Privacy Policy
Last updated: 23 May 2026 · Effective date: 23 May 2026
1. Who We Are
WheelDesk is a wheel strategy options analytics platform operated by Abhijeet Dattatraya Sambvekar, a sole proprietorship registered in Maharashtra, India. GST Registration Number: 27EZCPS1120L1ZA. Registered address: H No. 222, Plot Vasti, Near Water Tank, Kavathe Ekand, Sangli - 416307, Maharashtra.
We are the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023 (DPDPA). Contact for data queries: privacy@wheeldesk.in. Response commitment: within 30 days.
2. What Data We Collect and Why
| Category | Data | Purpose |
|---|---|---|
| Account Data | Name, email, phone, password (hashed) | Authentication and communication |
| Payment Data | Subscription status, plan, transaction ID (via Razorpay — card details never stored) | Billing and GST compliance |
| Trading Data | Wheel cycle entries you log | Portfolio tracking and AI analysis |
| AI Interaction | Queries and responses in the AI Assistant | Providing the assistant service |
| Usage Data | Pages visited, features used, IP address | Platform improvement |
| Watchlist Data | Stocks saved, alert preferences | Delivering alerts |
3. Consent
We collect your personal data only with your consent, obtained at sign-up through explicit category-wise consent checkboxes. You may withdraw consent at any time via Account Settings or by emailing privacy@wheeldesk.in. Withdrawal does not affect prior lawful processing.
4. Data Retention
Account data is retained for the duration of your account plus 30 days. Payment data is retained for 7 years as required by GST law. AI interaction data is deleted after 90 days. Trading data is deleted within 30 days of account closure or on your request.
5. Third Parties
We share data only with: Razorpay (payment processing, India), Supabase (database, Mumbai ap-south-1 — all persistent user data remains in India), Vercel (hosting), and Anthropic PBC (AI assistant, United States — AI queries only, not used for model training). We do not sell or rent your data.
6. Your Rights Under DPDPA 2023
You have the right to: access your data, correct inaccurate data, request erasure (within 30 days), file a grievance, and nominate a representative. Email privacy@wheeldesk.in to exercise any right.
7. Children
WheelDesk is not intended for users under 18. Our sign-up requires age confirmation. We do not knowingly collect data from minors.
8. Security
We use TLS 1.3 in transit, AES-256 at rest, Supabase Row Level Security, bcrypt password hashing, and access controls limiting employee access to personal data.
9. Cookies
We use strictly necessary cookies for authentication and session management only. No advertising cookies. No third-party trackers.
10. Grievance Officer
In compliance with the IT (Intermediary Guidelines) Rules 2021 and DPDPA 2023:
11. Governing Law
This policy is governed by the laws of India. Disputes are subject to the exclusive jurisdiction of the courts of Mumbai, Maharashtra.