Privacy Policy

1. Introduction

withSahib.com is operated by Sahib Singh Hora, SEBI Registered Research Analyst (Registration No. INH000026266). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, services, and research publications.

By using withSahib.com you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information you provide directly

• Name and email address when you register an account
• Phone number (optional, for WhatsApp alerts)
• Payment information processed securely via Cashfree (we do not store card details)
• Communications you send us via email or contact forms

2.2 Information collected automatically

• IP address and approximate location
• Browser type and device information
• Pages visited and time spent on the site
• Referral source (how you found our website)

3. How We Use Your Information

• To provide and improve our research services and platform
• To send research reports, trade alerts, and market updates you have subscribed to
• To process subscription payments and send billing notifications
• To respond to your enquiries and support requests
• To comply with SEBI regulations and legal obligations
• To detect and prevent fraud and misuse

We do not sell, trade, or otherwise transfer your personally identifiable information to third parties without your consent, except as described in this policy or as required by law.

4. Data Storage and Security

Your data is stored on Supabase (hosted on AWS infrastructure) with encryption at rest and in transit. We implement industry-standard security practices including HTTPS, hashed passwords, and access controls.

Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we take all reasonable precautions to protect your information.

5. Third-Party Services

We use the following third-party services which may process your data:

• Cashfree — payment processing (PCI DSS compliant)
• Resend — transactional email delivery
• Supabase — database and authentication
• Vercel — website hosting and deployment
• AiSensy — WhatsApp message delivery (research notes to opted-in Pro+ subscribers)
• Telegram — paid and free channel research delivery for subscribers who join the channel
• Anthropic — AI-assisted blog drafting and research-report summarisation (no subscriber PII is sent in these requests)
• Fyers — Indian market data feed used by the screener and signal-pricing pipeline (no subscriber data shared with Fyers)
• ipapi.co — coarse country / region lookup for aggregate userbase analytics (never used to auto-switch language or content)

Each of these services maintains their own privacy policies and data protection standards.

6. Cookies

We use cookies strictly necessary for authentication (session management) and preference storage (theme settings). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect your ability to log in.

7. Your Rights under the DPDP Act, 2023

As a Data Principal under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”), you have the following rights with respect to personal data we process about you:

• Right to access — obtain a summary of the personal data we hold about you and the processing activities undertaken.
• Right to correction and erasure — request correction of inaccurate or incomplete data, and erasure of personal data that is no longer necessary, subject to SEBI's record-retention requirements.
• Right to nominate — nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
• Right to grievance redressal — escalate any privacy concern first to our Data Protection Officer (below), then to the Data Protection Board of India if unresolved.
• Right to withdraw consent — withdraw consent for processing previously based on consent; this will not affect the lawfulness of processing prior to withdrawal.
• Right to data portability — where technically feasible and applicable, receive your personal data in a structured, commonly used machine-readable format.
• Opt-out of marketing — unsubscribe at any time from marketing emails using the link in any such email.

To exercise any of these rights, email connect@withsahib.com with the subject line “DPDP Rights Request”. We will acknowledge within 7 working days and respond on substance within 30 days.

7A. Data Protection Officer / Grievance Officer

For all data-protection queries, requests under §7, and grievances relating to the handling of your personal data:

Unresolved complaints may be escalated to the Data Protection Board of India once it is operationalised by the Government under the DPDP Act, 2023.

7B. Cross-Border Data Transfers

Your data is primarily stored in India and Asia-Pacific regions via Supabase / AWS infrastructure. Limited operational data (e.g. transactional email metadata via Resend) may be processed in other jurisdictions where our processors operate, in each case subject to contractual data-protection terms and applicable law. We do not transfer personal data to any country that the Central Government of India has notified as restricted under §16 of the DPDP Act, 2023.

8. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. If you delete your account, personal data will be removed within 30 days except where we are required to retain it for legal or regulatory compliance (e.g., transaction records required by SEBI regulations).

9. Children's Privacy

Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect information from minors. If you believe a minor has provided us with personal information, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our services after changes constitutes acceptance of the revised policy.

11. Contact

For any privacy-related enquiries or to exercise your rights: