Sub-processors
AIShare engages the third-party processors listed below to deliver the service. For each vendor we disclose the purpose, the region in which data is processed, the categories of data shared, and a link to the vendor’s published Data-Processing Addendum or privacy terms. Disclosure is consistent with Section 10(6) of India’s Digital Personal Data Protection Act, 2023.
This list is reviewed on engagement of any new processor and at least quarterly. Material additions or region changes are recorded in the privacy change log.
| Processor | Purpose | Region | Data categories | DPA / terms |
|---|---|---|---|---|
Razorpay Payments | Subscription billing, refunds, GST invoice generation. | India | Name, email, payment instrument metadata, billing address, transaction ID. | razorpay.com/privacy |
Angel One SmartAPI Broker API | Execute orders and fetch positions/balances when the AI Trading Agent is enabled in LIVE mode. | India | Broker client code, TOTP secret (encrypted at rest), session tokens (in-memory only), order payloads. | smartapi.angelone.in |
Yahoo Finance Market data | Intraday and historical quotes, corporate actions, index data. | United States | No user data shared. Outbound calls contain symbols and technical parameters only. | legal.yahoo.com |
Twelve Data Market data | Backup market-data provider for fundamentals and time series. | European Union | No user data shared. Outbound calls contain symbols and API keys only. | twelvedata.com/privacy |
Google (Gemini API) AI reasoning | LLM inference for signal generation, pre-trade reasoning, and natural-language search. | United States | De-identified prompts containing symbols, indicator values and derived features. We do not submit account identifiers or PII in prompts. | cloud.google.com/terms/data-processing-addendum |
OpenAI AI reasoning (backup) | Fallback LLM when Gemini is unavailable or returns low-confidence output. | United States | De-identified prompts as above. We rely on the OpenAI API terms to disable training on our payloads. | openai.com/policies/data-processing-addendum |
Anthropic (Claude API) AI reasoning | Trading Agent long-form reasoning and structured output where Claude outperforms Gemini. | United States | De-identified prompts containing symbols and indicator snapshots. No account identifiers or PII. | anthropic.com/legal/dpa |
Vercel Infrastructure | Hosting the Next.js web application and serverless functions; edge CDN for static assets. | Primary region: Mumbai (bom1); edge cache global. | HTTP request/response metadata, IP address (truncated in logs), session cookies. | vercel.com/legal/dpa |
Neon (Postgres) Database host | Primary operational database for accounts, subscriptions, signals. | ap-south-1 (Mumbai, India) | All application data listed in the Privacy Policy retention schedule. | neon.tech/dpa |
Resend Email delivery | Transactional email: verification, receipts, DSR confirmations, alert digests. | United States | Recipient email address, message subject/body, delivery metadata. | resend.com/legal/dpa |
Cloudflare Turnstile Anti-abuse | Bot / captcha challenge on signup, contact and DSR forms. | Global (edge-resolved) | Challenge solve tokens, IP, UA. Does not receive form contents. | cloudflare.com/cloudflare-customer-dpa |
Google Tag Manager / Analytics (opt-in) Analytics | Aggregated product analytics loaded only when the visitor grants analytics consent in the cookie banner. | United States | Page views, UTM, truncated IP, device class, consent-category flags. | business.safety.google/gdprprocessorterms |
International transfers
Primary storage is in India (Mumbai). AI reasoning may route to Google, OpenAI or Anthropic endpoints in the United States over encrypted TLS connections, governed by the vendor DPAs linked above. We rely on each vendor’s published safeguards and contractual commitments; no data is transferred to countries restricted under DPDP §16 notifications.
Object to a processor
If you have a specific objection to any processor above, email privacy@aishare.in. For statutory data-subject requests use the DSR form.
AIShare is NOT a SEBI-registered Investment Adviser or Research Analyst. The processors above support operation of an informational platform only; none are engaged to provide regulated financial advice.