Privacy Policy

1. Who operates StratLab

Databased Investments (DBI) operates StratLab. Contact ayush@databasedinvestments.com about privacy, access, correction or deletion requests. Please do not send passwords, Google codes, bank credentials or identity documents with an initial request.

2. Using the free planner

You can calculate a plan without signing in or asking DBI to contact you. The planner processes the household inputs you supply, including ages, income, expenses, savings, liabilities, insurance, retirement accounts, goals and projection choices.

The service is intended for adults planning their household. Only provide family information that you are entitled to share and that is needed for the plan; the service does not offer child accounts.

3. Signing in and saving

Google sign-in supplies your verified email address, Google account identifier, name and profile picture. We use these details to identify your account and control access to saved plans. Saved versions contain their inputs, assumptions, calculation date and results.

Session cookies and browser storage support sign-in, unfinished work and display preferences. Work left on a shared device may remain available in that browser. Sign out and clear browser data when appropriate. Blocking storage can affect saving and recovering your work.

4. Optional DBI requests and sharing

A DBI request contains your contact details, question, preferred contact time, consent choices and the source of the enquiry, such as the page or referral campaign. You choose separately whether DBI may contact you and whether to share a selected plan version. Confirming your email does not subscribe you to marketing.

Only staff with the required permissions can access a request. Alert emails contain a request reference and sign-in link rather than the full financial plan. Receiving an alert does not grant access to that request.

You can withdraw contact permission and plan sharing from your request page while continuing to use the free planner. Withdrawing sharing removes that request's financial snapshot and access to it; it does not delete your own saved plan. Request and permission history may remain so we can respect and account for withdrawals. Previously delivered messages cannot be recalled.

5. Trading features

If you use the separate trading tools, we process saved strategies, backtest inputs and results, stock-selection preferences, notification choices and subscription records. Enabled notifications use your saved configurations. Google sign-in does not give the planner access to your Gmail inbox. Owner-configured Gmail sending is a separate operational permission for trading notifications.

6. Service providers and technical information

Railway hosts the application, databases and backups. Google handles sign-in, Gmail delivers configured trading notifications, and Zoho delivers DBI confirmation and alert emails. Dodo handles configured paid trading checkout and payment events.

Some pages load interface assets from jsDelivr or cdnjs, which receive the network requests needed to deliver those files. If enabled, an optional expense-classification provider processes submitted expense descriptions and amounts; ordinary plan calculation does not require it. These providers may process data outside India.

Application and hosting systems process request, error, timing and abuse-prevention information. Access controls and private links protect selected resources, but no system can guarantee absolute security. Third-party websites linked from the app have their own privacy practices.

7. Retention

Saved plans and version history do not expire simply because you stop visiting. DBI enquiries, including requests awaiting email confirmation, do not automatically expire. Confirmation codes last 15 minutes; requesting another code resumes the same enquiry. Active adviser invitations remain open until used or revoked.

Untouched account drafts are cleaned up after 90 days. Downloadable report jobs expire after 24 hours; this does not delete the source saved plan. Temporary transfer records, access links and request counters have separate expiry periods. Backups have their own retention schedule.

8. Access, correction and deletion

Use the available plan and sharing controls, or email ayush@databasedinvestments.com to request access, correction or deletion. We may need to verify that the request is yours. Account deletion is handled through this contact; it is not currently a one-click process.

An account-level request must also account for any shared identity, trading and transaction records. We will explain any records that need to be retained and how the request is handled. Deleting browser data alone does not delete server-side saved plans or enquiries.

9. Updates

We will date updates to this notice and explain material changes to processing before relying on a new permission. This notice does not replace your specific DBI contact and plan-sharing choices.