Privacy Policy

Last updated: 23 October 2026

This policy explains what Profit Prism ("we", "us") — operated by Ankush Babbar (individual), Noida, Uttar Pradesh, India — collects when you use Profit Prism Journal and this website, why, and what you can do about it.

What we collect

• Account details — your email address and, optionally, a display name. If you sign in with a password, Supabase Auth stores only a secure hash of it; we never see or store your raw password. If you sign in with a one-time email link, no password exists at all.
• Google sign-in — if you choose "Sign in with Google", Google shares your name, email address, and profile picture with us. We never receive your Google password.
• Mobile number — optional in My Account, and required when you apply for free access through a partner broker. We use it to contact you about your account or application, and occasionally to tell you about Profit Prism updates and offers. You can remove it from My Account at any time, or ask us to.
• Journal data — the trades, notes, tags, strategies, discipline logs, diary entries, and screenshots you choose to enter, and the drawings you save on the PPM Chart (lines, levels, notes).
• PPM alerts — the markets, timeframes and events you choose, your time zone (so message times are in your local time), and, if you connect Telegram, your Telegram chat ID and username so the alerts can reach you. Disconnect any time from the app or by sending /stop to the bot.
• Payments — when you buy a plan, your card, UPI, or bank details are entered on Razorpay's own checkout and never reach our servers. We keep a record of the plan, amount, date, and Razorpay's order and payment IDs so we can activate your plan, issue receipts, and handle support requests.
• Broker-referral applications — the broker or exchange you opened an account with, your account ID there, and the two proof screenshots you upload, used only to verify your application.
• Email sign-ups — if you enter your email on our website to get the free Trading Rules Checklist (or another free resource), we keep that email address, which form you used, the page you were on and any campaign tags in the link you followed (such as utm_source). We use it to send you the resource and occasional trading lessons and Profit Prism updates. To stop, reply to any of our emails or write to support@profitprismx.com and we'll remove your address. This list is separate from your account; signing up doesn't create one.
• Sign-ins and devices — for each device you sign in on, the browser and system it reports (e.g. "Chrome on Android"), the first part of its network address (e.g. 49.36.x.x, never the full address), and when it signed in and was last used. We use this to keep an account to two devices at a time, to show you your devices in My Account, and to spot a shared or misused account. You can sign out any device from My Account.
• Referrals — if you refer someone or were referred, a record linking the two accounts and any proof screenshot you submit, so rewards can be verified.

How it's stored and who can see it

All data lives in a Postgres database and file storage operated by Supabase, protected by row-level security so that other users can never read or change your data.

So that your journal can be restored after a failure, an encrypted copy of the database is made every day and kept for 30 days in a private GitHub repository. The copy is encrypted before it leaves our systems, and only Profit Prism holds the key. Deleting your account removes your data from the live database straight away; it leaves the backups as those copies expire, within 30 days.

A small number of Profit Prism staff can see account-level information — your email, name, mobile number, plan and payment history, referral claims, and broker-referral applications (including their screenshots) — in order to manage billing, verify applications, and answer support requests. Our staff tools do not display the contents of your trading journal.

What we don't do

We don't sell your data, share it with advertisers, or use it to train any AI model.

Third parties

• Supabase — database, authentication, and file storage
• Render — application hosting
• Resend — sends our transactional emails (payment receipts, support-ticket confirmations, and two emails about your free trial: one 2 days before it ends and one when it ends); it receives your email address and the content of those emails, nothing else; see Resend's privacy policy
• Hostinger — hosts our support@ and hello@ mailboxes; emails you send us are stored there
• Razorpay — payment processing; see Razorpay's privacy policy
• Google — "Sign in with Google" (Google Identity Services), only if you choose to use it; see Google's privacy policy
• Binance and Bybit — public market prices for the PPM Chart. Our server fetches price candles from them, and while the chart is open your browser connects directly to Binance's public price feed, so Binance sees standard connection metadata (IP address, browser). No account, journal or personal data is sent to either.
• Telegram — only if you connect it for PPM alerts: our bot sends the alert messages to your chat, so Telegram handles those messages; see Telegram's privacy policy
• Umami — privacy-friendly website analytics (EU-hosted). It counts page visits and a few actions such as starting checkout, without cookies and without identifying you: it receives the page address (with only campaign tags like utm_source kept), the referring site, browser, device type and country. It never receives your account, journal or payment data; see Umami's privacy policy
• Sentry — error monitoring (EU-hosted). When something breaks on our server, it receives the error details and the address that failed (without query parameters). It does not receive your email, IP address, request contents or journal data; see Sentry's privacy policy
• GitHub — stores our encrypted database backups (see above); GitHub can't read them
• unpkg, cdnjs — static assets (the Supabase JS SDK, the chart library, a CSV-parsing library; our fonts are served from our own domain); these see standard web request metadata (IP address, browser) but none of your account or journal data

Cookies and local storage

We use your browser's local storage to keep you signed in and to remember small preferences such as light/dark mode and your chart settings. We don't use tracking or advertising cookies — our analytics (Umami) works without cookies. Razorpay's checkout and Google's sign-in button may set their own cookies when you use them.

Your controls and rights

• Export your trades as CSV at any time.
• Edit your name and mobile number in My Account.
• Delete individual trades, or wipe all journal data via My Account → Clear My Data.
• Delete your account entirely via My Account → Delete My Account. This removes your account, journal data, and uploaded screenshots. Razorpay keeps its own transaction records as payment regulations require.
• Email us to access, correct, or delete any personal data we hold about you, or to stop receiving updates on your mobile number or email.

Changes

We may update this policy. When we make a material change, we'll update the date at the top of this page.

Contact

Questions or requests: support@profitprismx.com