Privacy Policy¶
Last updated: 2026-05-26
This is a working draft. Final policy will be published before the public launch of JanusLab and will be reviewed for compliance with India's DPDP Act (2023).
JanusLab is committed to handling your data the way we'd want ours handled — minimum collection, clear purpose, no surprises.
What we collect¶
| Category | Examples | Purpose |
|---|---|---|
| Account | Email, hashed password, full name | Sign-in, account management |
| Broker credentials | Zerodha Kite API key, encrypted access token | Fetching your market data quota |
| Usage | Strategy configs, backtest jobs, paper-trading positions | The product itself |
| Diagnostics | Browser, request timing, error stack traces (via Sentry) | Bug fixing + performance |
| Billing (when paid plans launch) | Razorpay payment ID, plan tier | Subscription management |
We do not collect:
- Real-trading P&L from your Zerodha account beyond what backtests need
- Marketing tracking pixels, third-party advertising cookies
- Browsing history outside the JanusLab app
How long we keep it¶
- Account data: until you delete your account
- Backtest results: indefinitely while your account is active; you can delete individual results from the dashboard
- Broker access tokens: rotated on every Kite login (daily)
- Sentry diagnostics: 90 days
Where data lives¶
All data is stored in AWS Mumbai region (ap-south-1) on PostgreSQL + Redis managed services. Backups are encrypted at rest. We do not transfer your data outside India.
Who sees it¶
JanusLab founders + the dev team. No third-party data sharing, no selling, no advertising.
Exceptions:
- Zerodha sees your broker activity per their own terms (not us)
- Razorpay sees payment information per their own terms
- Sentry (operated by Functional Software, Inc.) sees error stacks; configured to scrub personally identifiable fields
- Lawful disclosure to Indian authorities if compelled by a valid court order
Your rights under DPDP Act 2023¶
You have the right to:
- Access your data (export from the account page)
- Correct inaccurate data (edit from the account page or email us)
- Erase your data (close your account — we delete within 30 days)
- Withdraw consent for processing (closing the account does this)
- Lodge a complaint with the Data Protection Board of India
To exercise any of these rights, write to support@januslab.in with the request and the email tied to your account. We respond within 7 business days.
Cookies¶
JanusLab uses:
- Authentication cookies (session + refresh tokens, HttpOnly)
- Preference cookies (UI theme, last-used view)
We do not use third-party tracking cookies.
Children¶
JanusLab is not designed for users under 18. We do not knowingly collect data from minors. If we learn we have, we delete it.
Changes to this policy¶
Material changes will be emailed to your account email at least 14 days before they take effect.
Contact¶
Data-protection officer / privacy questions: support@januslab.in.