Backtest Lab Privacy Policy
Who we are and what this policy covers
This policy explains what personal data Backtest Lab collects, why we collect it, and the choices you have. Backtest Lab ("we", "us") is operated by Buckerry India Private Limited and is available at www.backtestlab.in (the "Service").
For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we are the Data Fiduciary for the personal data described here. "Personal data" means any data about you that identifies you, alone or together with other information.
The Service is in beta and is currently free, so we collect only what we need to run it. If we add features that need more data, such as broker connections or paid plans, we will update this policy and ask for your consent before collecting it.
Information we collect
We collect the categories of personal data below and nothing else.
| Category | What it includes | How we get it |
|---|---|---|
| Account details | Name and email address, and your sign-in details. If you sign in with a provider such as Google, the profile information it shares. | You give it when you sign up |
| Strategies and backtest results | The strategies, nodes, conditions, parameters and results you create and save in the workspace. | You create it while using the Service |
| Feedback and votes | Messages sent through the feedback form and your votes on upcoming features. | You submit it |
| Technical and usage data | IP address, browser and device type, pages and features used, timestamps and error logs. | Collected automatically when you use the Service |
| Messages to us | Your email address or phone number and anything you write when you contact us. | You send it |
We do not collect bank, demat or trading account details, broker logins, payment card details, PAN or other government ID numbers. Backtest Lab does not connect to brokers or place trades.
Why we use your information
We use your personal data only for these purposes:
- Run the Service. Sign you in, save your strategies, run backtest and show you the results.
- Keep it secure. Detect abuse and fix faults.
- Improve the Service. Understand which features are used, fix errors, and decide what to build next from votes and feedback.
- Communicate with you. Send service messages, such as account notices, and reply to your feedback. We send product updates only if you opt in.
- Meet legal duties. Respond to lawful requests and keep the records the law requires.
We do not sell your personal data. We do not publish your strategies or share them with other users.
Consent and your choices
We process your personal data on your consent, which we ask for when you sign up, in a clear notice that lists the data and the purposes above. We ask again before using your data for anything new. We may also process data without consent where the law allows it, for example to comply with a court order.
You can withdraw your consent at any time, as easily as you gave it, by using the account deletion option in your account settings or emailing at m3backtestlab@gmail.com. When you withdraw, we stop processing your data and delete it, unless the law requires us to keep some of it (see "How long we keep information"). Some features will stop working without it.
Marketing emails are off unless you opt in, and every email carries an unsubscribe link.
Who we share information with
We share personal data only with the parties below, and only as far as needed.
- Service providers. Companies that help us run the Service under written contracts that require them to protect your data and use it only on our instructions: hosting and cloud provider, and sign-in provider.
- Authorities. Courts, regulators and law enforcement, when the law requires it or to protect our legal rights.
- A successor. If Backtest Lab is merged with or acquired by another company, your data may move to it, and this policy keeps applying unless you are told otherwise.
We may publish totals that do not identify you, such as how many people voted for a feature.
Cookies and analytics
We use cookies and similar browser storage to keep you signed in and remember your settings. The Service needs these to work. You can block or delete cookies in your browser settings. Sign-in will not work if you block the ones we need.
How long we keep information
We keep personal data only as long as we need it for the purposes above.
- Account and strategies: until you delete your account. We then delete them within 30 days, and from backups within 90 days.
- Feedback and votes: If you delete your account, we remove your name and email from them.
- Technical and usage logs: for at least one year, as the DPDP Rules require for processing logs, then we delete them.
- Records the law requires: for as long as that law says.
- Inactive accounts: after 24 months without a sign-in, we email you and then delete the account unless you return.
How we protect it
We use reasonable security measures to protect your personal data, including:
- Encryption of data in transit (HTTPS) and at rest.
- Access limited to the team members who need it to run the Service.
- Written contracts with service providers that require them to protect data.
- Logs that let us detect and investigate unauthorised access.
If a personal data breach affects you, we will tell you without delay, describing what happened, what it may mean for you and what we are doing about it. We will also report it to the Data Protection Board of India without delay and send it a detailed report within 72 hours, as the DPDP Rules require.
No system is completely secure, so please keep your sign-in details private.
Your rights and the Grievance Officer
Under the DPDP Act you have the right to:
- Get a summary of the personal data we process about you and what we do with it.
- Correct, complete or update your data.
- Have your data erased, unless we must keep it by law.
- Have your complaints heard (grievance redressal).
- Nominate someone to exercise these rights for you if you die or can no longer do so.
To use any of these rights, email at m3backtestlab@gmail.com. We acknowledge every request and complaint within 484 hours and aim to resolve it within 15 days.
Grievance Officer Email: m3backtestlab@gmail.com
If we do not resolve your complaint, you can complain to the Data Protection Board of India.
Children
Backtest Lab is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete that account and its data. If you think a child has signed up, please email at m3backtestlab@gmail.com.
Transfers outside India
Our service providers may store or process your data on servers outside India. We store our main data in India. The DPDP Act allows such transfers except to countries the Government of India restricts, and we will not transfer your data to any restricted country.
Third-party links
The Service links to other sites, such as Nifty Predictor (niftypredictor.in) which is operated by us and our founders' LinkedIn profiles. Those sites have their own privacy practices, and this policy does not cover them.
Changes to this policy and how to contact us
We may update this policy as the Service grows. For material changes we will email registered users or show a notice on the site at least 10 days before the change takes effect, and we will remind you of this policy at least once a year. The "last updated" date at the top shows which version is current.