Privacy Policy

Effective date: Pending confirmation

TradeGrows is an India-focused website whose financial-market news, listicle and educational-guide library is being rebuilt. This policy explains the information that may be involved when you visit the public website, email us, or use the private administrator area if you are authorised to do so.

Open review items: TradeGrows has not identified a verified legal operator here. The responsible operator identity, applicable mandatory Indian privacy terms, and grievance role and process are unresolved for owner and later professional review. This page does not claim legal approval.

For privacy questions, corrections or requests, the designated address is help@tradegrows.com. Mailbox delivery has not been verified, so do not treat this address as a confirmed service-level commitment until it is tested and assigned to a responsible person or role.

Information involved in a public visit

When your browser requests a page, ordinary web infrastructure can process technical request information. Depending on the actual hosting configuration, this may include an IP address, request time, requested path, browser or device information, referrer information, and error or security events.

TradeGrows has not verified the exact production server-log fields, access controls, log retention, backup handling, or deletion process. A specific retention period is not claimed here; these practices are under review against the actual hosting configuration.

The public homepage was observed without a sitewide analytics tag and without a cookie being set during anonymous checks. This does not establish that no server-side processing or future optional technology exists. Any analytics, advertising, affiliate, monitoring, or similar feature must be assessed and added to this policy before activation.

Messages sent to the help inbox

There is no public contact form, public visitor account, newsletter, payment feature, or public login currently evidenced in the local brief. If you email help@tradegrows.com, the message may contain information you choose to provide, such as your name, reply address, message text, attachments, or a privacy request. TradeGrows may use that information to read and respond to the message, investigate a factual correction, handle editorial feedback, or locate a privacy-related request.

Please do not email passwords, one-time codes, account credentials, bank or card details, or unnecessary sensitive information. The mail provider, people with access, processing location, retention period, deletion practice, security controls, and confirmed mailbox delivery status remain pending verification.

Private administrator access

TradeGrows has a private, unlinked /admin area for authorised editorial administration. It is not a public reader account and is not offered as a visitor sign-up feature. Administrator sign-in uses Manus OAuth as an existing backend dependency.

The current source observation records these administrator-only browser items:

• __Host-oauth_state: a one-time OAuth state cookie with a 600-second (Max-Age=600) lifetime.
• app_session_id: a server session cookie with a nominal one-year maxAge; it is marked HttpOnly, SameSite=None, and Secure when served over HTTPS.
• Administrator layout state: user display state and sidebar width are stored in browser localStorage. If an authorised editor changes the sidebar, source code writes a sidebar_state preference cookie with Path=/ and a seven-day maximum age; the precise production behaviour still needs confirmation.

These observations describe the inspected application source, not a promise that settings will remain unchanged. Production cookie scope, expiry, deletion behavior, OAuth information exchanged, access permissions, session invalidation and cross-site security implications remain under review. Ordinary public visitors do not need administrator cookies to read the public homepage.

Google-hosted fonts and market observations

The public HTML was observed requesting the Manrope and Newsreader fonts from fonts.googleapis.com and fonts.gstatic.com. A browser request to a font service can disclose technical request information, such as an IP address and browser details, to that service. Its processing terms, retention, location and any applicable notice or consent treatment remain pending verification.

The public site displays status-labelled market observations. The observed implementation makes the market request server-side through an existing Manus Data API endpoint using a symbol, region and range, and stores dated snapshots. The verified observation is that no visitor email or account ID is explicitly passed in that market request. The exact provider identity, fields sent, returned data, storage location, access, retention, transfer path, and contractual role remain pending verification. Market observations are informational and are not personal investment recommendations, executable quotes, or buy/sell/hold instructions.

How information is used

Subject to verification of the actual systems and applicable law, relevant information may be used to:

• deliver and troubleshoot the public website;
• protect the website and investigate suspected misuse or technical incidents;
• maintain authorised administrator sessions;
• read and respond to help-inbox messages and privacy requests;
• operate the server-side market-observation feature; and
• address a genuine legal, security, or rights-related issue when required or permitted.

The lawful basis or other processing grounds, notice and consent requirements, and any required children’s-data treatment have not been finalised. They must be matched to the actual processing and applicable law during legal review; this draft does not invent a legal basis.

Service providers and disclosures

The website may involve hosting, authentication, font delivery, email, and market-information services. The public site remains on a Namecheap VPS; Manus OAuth and the Manus Data API are observed backend dependencies, not a statement that the public site is hosted by Manus. TradeGrows has not verified the legal identities of these providers, their processing roles, the data shared with each, access arrangements, or storage and transfer locations.

Information may be disclosed when necessary to operate the relevant service, respond to a lawful request, protect the website or another person, or handle a genuine security or rights issue, subject to applicable law. No particular provider, transfer, court, jurisdiction, or government request procedure is asserted here.

If TradeGrows adds analytics, advertising, affiliate referrals, payments, newsletter sign-up, public accounts, or a contact form, the collection, recipients, cookies, notices, and controls must be reviewed and this policy updated before launch. No affiliate or advertising activity is currently evidenced in the brief.

Retention, deletion and security

TradeGrows has not verified production retention periods or criteria for server logs, OAuth and administrator records, local email, market snapshots, backups, or other records. It has also not verified deletion or de-identification practices, legal holds, or backup expiry. Those facts are pending review and are not replaced by the ten-day value in the local template.

The production security controls for the VPS, administrator access, OAuth integration, email, storage, backups, and API connections are also pending verification. No particular encryption, monitoring, access-control, incident-response, or other safeguard is promised by this draft. No online transmission is risk-free; please avoid sending sensitive financial information by ordinary email.

Storage, access and transfers

The storage and processing locations for web requests, help-inbox messages, administrator records, market snapshots and backups have not been confirmed. Cross-border access or transfers, applicable restrictions, and safeguards have not been confirmed either. TradeGrows’ India-focused subject matter and the reference to Haryana as a public region do not establish an office address, storage location, or legal jurisdiction.

Human-review flag: Confirm the operator identity, hosting and provider locations, transfer arrangements, records of access, and any terms required for publication under applicable Indian law before replacing this note with precise information.

Your questions and requests

You may write to help@tradegrows.com to ask a privacy question, report a concern, request correction of information you supplied, or ask what can be done with a particular message or record. Include enough context to help locate the matter, but do not send identity documents or sensitive financial information unless TradeGrows first provides an appropriate secure method.

Requests may require reasonable identity verification and may be limited by applicable law, technical feasibility, another person’s rights, or records that must be retained. The responsible privacy or grievance role, request-verification method, response time, escalation route, and any legally required rights wording are pending verification. Because mailbox delivery is untested, the final published page must confirm a working channel and responsible owner before relying on it for privacy or grievance requests.

The site does not currently evidence visitor registration, payments, or child-directed features. Any future feature involving children’s personal information requires separate design, notice, permission and safeguard review before launch.

Changes to this policy

TradeGrows may revise this policy when its systems, information practices, or applicable requirements change. The published version should display its approved effective date. Material changes to data collection, cookies, providers, or public features should be reviewed and reflected in this policy and any required notice or control before the feature is enabled.