Privacy Policy
Effective 30 October 2026
On this page
1. Who handles your data2. Data we collect3. Sources and purposes4. Early-access form5. Analytics and cookies6. Sharing7. Retention8. Security9. Your choices and requests10. International processing11. Children12. Changes and contact1. Who handles your data
Chart in Motion handles the information described in this policy. Privacy questions and requests can be sent to support@chartinmotion.com. You can reach us through Contact & Support.
2. Data we collect
| Category | Examples | Why it is used |
|---|---|---|
| Early-access data | Email address, the page you signed up from, the paid plan you said you were interested in (if any), campaign tags in the link you followed (if any), and the time you signed up | Send your invite, plus a launch notice. No newsletter. |
| Account data | Email, password hash (none if you only use Google), when the account was made, whether and when your email was confirmed, sign-in session records | Create, secure, and operate accounts |
| Google sign-in (only if you use it) | Your Google account ID and email address, and Google’s confirmation that the email is yours | Sign you in and link your account. We ask Google only for your email address and your Google account ID. We never use Google data for ads. |
| Free preview | Without an account, or before you confirm your email: a random ID in a cookie (or your account ID), a hashed form of your network address (the first three parts of an IPv4 address, or the first four groups of an IPv6 address), and the charts you opened that day | Give 10 free charts a day (India time) and stop the limit being dodged. |
| Support data | Name, email, subject, message, attachments you choose to send | Reply, diagnose issues, and keep a service record |
| Product data | Your stars, columns and filters on the curated watchlists, and other saved preferences. Your own watchlists and the trend lines you save in them. | Provide requested product features |
| Billing data (paid plans only) | Your plan, its dates and renewal status; the payment, subscription, order and invoice IDs from Razorpay or PayPal; amounts, currency, payment status and refunds; for Razorpay plans, the kind of payment method (such as card, UPI or bank mandate); in India, the billing name, address, state, PIN code and GSTIN (if any) you enter; with PayPal, the name on your PayPal subscription; your invoices and credit notes; and the reason you give when you cancel | Take payments, give paid access, issue invoices and credit notes, handle refunds, and meet tax law. Card numbers, bank logins and UPI PINs go only to Razorpay or PayPal; we never receive them. |
| Listen (signed-in members, when it is on) | How many characters you listened to in the last 24 hours, kept under a hashed form of your account ID, and the narration plan for each report you listen to (the report text split into spoken parts, linked to your account) | Apply the Listen limit (200,000 characters in any 24 hours) and play the report. The speech is made on our own server; no outside speech service receives the text. Audio is cached by sentence, not by person. |
| Technical data | IP address, browser type, request time, the pages and charts you request, error and security logs | Operate, protect, and debug the service |
Do not send us brokerage credentials, trading account secrets, or payment-card details. You enter payment details only in Razorpay’s or PayPal’s checkout.
3. Sources and purposes
We receive data from you, your browser, the product, our payment providers, and service providers acting on our behalf. We use it to run your account and sign you in (including with Google); confirm your email address; send the invite, launch notice, confirmation and password-reset emails you asked for; keep your watchlists and settings; take payments for paid plans and send their invoices, credit notes and refunds; apply the free-preview and Listen limits; reply to support requests and grievances; keep the service secure and fix faults; and meet legal duties. We do not sell data or show ads, and we use no analytics service.
4. Early-access form
The form submits to Formspree; that provider processes the email on our behalf and emails each sign-up to our inbox, under its own terms. We keep your email on the early-access list. We use it for your invite, plus a launch notice. No newsletter. Launch-notice emails carry an unsubscribe link, and you can also email support@chartinmotion.com to be removed. Account emails (sign-up confirmation and password reset) have no unsubscribe link, because you need them to use your account. The form works with JavaScript off too. Prefer email? Write to support@chartinmotion.com. Joining the list does not create a paid account.
