Privacy Policy

• Account data: name, email, and (for Google sign-in) your Google profile basics.
• Usage data: features you use, AI assistant queries, watchlists, and portfolios you create.
• Payment data: when you subscribe, payments are processed by Razorpay. We do not store your card or bank details — we only keep a subscription reference, plan, and status returned by Razorpay.
• Technical data: IP address, device/browser info, and cookies needed to keep you signed in.

• To provide and operate the Service and your account.
• To process subscriptions and manage your plan/tier.
• To improve the product and provide support.
• To send service-related communications (e.g. billing and account notices).

We share data only with service providers that help us run the Service — notably Razorpay (payments) and our cloud/hosting and authentication providers — and only as needed to deliver the Service. We do not sell your personal data.

You can connect DocStoX to AI assistants such as ChatGPT and Claude through our MCP server at mcp.docstox.com. When you do:

• You sign in with your DocStoX account (with Google, or with your email and password). The connection is linked to that account; if you use Google, we receive your Google account's email address and basic profile, as on the website.
• For each request, we receive only the tool the assistant calls and that tool's inputs, such as a stock symbol or screening filters. We do not receive your conversation, your other chats, your files or the assistant's memory.
• Every tool only reads data. A connector cannot place trades, move money, or change your portfolio, watchlist or account.
• We record usage per account (which tool, the date, the number of calls and whether the call succeeded) to apply your plan's limits and show you your usage at docstox.com/mcp/keys. We keep this for as long as your account is active.
• You can see and revoke connected apps at docstox.com/mcp/keys, and delete your account and its usage history by emailing us.

We use industry-standard measures (encrypted transport, access controls) to protect your data and retain it for as long as your account is active or as needed to comply with legal obligations. You can request deletion of your account and associated data at any time.

You may access, correct, or delete your personal data, and withdraw consent, by contacting us. We honour applicable data-protection rights under Indian law.

For any privacy questions or requests, email [email protected].