Privacy Policy

Last updated: 8 October 2026

This Privacy Policy explains what personal information PropFlagger (“the site”, “I”, “me”) collects when you visit the website, create an account, buy something, send a message or leave a comment; how I use it; who it is shared with; and the choices you have. Please read it together with the Cookie Policy.

The short version

  • I collect only what is needed to run the site, answer you, process orders and keep the site secure.
  • I do not sell your personal information for money.
  • Payments are handled by Razorpay; I never see or store your full card, UPI or bank login details.
  • Advertising on the site is provided by Google AdSense, which uses cookies. You can opt out of personalised ads (see “Advertising and Google AdSense” below).
  • You can ask me to access, correct or delete your information at any time.

Who is responsible for your information

The site is operated by Hiron Pegu, an individual, who is the “data controller” (in Indian law, the “data fiduciary”) for the information described here. You can contact me at hkumar4610@gmail.com or through the contact page. That address is also the grievance contact for privacy concerns.

Information I collect

Information you give me

  • Contact form: your name, email address and message. I use them to reply. To limit spam, a one-way hashed form of your IP address is kept briefly to count messages; the IP address itself is not stored.
  • Comments: if comments are open on a post, WordPress stores the name, email address, optional website, IP address, browser details and the comment text you submit. Your email address is not shown publicly.
  • Accounts: if you register, I store your name, email address, a securely hashed password and your account type (member, trader or seller), plus the activity needed to run your account.
  • Purchases: when you buy access, I store your name, email address, country, what you bought, the amount and currency, the order status and the payment reference returned by Razorpay. Razorpay collects and processes your payment details itself.
  • Journals and strategies you write: if you use the journal tools, I store the entries, charts, notes and checklists you create. Private entries are visible only to you and to the site owner for support and moderation.
  • Seller applications: sellers provide a display name, a short profile, a payout method and payout details, and may be asked to verify their identity. This information is visible only to the site owner and is used to review applications and to pay sellers.

Information collected automatically

  • Server and security logs: the web host records technical data such as IP address, browser type, device, pages requested and time, for security, fraud prevention and keeping the site running.
  • Cookies and similar technologies: see the Cookie Policy.
  • Analytics: I may use a service such as Google Analytics to see, in aggregate, which pages are read and how visitors find the site. It may record your IP address, device and browser information and pages viewed.
  • Advertising data: if ads are shown, Google and its advertising partners may collect data through cookies and similar technologies, as explained below.

How I use your information

  • to provide the website, your account and the content you bought or created;
  • to process payments, send order confirmations and handle refunds;
  • to pay sellers and meet tax and accounting obligations;
  • to answer messages and moderate comments;
  • to keep the site safe, prevent spam and fraud and fix problems;
  • to understand how the site is used and improve it;
  • to show advertising that helps pay for the free content;
  • to comply with legal obligations and to establish or defend legal claims.

Legal bases (where GDPR or UK GDPR applies)

I rely on: contract (providing the account, purchase or content you asked for); consent (for non-essential cookies, personalised advertising and optional emails, which you can withdraw at any time); legitimate interests (securing the site, preventing abuse, basic analytics and answering enquiries, balanced against your rights); and legal obligation (tax, accounting and legal requests). In India, I process personal data on the basis of your consent or for the legitimate uses permitted by the Digital Personal Data Protection Act, 2023.

Advertising and Google AdSense

This site uses Google AdSense to display advertisements. This is how the free articles are funded. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.

  • Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
  • You can opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors’ use of cookies for personalised advertising at www.aboutads.info (in the EU, www.youronlinechoices.com).
  • You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, and read the Google Privacy Policy.
  • Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent through a consent message before personalised ads or non-essential cookies are used. If you decline, only non-personalised advertising may be shown.
  • I do not control the ads that third parties choose to show, and I do not receive your personal information from them. Ads are labelled as advertisements and are not endorsements.

Who I share information with

I do not sell your personal information for money. I share it only with service providers that help me run the site, and only as needed:

  • Razorpay processes payments and refunds, under its own privacy policy.
  • Web hosting, backup, security and email-delivery providers store and transmit site data on my behalf.
  • Google provides advertising (AdSense) and may provide analytics.
  • Embedded and linked services such as YouTube or TradingView charts may collect information when you load or interact with them, under their own policies.
  • Authorities and advisers, where the law requires it or to protect rights, safety and security, and professional advisers such as accountants and lawyers under confidentiality.

Under some laws (for example California’s), sharing data with advertising partners can be described as “sharing” or “selling” for advertising. You can opt out through the Google tools above, and you can contact me with any request.

How long I keep information

I keep information only as long as needed for the purposes above. As a guide: contact messages are kept for up to 24 months; comments stay until deleted; account information stays until you ask me to close the account; order and payout records are kept for the period required by tax and accounting law (typically several years); server logs are kept for a short period set by the host. After that, information is deleted or anonymised.

Security

I use reasonable measures to protect information, including HTTPS, hashed passwords, access limits, and keeping WordPress and its components updated. No online service is completely secure, so I cannot guarantee absolute security. Please use a strong, unique password.

International transfers

The site’s providers may process data in countries other than your own, including India, the United States and the European Union. Where required, I rely on appropriate safeguards such as the providers’ standard contractual clauses.

Your rights and choices

Depending on where you live, you may have the right to access your personal information, have it corrected or deleted, restrict or object to its use, receive a copy in a portable format, withdraw consent, opt out of personalised advertising, and complain to a data-protection authority (in India, the Data Protection Board; in the EU/UK, your national supervisory authority). Under the DPDP Act you may also nominate someone to exercise rights on your behalf. To make a request, contact me; I will reply within a reasonable time, usually within 30 days. I may need to confirm your identity first..

Children

This site is for adults. Trading content is not meant for anyone under 18, and the site is not directed at children under 13. I do not knowingly collect information from children. If you believe a child has given me information, please contact me and I will delete it.

Links to other websites

The site links to other websites. I am not responsible for their privacy practices; please read their policies.

Changes to this policy

I may update this policy as the site or the law changes. The “last updated” date above shows the latest revision, and significant changes will be highlighted on the site.

Contact

Questions, requests or complaints about privacy: hkumar4610@gmail.com, or use the contact page.