Effective date: 23 May 2026
Last updated: 23 May 2026
If anything here is unclear, write to us — we would rather answer a question than have you guess.
1. Who we are
Auction Edge is a passion project operated by Surya Ganti, based in Visakhapatnam, India. It is not yet incorporated as a legal entity. We will update this section if and when that changes.
Auction Edge operates the website at auctionedge.in and the dashboard at app.auctionedge.in. We are based in India and this Policy is governed by Indian law.
2. Data we collect
We try to collect as little as possible. Specifically:
2.1 Data you give us directly
- Waitlist email — when you join the public waitlist
- Account details — name and email when you sign up for the dashboard (handled by Supabase)
- Authentication metadata — password hashes, login timestamps, IP at login (Supabase)
- Contact form submissions — name, email, subject, message, optional page URL
- Trade data (future, AI Coach feature) — trade entries, exits, sides, sizes, instruments, timestamps, optional notes. Uploaded by you and only when you opt into the Coach.
2.2 Data collected automatically
- Server logs — IP address, user agent, request path, response code, timestamp
- Authentication cookies — issued by Supabase to keep you logged in
- We do not currently run any third-party product analytics (no GA4, no Posthog, no Hotjar). If we introduce one in future, this list will be updated and existing users notified.
2.3 Data we do not collect
- We do not collect financial account credentials. We do not connect to your broker. We do not see your funds, positions, or P&L unless you explicitly upload them via the AI Coach feature.
- We do not collect Aadhaar, PAN, or any government ID.
- We do not run third-party advertising networks or marketing trackers.
3. Why we use it
We process your data only for these purposes:
- Providing the service — running the dashboard, sending you the briefs you have subscribed to, keeping you logged in
- Analysing your trades (Coach feature only) — reconstructing market state and producing the coaching output
- Communication — replying to support, sending product updates if you have opted in
- Security and abuse prevention — rate limiting, spam detection, fraud prevention
- Legal compliance — meeting obligations under Indian law
We do not sell your data. We do not share it with advertisers. We do not use your trade data to train AI models — yours or anyone else's.
4. Legal basis (DPDP Act)
Under the DPDP Act, we process personal data on the basis of:
- Consent — for waitlist sign-up, account creation, optional Coach trade uploads, and product communications
- Legitimate uses as defined in Section 7 of the Act — e.g. responding to a support request, complying with law, security
You can withdraw consent at any time (see Section 8 below).
5. Data processors and where data lives
We use the following third-party processors. Each is bound by contract and/or their own DPDP-compatible terms:
| Processor | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication, user database | Email, name, password hash, session tokens |
| sender.net | Transactional and waitlist email | Email, name, message subject |
| Anthropic (Claude API) | Powers the AI Narrator and Coach | Market data and, for Coach, your uploaded trade data. Anthropic does not train on API-submitted content under their default terms. |
| OVH (dedicated server) | Application, database, ClickHouse, and prediction-engine hosting | All operational data |
| Cloudflare (if used) | DNS, DDoS protection, CDN | Request metadata, IP |
Our application, database, ClickHouse store, and prediction-engine all run on a single OVH dedicated server. Supabase, sender.net, Anthropic, and Cloudflare may store request metadata or user data outside India.
By using the Platform, you consent to such cross-border transfer where it is necessary for the service to function, in accordance with the DPDP Act and any rules notified by the Government of India.
6. How long we keep it
| Data | Retention |
|---|---|
| Waitlist email | Until you unsubscribe, then 30 days for audit |
| Account email and profile | Lifetime of account, plus 30 days after deletion request |
| Authentication logs | 90 days |
| Server access logs | 30 days |
| Contact form submissions | 12 months |
| Trade data (Coach) | Lifetime of account; deletable on request within 7 days; permanently purged 30 days after account closure |
7. Cookies
We use cookies for:
- Authentication — keeping you logged in (Supabase auth cookies, first-party, essential)
- Preferences — UI state such as theme or last-viewed page (first-party, optional)
We do not run third-party advertising or cross-site tracking cookies.
8. Your rights under the DPDP Act
You have the right to:
- Notice — know what data we hold and why
- Consent withdrawal — revoke consent at any time
- Access and correction — see and correct your data
- Erasure — delete your account and associated personal data, subject to retention required by law
- Grievance redressal — escalate a complaint to our Grievance Officer; if unresolved, to the Data Protection Board of India
To exercise any of these, email privacy@auctionedge.in.
9. Grievance Officer
In compliance with the DPDP Act, 2023 and the Information Technology Rules:
Name: Surya Ganti
Email: grievance@auctionedge.in
Address: 11-2-1176, Flat No. D3,
Meridian Seashells Apartments,
Siripuram, Visakhapatnam 530003,
Andhra Pradesh, India
We will acknowledge your grievance within 48 hours and resolve it within 30 days.
10. Children
The Platform is not directed at users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, write to the Grievance Officer and we will delete it.
11. Security
We use industry-standard security: encryption in transit (TLS), encryption at rest for trade data, hashed passwords (Supabase), access controls, and regular dependency updates. No system is perfectly secure; if a breach occurs that materially affects you, we will notify you and the Data Protection Board as required by law.
12. Changes to this Policy
We may update this Policy. Material changes will be notified via email to account holders and posted at the top of this page with a new effective date. Continued use after the effective date constitutes acceptance.
13. Governing law
This Policy is governed by the laws of India. The DPDP Act, 2023, and applicable rules thereunder, control where there is conflict.
14. Contact
- Email: privacy@auctionedge.in
- Grievance Officer: see Section 9
- Postal: see Contact