Privacy policy

CandleHall runs CandleHall and decides how your personal data is used. Company registration in progress. Full legal details will be published here once registration completes. Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) we are the “Data Fiduciary”. Under the EU and UK GDPR we are the “controller”.

This policy covers candlehall.com, the CandleHall app, the academy, the journal and every community Room. Owners of hosted Rooms are responsible for anything they collect from you outside CandleHall.

We only collect what we need to run CandleHall. Here is all of it:

We don’t collect your master trading password, card numbers in full, seed phrases or government ID numbers from members. We never buy data about you from data brokers.

Each use has a clear purpose, and a reason the law accepts:

We don’t sell your data. We don’t use it for advertising, and we don’t let advertisers track you on CandleHall.

When we ask for consent, we ask for one clear thing at a time, in plain words, and you can say no to anything that isn’t needed for the service.

• Withdraw consent any time in Settings, or by writing to us. It is as easy as giving it.
• When you withdraw, we stop that use and delete the related data within a reasonable time, unless the law says we must keep it.
• Withdrawing doesn’t make earlier use unlawful. Some features may stop working, for example sync stops if you withdraw consent to hold your connection details.

CandleHall is only for people aged 18 or over. We don’t knowingly collect data from children. If we learn that an account belongs to someone under 18, we close it and delete its data. If you think a child is using CandleHall, please tell us.

• Read-only only. For MT4/MT5 we accept the investor password, never the master password. For exchanges we accept API keys with trading and withdrawal switched off, and we reject keys that have those rights where the exchange lets us check.
• Passed on, not kept, where possible. Investor passwords are passed to our trade-sync provider to connect your account. Where the provider allows, we don’t store the password ourselves after the connection is made.
• Encrypted in a separate key store. Anything we must hold is encrypted, and the keys are kept in a separate key store, away from our main database.
• Few hands. Only automated sync systems use credentials. Staff can’t see them in plain text.
• One-click disconnect. Disconnect in Settings and we delete the stored credentials. For extra peace of mind, you can also change the investor password or delete the key at your broker or exchange.

• Data is encrypted in transit (HTTPS) and at rest.
• Staff access is limited to what their job needs, uses two-step login, and is logged.
• We keep security logs of access to personal data for at least one year, so we can spot and investigate misuse.
• Backups are encrypted and tested. Our providers must meet the same standard in writing.
• Room member lists are hidden, profile views and search are rate-limited, and scraping is blocked, so other users can’t harvest your details.

We use trusted service providers (“processors”) that handle data only on our instructions and under written contracts. We name the categories here and share the current list on request:

We only choose AI providers whose terms don’t let them train their models on the data we send.

What Room owners can see

• An owner sees only their own Room’s members: your handle, and what you post in their Room.
• They see contact details only if you agree to share them, for example when you joined through their invite link and ticked the box.
• They never see your other Room memberships, your journal, your trades or your payment details, unless you choose to share a verified share card.

Other sharing

• Authorities: when the law requires it, for example a court order or a lawful request from a regulator or police.
• Safety: to stop fraud or protect someone from harm.
• Business change: if CandleHall is sold or merged, your data moves only under this policy, and we tell you first.

CandleHall serves traders in many countries, so your data may be stored or processed outside the country where you live, including outside India and the EU. When we move data across borders:

• we only transfer to countries the law allows (India can restrict some countries, and we follow that);
• for data from the EU or UK, we use approved safeguards such as the European Commission’s standard contractual clauses;
• our providers must protect your data to the same standard as this policy.

Delete your account in Settings at any time. Download your journal first if you want to keep it. We confirm by email when deletion is complete.

You can ask us to:

• See a summary of the data we hold about you, what we do with it, and who we shared it with.
• Correct or complete anything wrong or missing.
• Erase your data when it’s no longer needed, or when you withdraw consent.
• Take it with you: export your journal and profile in a common file format.
• Withdraw consent or object to a use, for example product emails.
• Nominate someone to use these rights for you if you die or can no longer act for yourself.
• Complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India, or to your local data protection authority if you live in the EU or UK.

Most of this works directly in Settings. For anything else, write to the Grievance Officer. We may need to confirm it’s really you. We acknowledge within 48 hours and answer within the time the law sets, and in any case within 30 days.

If there is a personal data breach that affects you:

1. 1
   We act at once to contain it and find out what happened.
2. 2
   We tell you without delay: what happened, what data was involved, what we are doing and what you can do (for example, change a password).
3. 3
   We report it within 72 hours to the Data Protection Board of India and, where they apply, to other authorities.
4. 4
   We fix the cause and publish what we changed.

Because we only hold read-only credentials, nobody who gets them can trade or withdraw from your accounts. We still ask you to change them if there is any breach.

Cookies are small files your browser stores. We keep them to a minimum:

• Essential: keep you logged in, protect forms from attacks, and remember settings such as your country mode. These are always on, because the site doesn’t work without them.
• Measurement (optional): privacy-friendly statistics about which pages are used. Only with your consent, and you can change your choice any time.
• No advertising cookies and no cross-site tracking.

When we change this policy in a way that matters, we tell you by email and in the app before it applies, and ask for fresh consent where the law requires. The date at the top always shows the latest version.

Data Fiduciary

CandleHall

Registered office

Published once registration completes

Grievance Officer

CandleHall support team

Grievance contact

CandleHall Support on Telegram

The Grievance Officer answers questions about privacy and your rights. Until a grievance email is set up, please message CandleHall Support on Telegram. We acknowledge complaints within 48 hours.