xΛTrader
Legal

Policies & Terms

The terms for using xΛTrader, how we treat your data, how paid plans work, the rules for posting and for classrooms, how to raise a complaint, and what xΛTrader is not.

Privacy Notice

Last updated: 30 October 2026

Applies to: your xΛTrader account and what you do in xΛTrader

In short. We keep what an account needs and what you create in xΛTrader, and use it to run the Service for you and to keep it safe. Your password is never stored, only a one-way code made from it. We use Google Analytics to see how xΛTrader is used. We do not sell personal data. You can ask us to show, correct or delete what we hold about you.

1. Who is responsible

MwSoftware Private Limited (CIN: U62010RJ2026PTC118037), PNO. 37, KNO. 425, Godara Colony, Banar, Jodhpur - 342027, Rajasthan, India, decides why and how the personal data described here is processed. Under the Digital Personal Data Protection Act, 2023 we are the "Data Fiduciary". This notice covers xΛTrader. Our company website, mwsoftware.in, has a privacy policy of its own.

2. What we collect

  • Your account: your e-mail address and user name, and your password, which we keep only as a salted one-way code: no one, including us, can read the password back from it. Also your role, your plan and its history.
  • Your profile, if you fill it in: first and last name, display name, phone number, date of birth, country, state, city, address, PIN code and PAN. All of these are optional. Today they are only kept and shown back to you; xΛTrader does not verify them or use them for any decision.
  • What you create and do: strategies and indicators; backtests, walk-forward tests and live runs with their results; alerts, watch lists and notifications; portfolio entries; chart and layout settings; classroom memberships and the strategies shared with you; your Social posts, likes and follows.
  • Exchange connections, if you make one: the exchange, the label you give it, the API key, secret and passphrase you enter (stored encrypted), the permissions you state, when your balances were last read, and the balances read.
  • When you use xΛTrader: your device sends its IP address, its browser and device type, the page asked for and the time, and our servers record these in their logs. To keep the Service safe, a security cookie (xat_vid, see the Cookie Policy) tells one browser from another; with it we count, per browser and per day, the pages and features used, the account signed in, and any request refused or over a limit, so that misuse can be found and stopped. The IP addresses in these counts are deleted after 30 days. To stop password guessing, the server also counts failed sign-ins and password-reset requests by account name and IP address, for a short time and in its memory only.
  • Google Analytics: which pages are opened, for how long, from what kind of device, and roughly where (the country or the city), measured with Google Analytics cookies (see the Cookie Policy).
  • The Launch Arena, if you submit a score (no account needed): your e-mail address, the name you choose for the board, your scores and when and from which IP address you submitted them, whether you opened the link we e-mailed you, and whether you asked for xΛTrader launch news. We use them to run the arena, check that scores are genuine, contact the winners and, only if you ticked the box, send you launch news. The board shows the name you chose, never your e-mail address. See the Arena Rules; write to us to have your entry removed.

We never ask for card or bank details, least of all by e-mail. Please do not send us passwords or identity documents.

3. Why we use it

  • to create and run your account and give you the Service: run your strategies, backtests and live runs, keep your alerts, and send the notifications you ask for;
  • to send you the e-mails you need: password resets and, if you turn them on, notifications;
  • to show your Social posts and user name to their readers, and your user name to the instructors and administrators of a classroom you join;
  • to read your exchange balances into your portfolio, once you have connected an exchange;
  • to keep the Service and its accounts safe, for example by limiting sign-in attempts, and to find and stop misuse;
  • to understand how xΛTrader is used and to improve it (Google Analytics);
  • to handle a grievance or a request about your data, and to meet our legal obligations, including tax records once paid plans are on sale.

You give us your details for these purposes when you create your account and use the Service. We do not use them for advertising, and we make no automated decision about you that has a legal or similarly significant effect.

4. Who else sees it

  • Other people: your Social posts, with your user name, can be read by anyone who opens Social, including people who are not signed in. If you join a classroom, its instructors and the institute's administrators see your user name, your membership and group, and the class strategies you hold; they do not see your e-mail address, your other strategies or your results.
  • Google, for Google Analytics, and for Google Fonts, from which the pages' fonts are loaded;
  • content delivery networks from which your browser loads some of the pages' program files and icons: jsDelivr, cdnjs (Cloudflare) and Lordicon. Like any website, they receive your IP address and browser details with each request;
  • GoDaddy, which delivers the e-mails we send you;
  • the exchange you connect, when we read your balances with your key. Market data reaches our servers from exchanges' public data services without any of your personal data;
  • Cloudflare, which will carry and protect the traffic once xΛTrader is open to the public. Until then, xΛTrader is reached only over a private network that encrypts traffic from end to end.

We do not sell or rent personal data. We may disclose information where the law requires it, to a court or an authority entitled to ask for it, or to protect our rights or someone's safety.

5. Where it is kept

xΛTrader and its database run on our own servers in India. The service providers above may process data on servers outside India under their own security and privacy commitments; we transfer personal data abroad only as Indian law permits.

6. How long we keep it

  • Your account and what you created: for as long as the account exists. When you close it, we delete it within 30 days, except what the law requires us to keep and the copies of your strategies already given to others in a classroom.
  • Social posts: until you delete them, which you can do at any time, or close your account.
  • Exchange keys: until you remove the connection or close your account.
  • Invoices and payment records, once paid plans are on sale: for as long as tax law requires, currently up to eight years.
  • Server logs: no more than 30 days. Sign-in counters: a short time, in memory only.
  • Backups of the database may hold deleted data until they are replaced; we use them only to recover the Service.
  • Google and the other providers keep their own records under their own policies.

7. How we protect it

  • Your password is kept only as a salted one-way code, never as the password itself.
  • Exchange API keys, secrets and passphrases are stored encrypted, with a key that is kept apart from the database.
  • Sign-in uses a cookie that scripts on a page cannot read and that is sent only over encrypted connections, and repeated failed sign-ins are held back.
  • Once xΛTrader is open to the public, every page is served only over HTTPS; until then it is reached only over an encrypted private network.
  • Access to the servers is limited to the people who run them.

No method is perfectly secure. If a breach of personal data happens, we will inform the people affected and the authorities as the law requires.

8. Your rights

Under the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023 as its provisions come into force, you can ask us:

  • for a summary of the personal data we hold about you and how we use it;
  • to correct, complete or update it;
  • to erase it, once we no longer need it for its purpose and the law does not require us to keep it;
  • to stop using it, by withdrawing your consent (this does not undo what was lawfully done before, and without some of it, such as your e-mail address, the account cannot continue);
  • to let a person you nominate exercise these rights for you if you die or become unable to;
  • to hear and resolve a grievance.

You can change your profile yourself, and remove a post or an exchange connection at any time. For everything else, write to [email protected] from your account's e-mail address. We may ask you to confirm that the request is yours, and we answer within 30 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India once it accepts complaints.

9. Children

xΛTrader is for adults (18 and over). If you believe a child has created an account, tell us and we will delete it.

10. Grievance Officer

Grievance Officer, MwSoftware Private Limited, PNO. 37, KNO. 425, Godara Colony, Banar, Jodhpur - 342027, Rajasthan, India.
E-mail: [email protected] · Telephone: +91 7976914002
We acknowledge a grievance within 48 hours and aim to resolve it within 30 days. See Grievance Redressal for what to include and where to go next.

11. Changes to this notice

The date at the top shows the current version. If a change affects how we use data you have already given us, we tell account holders before it applies.