Privacy Policy

At Connect by TRADO, operated by Windigotrade Pvt Ltd ("TRADO", "we", "us", "our") with its registered office at H. No. 207, Village Jant, Lawan, Mahendragarh-123029, Haryana, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you access or use the Connect platform at https://connect.trado.trade/ ("Platform" or "Service").

By accessing or using the Platform, you agree to the collection and use of your information in accordance with this Privacy Policy. This Policy forms an integral part of our Terms and Conditions and should be read in conjunction with them. If you do not agree to this Privacy Policy, you must discontinue use of the Platform immediately.

We reserve the right to update this Privacy Policy at any time. All modifications will take effect immediately upon being published on the Platform. Your continued use of the Platform following any such update constitutes your acknowledgment of and agreement to the revised Policy.

1. Scope & Applicability

This Privacy Policy applies to:

• All users who visit, browse, register on, or otherwise access the Connect Platform.

• All personal information collected through the Platform, including registration forms, webhook configurations, strategy submissions, support communications, and usage analytics.

• Information collected through associated channels including email, support tickets, and third-party integrations (such as exchange API connections).

This Policy does not apply to:

• Third-party platforms, including Exchanges, TradingView, MetaTrader, or any other exchange or external service. These platforms have their own independent privacy policies, and TRADO is not responsible for their data practices.

• Data collected by TRADO's main website (www.trado.trade), which is governed by a separate privacy policy.

2. Information We Collect

2.1 Information You Provide Directly

When you register for or use the Platform, we may collect the following categories of personal information:

• Account Information: Your name, email address, and any other details you provide during account registration.

• Contact Details: Phone number (if provided for support purposes).

• API Credentials: Exchange API keys (key and secret) provided by you to enable trading automation. These are encrypted and stored securely; see Section 6 for security practices.

• Strategy & Configuration Data: Webhook configurations, strategy parameters, automation settings, and any other technical data you input into the Platform.

• Communication Data: Messages, queries, feedback, or complaints you submit to us via email, the contact form, or any support channel.

2.2 Information We Collect Automatically

When you access or use the Platform, we may automatically collect certain technical and usage data, including:

• Log Data: IP address, browser type, browser version, operating system, referring URL, pages visited, time and date of visit, and time spent on pages.

• Device Information: Device type, unique device identifiers, and mobile network information.

• Usage Analytics: How you interact with Platform features — which strategies you configure, subscriptions you manage, frequency of use, and navigation patterns.

• Cookies and Similar Technologies: See Section 4 for detailed information on our cookie practices.

2.3 Information We Do NOT Collect

To be transparent about the limits of our data collection:

• We do not collect KYC documents (Aadhaar, PAN, passport, address proof) as no KYC is currently required for the Platform.

• We do not collect or store your bank account details, UPI IDs, or any payment instrument information (as the Platform is currently free of charge).

• We do not access, view, or record the contents of your trading account, balance, or transaction history beyond what is technically necessary to execute your configured automation signals.

• We do not collect Sensitive Personal Data or Information (SPDI) as defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, unless explicitly stated and consented to.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Delivery

• To create and manage your Connect account.

• To authenticate your identity and maintain account security.

• To enable and execute your webhook automations, strategy configurations, and copy trading subscriptions on your connected exchange's trading account.

• To process and respond to your support queries and communications.

3.2 Platform Improvement & Analytics

• To understand how users interact with the Platform and identify areas for improvement.

• To diagnose technical issues, debug errors, and improve system reliability.

• To analyse usage patterns and feature adoption to guide product development.

• To compile aggregate, anonymised statistical reports on platform usage (no individually identifiable data is included in such reports).

3.3 Communications

• To send you important transactional notifications related to your account, webhook activity, strategy executions, or Platform updates.

• To notify you of changes to our Terms and Conditions, Privacy Policy, or other policies.

• To send you product updates, new feature announcements, and educational content (you may opt out of non-essential communications at any time by writing to team@trado.trade).

3.4 Security & Fraud Prevention

• To monitor for and detect fraudulent activity, scams, prohibited conduct, or security threats on the Platform.

• To enforce our Terms and Conditions, including identifying users who make prohibited "assured returns" or similar misleading claims.

• To investigate and respond to potential legal violations or regulatory inquiries.

3.5 Legal & Regulatory Compliance

• To comply with applicable Indian laws and regulatory mandates.

• To respond to lawful requests from courts, government authorities, law enforcement agencies, or regulatory bodies.

• To protect the rights, property, and safety of TRADO, its users, and the public.

4. Cookies & Tracking Technologies

4.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. They allow us to recognise your device, remember your preferences, and improve your experience on the Platform.

4.2 Types of Cookies We Use

4.3 Managing Cookies

Most web browsers accept cookies by default. You can configure your browser to decline cookies or to alert you when cookies are being sent. Please note that disabling essential cookies may impair certain functionalities of the Platform.

