to this policy continuing to protect it.
4. 9.4With your consent — where you ask us to share information, or otherwise agree to it.

10.We Do Not Sell Your Personal Data

1. 10.1We do not sell, rent or trade your personal data to third parties for money or other valuable consideration.
2. 10.2We do not share your personal data with third parties for their own independent marketing or advertising.

11.Payments, Deposits & Coins

1. 11.1StockYatra trades with virtual money only. Your simulated portfolio, virtual cash and coins have no real-world monetary value, and coins are a non-withdrawable in-app educational currency that is not redeemable for real money.
2. 11.2If you make an optional deposit or purchase, payment is handled by our payment providers. They collect and process your payment details under their own privacy terms; we receive only limited confirmation details and never store full card numbers.
3. 11.3Deposits used for optional in-app services are verified manually. We keep the transaction records we need to run this process, prevent fraud, and meet our legal and accounting obligations. See our Refund Policy for related terms.

12.International Data Transfers

1. 12.1We are based in Nepal, and our service providers may process or store data in other countries. Where personal data is transferred across borders, we take reasonable steps to ensure it remains protected.
2. 12.2Those steps include working with reputable providers and using appropriate contractual and security safeguards consistent with this policy.

13.Data Retention

1. 13.1We keep personal data only for as long as we need it for the purposes in this policy — for example, while your account is active — and for a reasonable period afterwards.
2. 13.2We may retain certain data for longer where necessary to meet legal, accounting, security or dispute-resolution obligations, after which it is deleted or anonymised.
3. 13.3When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required or permitted to retain specific records.

14.Data Security

1. 14.1We use technical and organisational measures to protect personal data, including encryption in transit, access controls, and restricting access to those who need it.
2. 14.2No method of transmission or storage is completely secure. While we work hard to protect your data, we cannot guarantee absolute security.
3. 14.3You also play a part — keep your password confidential, use a strong and unique password, and tell us promptly at security@stockyatra.com if you suspect any unauthorised access to your account.

15.Your Rights

Subject to applicable law, you have rights over your personal data, including to:

1. 15.1Exercise the following rights:
   • access — get a copy of the personal data we hold about you;
   • correction — have inaccurate or incomplete data corrected;
   • deletion — ask us to delete your personal data;
   • objection — object to certain processing based on our legitimate interests;
   • restriction — ask us to restrict processing in certain circumstances;
   • portability — receive certain data in a portable, machine-readable format;
   • withdraw consent — withdraw consent at any time where we rely on it, without affecting prior processing.
2. 15.2To exercise any of these rights, email privacy@stockyatra.com. We may need to verify your identity before acting on a request.
3. 15.3We will respond within a reasonable time. There is normally no charge, though we may decline or charge for requests that are manifestly unfounded or excessive, as the law allows.

16.Children's Privacy

1. 16.1The Service is not directed to young children, and we do not knowingly collect personal data from them. You must meet the minimum age set out in our Terms of Use to use the Service.
2. 16.2If you believe a child has provided us with personal data, contact privacy@stockyatra.com and we will take reasonable steps to delete it.

17.Automated Decision-Making & Profiling

1. 17.1We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
2. 17.2Where we use automated tools — for example, to rank simulated performance, personalise educational content, or detect abuse — these do not have legally significant consequences for you.

18.Your Choices & Account Controls

1. 18.1You can review and update much of your personal data directly in your account settings, including your profile details and preferences.
2. 18.2You can manage push notifications in your device or app settings, unsubscribe from marketing at any time, and control cookies through your browser.
3. 18.3You can delete your account at any time from within the Service or by contacting privacy@stockyatra.com; deletion is handled as described in Data Retention above.

19.Third-Party Links & Services

1. 19.1The Service may link to third-party websites, apps or resources, and may rely on third-party providers. We are not responsible for their privacy practices.
2. 19.2When you follow a link to a third-party service, or provide information to a payment provider, that party's own privacy policy governs how it handles your data. We encourage you to read it.

20.Changes to This Policy

1. 20.1We may update this Privacy Policy from time to time. The current version is always the one published at stockyatra.com/legal/privacy-policy, and the effective date at the top reflects the latest revision.
2. 20.2Where changes are material, we will notify you through the Service or by other reasonable means. Continued use after a change means you accept the updated policy.

21.How to Contact Us & Raise a Privacy Grievance

1. 21.1For any privacy question or to exercise your rights, contact us at privacy@stockyatra.com.
2. 21.2If you are unhappy with how we have handled your data or a request, you can raise a formal grievance through our Grievance & Dispute Resolution process. You may also have the right to complain to a relevant data-protection authority.