Privacy Policy

This Privacy Policy describes how EvenTrade (marketed as Watchlist Pro) handles information in connection with the EvenTrade Chrome extension and the website at eventrade.in (together, the "Service"). The Service is operated by the EvenTrade team. By using the Service you agree to the practices described below.

1. Scope

This policy applies to the EvenTrade browser extension, the eventrade.in website, the public watchlist share pages we host, and the support channels operated by us. It does not apply to third-party services we link to (Screener.in, TradingView, Zerodha Kite, Google, BSE, Yahoo Finance, etc.), which are governed by their own privacy policies.

2. Information We Collect

Watchlists, notes and settings. Symbols, watchlist names, notes, layout preferences and extension settings are stored in Chrome Storage on your own device. We do not receive this content unless you choose to publish a watchlist or include it in a support message.

Anonymous visitor identifier. The website and extension generate a random UUID stored in localStorage under the key eventrade_visitor_id. This identifier lets us count unique users, deduplicate share views, and link pre-install website activity to post-install extension activity. It is not tied to your name or email.

Product telemetry. We record lightweight events such as install, uninstall, sidebar opened, watchlist synced, share viewed, share opened, share copied and error pings. Each event carries the anonymous visitor identifier, the event name, a timestamp, the extension version and a coarse user-agent string. Telemetry can be disabled from the extension's settings.

Published watchlists. If you choose to publish or share a watchlist, the payload you publish — symbols, list name, description or thesis, emoji, accent colour and author handle — is uploaded to our backend and served at a public URL of the form /w/<slug>. You can revoke or delete a published watchlist at any time.

Account information. If you sign in with Google to claim a handle or use the creator dashboard, we store your verified email address, your handle, and the anonymous visitor identifiers of the devices linked to your account.

Support content. If you contact support or use the in-app assistant, we retain the messages you send, any diagnostic snapshot you attach and the assistant's responses for quality review and abuse prevention.

3. How We Use Information

We use the information described above to operate the Service: to render the public share pages and directory you create, to match holdings against published lists for the recommendation strip, to deliver the alerts you have set up, to compute aggregated product analytics (such as active users, retention, feature adoption and conversion funnels), to respond to support requests, and to detect abuse. We do not sell personal information, do not run advertising or behavioural profiling, and do not share data with data brokers.

4. Legal Bases

Where applicable law (for example the EU GDPR or the Indian DPDP Act) requires a legal basis, we rely on your consent for optional features such as publishing a watchlist or signing in; on the performance of a contract to deliver features you have asked for; and on our legitimate interest in keeping the Service secure, reliable and improving over time, balanced against your privacy interests.

5. Third-Party Service Providers

We rely on Supabase to host our Postgres database, authentication and edge functions, and on Cloudflare Workers as a serverless proxy for background tasks such as quote refreshes. Google Sign-In is used only when you choose to sign in. We query public market-data sources (Yahoo Finance, Screener.in and BSE India) server-side to resolve symbols and quotes; these requests carry symbol identifiers only and do not include personal data. The website is hosted on Lovable Cloud and the extension is distributed through the Chrome Web Store. We do not integrate Google Analytics, Mixpanel, Facebook Pixel or comparable third-party trackers.

6. Cookies and Local Storage

The website does not set advertising or tracking cookies. We use browser localStorage to keep the anonymous visitor identifier described in Section 2, a one-time flag (eventrade_visitor_migrated_to_ext) used to merge pre-install activity into your post-install identifier, and short-lived sign-in handoff tokens. Clearing site data removes all of these. The extension separately uses Chrome Storage for your watchlists and settings, which is cleared when you uninstall the extension or clear extension storage.

7. Data Retention

Locally stored watchlists and settings remain on your device until you uninstall the extension or clear its storage. Published watchlists are retained until you delete them, revoke the share, or delete your account. Telemetry events are retained for up to twelve months and are then deleted or aggregated. Account and identity records are retained while your account is active and for a short period afterwards to handle deletion requests and resolve disputes. Support tickets and assistant chat logs are retained for up to twenty-four months.

8. Your Rights

Depending on where you live, you may have the right to access, correct, export or delete personal data we hold about you, to withdraw consent, to object to certain processing and to lodge a complaint with your local data protection authority. You can delete a published watchlist from the creator dashboard, disable telemetry from the extension's settings, and request deletion of your account by emailing support. We respond to verified requests within the timelines required by applicable law.

9. International Transfers

Our backend providers operate data centres outside India. When personal data is transferred internationally, we rely on the safeguards offered by those providers, including standard contractual clauses and similar mechanisms where applicable.

10. Security

Server-side data is stored in Supabase with Row Level Security enabled, traffic is served over HTTPS, and privileged operations run through authenticated edge functions. Watchlist data on your device is protected by the security boundary of your Chrome profile. No service can guarantee absolute security; please keep your browser and operating system updated and report anything suspicious to us.

11. Children

The Service is intended for adult retail investors and is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time as the Service evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, surface a notice in the extension or on the website.

13. Contact

For questions about this policy, data access or deletion requests, or to report abuse, write to us at support [at] eventrade.in.