5. How We Share Your Information

TRADO does not sell, rent, licence, or commercially trade your personal information to any third party. We may share your information only in the following limited circumstances:

5.1 Service Providers & Technology Partners

We may share information with trusted third-party vendors and service providers who assist us in operating the Platform — such as cloud hosting providers, analytics services, and email communication tools. These parties are contractually required to:

• Use your information solely for the purpose of providing services to TRADO.

• Maintain the confidentiality and security of your information.

• Not disclose your information to any other third party without TRADO's prior written consent.

5.2 Exchange API Integration

When you connect your exchange account to the Platform by providing your API keys, trade execution signals generated by your configured automations are transmitted to the exchange via their official API. Your API credentials are shared with the exchange's systems solely to execute the trades you have authorised. TRADO does not share your personal profile information with exchanges independently.

5.3 Legal Compliance & Regulatory Requests

We may disclose your personal information to:

• Courts, government agencies, law enforcement, or regulatory authorities (including SEBI, FIU-IND, or the Cybercrime Cell) when required by applicable law, court order, or legitimate regulatory investigation.

• Relevant authorities if we detect or suspect that your account has been used for fraudulent activity, money laundering, market manipulation, or promotion of scams/guaranteed return schemes — in strict compliance with our Terms and Conditions.

5.4 Business Transfers

In the event of a merger, acquisition, sale of business assets, or reorganisation of Windigotrade Pvt Ltd, your personal information may be transferred to the successor entity. We will notify you via email and/or a prominent notice on the Platform prior to any such transfer and any changes to the handling of your information.

5.5 Aggregated & Anonymised Data

We may share aggregated, anonymised, and non-personally-identifiable data (such as usage statistics or market analytics) with partners, investors, or the public for business, research, or promotional purposes. Such data cannot be used to identify individual users.

6. Data Security

We are committed to maintaining the security of your personal information. We have implemented the following security measures:

• Encryption: Exchange's API keys stored on the Platform are encrypted using industry-standard encryption protocols (AES-256 or equivalent). Data transmitted between your browser and the Platform is secured via TLS/HTTPS.

• Access Controls: Access to personal data within TRADO's systems is restricted to authorised personnel on a need-to-know basis.

• Secure Infrastructure: The Platform is hosted on enterprise-grade cloud infrastructure with physical and logical security controls.

• Monitoring: We continuously monitor our systems for security anomalies, unauthorised access attempts, and potential breaches.

Important: While we take all reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. You are solely responsible for maintaining the confidentiality of your account credentials and API keys. TRADO cannot be held liable for breaches resulting from your failure to maintain adequate security on your end. If you believe your account or API keys have been compromised, notify us immediately at team@trado.trade and revoke your API keys on the exchange immediately.

7. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. Specifically:

• Account data is retained for the duration of your account's active status and for a period of up to 3 years following account deletion or termination, as may be required under applicable Indian laws (including the IT Act and PMLA).

• Transactional and usage logs may be retained for up to 2 years for security, audit, and legal compliance purposes.

• Communication records (support tickets, emails) are retained for up to 1 year following resolution.

Upon expiry of the applicable retention period, we will securely delete or anonymise your personal information.

8. Your Rights & Choices

As a user of the Platform, you have the following rights with respect to your personal information:

To exercise any of these rights, please write to us at team@trado.trade with the subject line "Privacy Request — [Your Request Type]". We will endeavour to resolve it within 30 days.

9. Cross-Border Data Transfers

The Connect Platform is operated from India. If you access the Platform from outside India, please be aware that your personal information will be transferred to, processed, and stored in India in accordance with Indian data protection laws and standards. By using the Platform and providing us with your information, you consent to this transfer and processing.

10. Third-Party Links & Services

The Platform may contain links to third-party websites or services (e.g., Exchanges, TradingView, documentation links). TRADO is not responsible for the privacy practices or content of these third-party platforms. We encourage you to review the privacy policies of any third-party service you access through or in connection with the Platform.

11. Scam & Fraud Protection Notice

TRADO will never:

• Contact you to ask for your CoinDCX password, Connect account password, or full API secret key.

• Ask you to transfer funds to a TRADO account or representative.

• Promise or guarantee trading profits or returns in exchange for sharing your information.

• Use your personal information to solicit participation in any investment scheme.

If you receive any communication purporting to be from TRADO that requests the above, please report it immediately to team@trado.trade. It is likely a scam attempt by a third party impersonating TRADO.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Platform features, or applicable laws. All changes will be:

• Effective immediately upon publication on the Platform.

• Communicated to registered users via email and/or an in-Platform notification.

• Reflected by an updated "Last Updated" date at the bottom of this document.

Your continued use of the Platform following any update constitutes your acceptance of the revised Privacy Policy.

Contact Us

For any privacy-related queries or concerns, please contact us at: