Privacy Policy

MunafaKit (“we”, “us”, or “our”) operates the MunafaKit algorithmic trading platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using MunafaKit, you consent to the practices described in this policy. If you do not agree, please discontinue use of the platform.

Account Information

• Name and email address (via Google OAuth)
• Zerodha Kite API access token (for broker connectivity)
• Trading preferences and configuration settings

Trading Data

• Trade history (entries, exits, P&L) generated through the platform
• Trading rules and engine configurations you create
• Signal history and backtest results
• Portfolio and position data retrieved from your linked broker

Technical Data

• Browser type, IP address, and device information
• Usage patterns and feature interaction logs
• Error logs for debugging and platform improvement

• Execute and monitor trades on your behalf (paper or live mode)
• Generate AI-powered trading signals using your configured strategies
• Display your portfolio, positions, and performance analytics
• Send trade alerts and notifications (if configured)
• Improve platform reliability, performance, and features
• Comply with legal and regulatory obligations

MunafaKit connects to your Zerodha Kite account via the official Kite Connect API. We store your Kite access token to execute trades and retrieve market data on your behalf.

• Access tokens expire daily (~6 AM IST) and must be refreshed by re-authenticating
• We never store your Zerodha login credentials (username or password)
• You can revoke access at any time by unlinking your Kite account in Settings
• We do not share your broker tokens with any third party

When AI-powered signals are enabled, anonymised market data (price, volume, indicators) is sent to AI providers (Anthropic Claude, OpenAI, etc.) to generate trade recommendations.

• No personally identifiable information is sent to AI providers
• Only market data (OHLCV, technical indicators) is shared for analysis
• You can disable AI signals and use rule-based-only mode at any time

• All data is stored in a PostgreSQL database with encryption at rest
• Broker tokens are stored securely and never exposed in API responses
• Authentication uses JWT tokens with 7-day expiry
• All communication is over HTTPS
• We implement rate limiting and circuit breakers to prevent abuse

We do not sell, rent, or trade your personal information. We may share data only in these cases:

• Broker execution: Order details sent to Zerodha for trade execution
• AI providers: Anonymised market data for signal generation
• Legal requirements: If required by law, regulation, or legal process

• Account data is retained as long as your account is active
• Trade history and performance data is retained indefinitely for analytics
• Activity logs are retained for 90 days
• You may request deletion of your account and associated data at any time

• Access and download your trading data
• Correct inaccurate account information
• Delete your account and all associated data
• Revoke broker API access at any time
• Opt out of AI-powered signal generation
• Disable notifications and alerts

We use essential cookies for authentication (JWT session tokens) and basic functionality. We do not use advertising or tracking cookies. No data is shared with ad networks.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, please reach out via our contact form.