Privacy Policy

Hum kaun hain

The Portfolio Brief ko The Portfolio Brief AI Ltd chalati hai — Dubai International Financial Centre mein registered company (registered no. 13535; commercial licence CL13535), address: IH-00-01-01-OF-01, Level 1, Innovation One, Dubai International Financial Centre, Dubai, United Arab Emirates. Is page par bataye gaye personal data ki data fiduciary The Portfolio Brief AI Ltd hai. Global Tea Hub ek brand name hai jo hum use karte hain; ye alag company nahi hai.

Hum ek chhoti team hain, invitation-only pilot chala rahe hain.

Indian-jurisdiction Grievance Officer: Anshul Kumar Singh (Founder & Grievance Officer), grievance@globalteahub.com. Hum 30 din ke andar grievance ka response dete hain.

Hum kya collect karte hain

Bas wahi data jo aapka daily brief bhejne ke liye chahiye:

• Authentication: aapka email address (Supabase magic link ya one-time code se).
• Portfolio: onboarding ke time aap jo stock symbols batate hain.
• Preferences: language (English ya Hinglish), brief delivery time, aur channel toggles (email, Telegram).
• Engagement: kaunse briefs send hue, kholay gaye, click hue, aur aapne web par kitna aur kitni der padha — delivery health, first-brief experience, aur brief behtar banane ke liye.
• Telegram: Telegram username + chat ID, agar aap Telegram link karte hain delivery ke liye.

Kyun collect karte hain

Bas aapka daily brief banane aur deliver karne ke liye, primary filings ko cite karne ke liye, aur aapke account ke chhote features ke liye: holdings, settings, aur (jaldi hi) ask-and-answer.

Hum aapka portfolio kisi outside party ko bechte / rent karte / share karte nahi — sirf neeche listed sub-processors ke saath. Aapke portfolio ko trading decisions, buy / sell recommendations, ya kisi aur customer ke models train karne ke liye use nahi karte.

Kitna time rakhte hain

Account active rahega tab tak account row rakhte hain. Settings se delete karne par row turant soft-delete ho jata hai aur briefs 24 ghante ke andar ruk jaate hain. Uske baad data 7 din mein permanently purge ho jata hai. Ye grace window credential compromise aur accidental clicks ke liye protection hai.

Do exceptions, DPDP-2023 §17 ke under: (a) operational audit logs, security-incident response ke liye §8(5) reasonable-security-safeguards ke under rakhte hain; (b) public filings (BSE/NSE/news) jo humne ingest kiye — woh personal data nahi hai aur baaki users ke brief ke liye serve karte hain.

Data kisko share karte hain

Neeche listed sub-processors ke saath. Har ek aapke data ka chhota slice handle karta hai, DPDP-2023 §16 cross-border transfer ke under contractual basis ke saath:

• Supabase (United States) — authentication: aapka email + session token rakhta hai. Standard contractual safeguards.
• Resend (United States) — transactional email: brief delivery ke liye aapka email + content receive karta hai.
• Telegram (Telegram FZ-LLC, UAE) — bot delivery: agar aap opt in karte hain to chat ID + brief content receive karta hai.
• OpenAI (United States) — sirf embeddings MVP par; portfolio content nahi bheja jata.
• Anthropic (United States) — synthesis + brief generation: brief banate time document text + portfolio symbols receive karta hai.
• DigitalOcean (Bangalore, India) — hosting: aapka account row, briefs, aur event subscriptions yahan stored hain.

Lawful basis

DPDP-2023 §7 ke under legitimate-use consent ke basis par data process karte hain. Sign up karke aap upar describe kiye gaye specific purpose (daily brief deliver karna) ke liye consent dete hain. Aap kabhi bhi Settings se ya Grievance Officer ko email karke consent withdraw kar sakte hain.

Cookies aur local storage

Ek HttpOnly session cookie (Supabase manage karta hai) authentication ke liye use karte hain. Browser localStorage chhote UI preferences (language toggle, etc.) ke liye. Third-party trackers, analytics cookies, ya advertising cookies use nahi karte.

Aapke rights

DPDP-2023 §11 ke under aapko ye rights hain:

• Apna data dekhne aur download karne ka — Settings mein Export My Data button ek JSON file deta hai.
• Account aur saara data delete karne ka — Settings mein Delete My Account button deletion flow start karta hai.
• Email ke liye consent withdraw karne ka — kisi bhi brief mein Unsubscribe link click kariye.
• Grievance Officer ko grievance file karne ka: grievance@globalteahub.com.
• Agar 30 din mein grievance resolve nahi hota, aap DPDP-2023 §13(1) ke under Data Protection Board of India se contact kar sakte hain.

Agar kuch galat hota hai (breach notification)

Agar hum aapke account ko affect karne wala personal-data breach discover karte hain, hum Data Protection Board aur aapko 72 ghante ke andar notify karenge — DPDP-2023 §8(6) ke under. Hum bataenge kya hua, kaunsa data affected hai, hum kya kar rahe hain, aur aap (agar zaroori ho) kya kariye.

Policy updates

Har Privacy version bump par sub-processor list refresh karte hain. Jab koi sub-processor add hota hai, retention change hota hai, ya purpose change hota hai — hum email karenge aur new version is page par post kar denge. Upar Last updated date current version track karta hai.

Children

The Portfolio Brief 18 saal se kam users ke liye nahi hai. Sign up karke aap confirm karte hain ki aap 18+ hain aur pilot ke duration ke liye India ke resident hain. Hum minors ka data knowingly process nahi karte.

Contact

The Portfolio Brief AI Ltd — Grievance Officer: Anshul Kumar Singh — grievance@globalteahub.com