Privacy Policy
This is a placeholder while we finalise the full policy with counsel. Last updated 2 July 2026.
calmm helps traders read the market — and that only works if you trust us with your data. This page explains, in plain language, what we collect and why. The definitive version will replace this text before public launch.
§1·What we collect
Account details you give us (name, email), the trading statements you upload or let us fetch, your questions to Alpha, and basic usage data. We do not ask for your PAN, your bank details, or your broker password, and we never hold them. We collect only what calmm needs to read your own trading back to you and keep your account working.
§2·How we use it
To run the product — rebuilding your trades, producing your report, answering your questions about it, and keeping the service secure. We do not sell your personal data.
§3·How your statements reach us
Two ways, both your choice. You can upload your tradebook and P&L statement directly. Or you can authorise calmm to find your broker's statement emails for you, in which case we search your inbox only for those messages and read only their attachments — we do not read the rest of your mail, we do not store message contents, and we never send anything from your account. You can revoke that access from your Google account or disconnect it in Settings at any time. calmm is read-only by design: it cannot place, modify or cancel orders, and cannot move your money.
§4·Who we share with
Only the service providers that make calmm run — our hosting, database, email and product-analytics providers — and only to the extent they need to do their job. Your statements and the figures computed from them are never sent to our analytics provider. We do not sell your personal data, and we do not share it for advertising. We may disclose data where the law requires it.
§5·How we protect it
Data is encrypted in transit and at rest, access is restricted on a need-to-know basis, and we retain data only as long as it is useful for the purposes above or required by law.
§6·Your rights
You can access, correct, export, or delete your personal data at any time — deleting your account is a button in Settings, not a support request. When you delete, your statements and everything we computed from them are removed and your email address is anonymised. A minimal record that the account existed is retained because financial regulation requires it; it holds no trading data.
§7·Signals we use to stop fake accounts
calmm is free to try, so we need a way to notice one person opening many accounts. When you sign up we record a short code derived from your browser settings — things like your language, screen size and time zone — together with a one-way scramble of your IP address. We never store the raw values, we never use this to follow you across other websites, we never sell it, and it is never combined with anything outside calmm. It can flag an account for a human to look at; it never blocks anyone automatically.
§8·Analytics and cookies
We use PostHog to understand which steps people get stuck on. It sees which screens you opened and whether an import succeeded or failed — never your trades, your positions or any rupee figure, which are stripped before anything leaves your browser. We do not use advertising cookies and we do not run third-party ad trackers. We use cookies for one thing: keeping you signed in.
§9·Changes and contact
We will post any material change here and update the date above. Questions about privacy? Reach us at team@calmm.ai.