Legal

Privacy Policy & Data Governance

Learn how Trading RW Private Limited collects, uses, and protects your personal information and trading credentials on stratai.live.

Last updated: October 16, 2026

1. Introduction & Overview

Trading RW Private Limited ("Trading RW", "Company", "we", "our", or "us"), a company incorporated in India, owns and operates the official website stratai.live, the Strat Ai trading intelligence terminal, and the Strat AI connector for ChatGPT and other AI assistants. Strat AI is a product of Trading RW Private Limited. This Privacy Policy outlines our commitment to safeguarding the privacy and personal data of our users ("you" or "user").

By accessing stratai.live, registering for our services, using the Strat AI connector, or making purchases on our platform, you acknowledge and agree to the terms described in this policy.

2. Information We Collect

A. Personal Information

When you register, subscribe, or contact us, we may collect information including but not limited to:

  • Full name and contact details (email address, mobile phone number)
  • Account credentials and preference settings
  • Billing and invoice information (billing name, address, tax IDs if applicable)

B. Payment & Financial Data Security

Purchases and subscriptions on stratai.live are processed securely through certified, PCI-DSS compliant third-party payment gateways, including PayU Payments Private Limited ("PayU").

Note on Payment Credentials: Strat Ai and Trading RW Private Limited do NOT collect, store, or process sensitive payment details such as complete credit/debit card numbers, CVVs, net banking passwords, or UPI PINs. All financial transactions are encrypted and directly handled by PayU's secure payment infrastructure.

C. Technical & Diagnostic Usage Data

We automatically collect technical data during platform interactions, such as IP addresses, device identifiers, browser types, operating systems, referring URLs, access timestamps, and diagnostic metric logs.

3. How We Use Your Information

We utilize collected data solely to:

  • Provide, maintain, and enhance the functionality of the Strat Ai terminal and API endpoints
  • Process payment transactions and generate automated invoices via PayU
  • Send administrative notices, security alerts, service updates, and transactional communications
  • Respond to technical customer support and billing inquiries
  • Detect, investigate, and prevent fraudulent activity or security vulnerabilities
  • Fulfill legal and regulatory compliance requirements in India

4. Disclosure & Sharing of Information

We strictly do not sell, trade, or rent personal data to third parties. Data sharing is limited to:

  • Payment Gateway Partners: Payment information required by PayU to complete billing and process refunds.
  • Infrastructure Providers: Secure hosting, database, and cloud monitoring tools operating under data processing agreements.
  • Legal & Regulatory Bodies: When mandated by law enforcement agencies, statutory requirements, or court orders under Indian jurisdiction.

5. Cookies & Tracking Technologies

We use essential functional cookies to authenticate users, maintain active login sessions, and save user interface preferences. Session analytics cookies may be used to evaluate website performance.

6. Data Security & Safeguards

We deploy robust organizational and technical measures—including TLS/SSL encryption, restricted server access, and regular security audits—to prevent unauthorized access, disclosure, or loss of information.

7. Data Retention & User Rights

We retain user profile data for as long as your account remains active or as required by statutory record-keeping laws. You have the right to access, correct, or request deletion of your account records by contacting our privacy team.

8. Strat AI Connector for ChatGPT and Other AI Assistants (MCP)

The Strat AI connector uses the Model Context Protocol (MCP) and runs at mcp-stock.stratai.live. It lets ChatGPT and other compatible AI assistants request Indian market data and analytics from Strat AI for you.

  • Sign-in and consent: You connect by signing in to your Strat AI account at auth.stratai.live and approving access on a consent screen from api-web.stratai.live. The connector asks for one permission, market:read, which allows reading market data and analytics only. The AI assistant receives a limited access token, never your password, and the connector never receives your password either.
  • What the connector receives: Each request carries a signed access token. From that token the connector uses only your Strat AI account identifier and the identifier of the connected app. It also receives the inputs the assistant sends with each tool request, such as an instrument symbol, exchange, timeframe, or price levels you ask it to check. We use these inputs to fetch and calculate the requested market data. They are not stored in the usage records described below.
  • Read-only tools: The connector's tools only read and calculate market data. They cannot place, modify, or cancel orders. They do not connect to your brokerage account and do not save trade plans. Market data comes from Strat AI's own market-data services, not from your broker account.
  • Usage records: For every tool call, including calls blocked by limits, we record your account identifier, the connected app's identifier, the tool name, the outcome (success, error, timeout, or rate-limited), how long the call took, and a timestamp. We use these records to enforce fair-use limits (currently 30 tool calls per minute and 3 simultaneous calls per account), to monitor reliability, and to prevent abuse. Usage records are deleted automatically after 90 days. Copies may also appear in our hosting providers' operational logs and are kept for those providers' standard log periods.
  • Connection records: When you approve a connection, we store a record of it: your account, the connected app, the permission granted, when it was created and last used, and a hashed (not readable) refresh token. Access tokens are valid for 15 minutes. A connection that goes unused for 30 days expires. Revoked or expired connection records are deleted about 30 days later.
  • Your AI assistant provider: Your conversations with the AI assistant are handled by its provider (for example, OpenAI for ChatGPT) under that provider's own privacy policy. Strat AI receives only the information the assistant includes in tool requests to the connector. We do not receive your chat history.
  • Disconnecting: You can disconnect Strat AI at any time in your AI assistant's settings. You can also ask us to revoke a connection or delete your connector usage records by writing to privacy@stratai.live, subject to our legal obligations. When a connection is revoked, no new access tokens are issued, and any token already issued expires within 15 minutes.

9. Contact Information

For questions or privacy concerns regarding stratai.live or the Strat AI connector, please contact: