Privacy Policy

Last updated: 16 August 2026

1. Who we are

Astrella is a personal trading journal and analytics application operated from India. This policy explains what data we collect when you use https://astrella.in, why we collect it, who processes it on our behalf, and how you can get it deleted. In this policy, “we” and “us” mean Astrella, and “you” means the person using the app.

For any question about this policy or about your data, write to support@astrella.in.

2. What we collect

Account information from Google

Astrella has no password of its own — you sign in with Google. When you do, Google shares a limited profile with us: your name, email address, profile picture and your Google account identifier. We use these to create and identify your account. We do not receive your Google password, and we request no access to Gmail, Drive, Contacts, Calendar or any other Google service.

Content you create in the app

Everything you record in Astrella is stored against your account:

• Trades — instrument or symbol, entry and exit prices, position size, dates, realised profit and loss, and any notes or screenshots you attach.
• Strategies and playbooks — your rules, checklist criteria, and which of them you marked as met on a given trade.
• Notebook — notes, folders, templates and tags you write.
• Watchlists and alerts — the symbols you follow, playbook subscriptions, automation settings and the alerts generated from them.
• Progress data — experience points and streaks derived from your logged trades.
• AI usage records — a ledger of how much analysis credit each run consumed, so usage can be metered and shown back to you.

Push notification subscriptions

If you enable notifications, your browser generates a push subscription — a delivery URL supplied by your browser vendor plus the encryption keys needed to send to it. We store that subscription so alerts can reach your device, and delete it when you turn notifications off or the browser invalidates it.

Technical data

Our servers and providers process ordinary request data — IP address, browser type, and timestamps — as part of serving the app and keeping it secure. We do not build advertising or behavioural profiles from it.

3. What we do not collect

We also do not sell your data, do not share it with advertisers, and run no advertising or behavioural-analytics trackers.

4. How we use your data

• To authenticate you and keep you signed in.
• To store and display your journal, strategies, notes and watchlists.
• To compute the statistics, scores and progress the app shows you, all derived from your own entries.
• To generate AI analysis and coaching when you explicitly request a run.
• To send the alerts and notifications you have opted into.
• To keep the service secure and working — debugging errors, preventing abuse, and meeting legal obligations.

We do not use your data for automated decisions that produce legal or similarly significant effects on you.

5. AI processing

When you start an analysis run, the relevant content — the trades, strategy rules and notes for that run — is sent to Anthropic, our AI provider, to generate the analysis. Your name, email address and account identifier are not included in that request. Under the commercial API terms we use, Anthropic does not use this content to train its models. AI output is generated text and can be wrong; see our Terms for what it is and is not.

6. Service providers

We keep the list of companies that touch your data deliberately short. Each is bound by its own terms to process data only as instructed by us:

• Supabase — authentication and the database where your journal is stored.
• Google — sign-in with Google. Our pages also load fonts from Google’s font service, which receives your IP address and browser type as part of that request.
• Anthropic — AI analysis, as described above.
• Cloudflare — background jobs that fetch public market data.
• Your browser vendor’s push service — delivers notifications to your device if you enable them.

We may also disclose data if required by law, or to protect the rights and safety of our users. If Astrella is ever transferred to another operator, we will tell you before your data moves.

7. Market data

The app displays public market and news data drawn from sources such as the National Stock Exchange, Yahoo Finance and Indian financial news outlets. Those requests are made by our servers, not by your browser, so no personal data of yours — including your IP address — is shared with them.

8. Storage and security

Your data is stored in managed Postgres databases operated by Supabase. All traffic between your browser and our servers is encrypted with TLS, and data is encrypted at rest by our infrastructure provider. Every table holding user content is protected by row-level security rules enforced by the database, so one account cannot read another account’s rows even if application code is at fault.

No system is perfectly secure. If a breach ever affects your data, we will notify you and the relevant authority as required by law.

9. Retention and deletion

We keep your data for as long as your account exists, because a trading journal is only useful with its history intact. You can delete individual trades, notes and strategies at any time from within the app.

To delete your account entirely, email support@astrella.in from the address you signed up with. We will erase your account and everything linked to it within 30 days. Deleting your account removes your journal permanently — export anything you want to keep first. Backups are purged on their normal rotation, within 90 days.

10. Your rights

Under India’s Digital Personal Data Protection Act, 2023 — and equivalent rights if you are in another jurisdiction — you may ask us to:

• confirm what personal data of yours we hold, and get a copy of it;
• correct anything inaccurate or incomplete;
• erase your data and close your account;
• withdraw consent for optional processing, such as notifications;
• nominate another person to exercise these rights if you are unable to.

Write to support@astrella.in and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11. Cookies

We set only the cookies needed to keep you signed in — session and refresh tokens managed by our authentication provider. There are no advertising, tracking or analytics cookies. Clearing them signs you out.

12. Children

Astrella is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has created an account, write to us and we will remove it.

13. Changes to this policy

If we change this policy we will update the date at the top of this page, and for significant changes we will notify you in the app or by email before they take effect.

14. Contact

Questions, requests or complaints about privacy go to support@astrella.in.