5. Analytics and cookies
The marketing site uses no analytics service and sets one cookie of its own, cim_seen, described below. Every minute we count the current day’s visits from our own server logs, and just after midnight we store the finished day: the pages viewed (including the first and last page of a visit and the hour), whether a visit viewed one page or several and roughly how long it lasted, the site that sent you and the broad kind of source it is (such as search or social), campaign tags in the link, the kind of device (phone, tablet or computer), your browser and operating system, the country worked out from your network address while counting, links that led to a missing page, visits by search-engine and AI crawlers, and clicks on the Open App button and other links into the app and forms sent from the site, each of which sends one empty request to our server, including how many came from each source and country. We keep only these daily totals. To count each visitor once a day, the counter combines your network address and browser details with a random value that is thrown away when the count is done, so the totals cannot be traced back to you or linked across days. To tell new visitors from returning ones, the site sets the cim_seen cookie. It holds only the date of your last visit, with no ID, and lasts 13 months. Once a day the site also tells our server, in one empty request, whether you are new or returning, the size class of your screen and your browser’s language; these are added to the daily totals too. If your browser sends Do Not Track or Global Privacy Control, the site sets no cookie and sends none of this, and clearing the site’s data removes the cookie. We do not follow you across other sites. If you followed a link with campaign tags, the page keeps those tags in your browser tab until you close it and sends them with the early-access form. If you switch between the India and US versions of the site, or close that notice, your browser remembers it on this device; it is never sent to us, and clearing the site’s data removes it. The app sets these cookies: one keeps you signed in (up to 30 days after your last visit, 90 days at most), one counts a guest’s free charts (30 days), one keeps a friend’s invite code until you create an account (30 days), one protects Google sign-in (10 minutes), and one, cim_analytics_visit, for the app’s own usage counts (until 30 minutes after you last use the app). While you use the app, signed in or as a guest, it counts on our own server which kinds of page and feature are opened, broad error types and loading speed, with a random ID for each browser tab (kept in that tab until you close it), the country and kind of device worked out from your connection, and a scrambled form of your account or guest ID; the network address itself is not kept in these counts. We keep them with no set end date, so we can compare use of the product over time; counts made before 30 October 2026 are still deleted after 7 days. If you ask us to delete your account, we delete the counts under your account ID with it. The cim_analytics_visit cookie is our own, shared by chartinmotion.com and app.chartinmotion.com, and holds only a random visit ID and the broad kind of link that brought you (such as search, social or one of our campaign names). The app sends these counts for everyone who uses it, including browsers that send Do Not Track or Global Privacy Control. To object, write to support@chartinmotion.com, and we will delete the counts under your account. We use no advertising cookies and nothing that follows you to other sites.
6. Sharing
We may share limited data with hosting, email, form, payment, security and product infrastructure providers that help operate the service; professional advisers; authorities where lawfully required; or a successor in a genuine business transfer. The providers we use are Vultr (hosts the website and the app), Formspree (early-access and contact forms), Resend (receives email sent to support@chartinmotion.com and sends sign-up confirmation and password-reset emails), OVHcloud (hosts our backup machine), Dropbox (stores copies of our backups), Google (sign-in, only if you choose it), Razorpay (takes payments in India) and PayPal (takes payments outside India). When you subscribe, Razorpay or PayPal receives the plan, the amount and a reference that links the payment to your account, and Razorpay’s checkout is also given your account email. You enter your card, bank or PayPal details with them, and each handles those details under its own terms. Section 10 says where they process data. We do not sell personal data.
7. Retention
We keep data only as long as needed for the stated purpose, account operation, security, dispute handling, and legal requirements. Retention periods: early-access records until the early-access programme ends or you unsubscribe, and at most 12 months; support records 12 months after the last message; account records while your account is open, and up to 30 days after you ask us to delete it; server logs (IP address, time, the page or chart requested, errors) 180 days, as directions from CERT-In, India’s cyber-security agency, require, and then deleted; billing records (payments, invoices, credit notes and refunds) as long as tax and accounting law requires, including after your account is deleted; free-preview counts 2 days; Listen counts 2 days; and Listen narration plans until you close the reader, and at most 7 days; the app’s usage counts as section 5 describes. The guest cookie lasts 30 days, and its record is deleted 2 days after it ends.
Backups: each night our server saves a full copy of the app’s database. It includes account emails, password hashes, sign-in sessions, watchlists, settings, saved trend lines and billing records. The server keeps the last 3 nightly copies, so each is deleted after about 3 days. We may also copy them, over an encrypted connection, to our own backup machine, which keeps the last 2 and stores them in our Dropbox account. Data you delete stays in these copies until they rotate out, and Dropbox keeps deleted files for a limited time set by our plan before removing them for good.
8. Security
We store passwords only as salted Argon2 hashes. Sign-in, reset and email-confirmation codes are stored only as hashes. The app works only over HTTPS, and its cookies are Secure and HttpOnly. Guest IDs and network prefixes are stored as hashes. Access to the servers and backups is limited to the operator. No online service is perfectly secure. If a breach affects your personal data, we will email you without delay. We will say what happened, what it may mean for you, what we are doing about it, and what you can do. We will also report it to CERT-In and, once the DPDP rules apply, to the Data Protection Board. Send suspected vulnerabilities to support@chartinmotion.com; the machine-readable contact is in security.txt.
9. Your choices and requests
You can ask us to: see the personal data we hold about you and who we shared it with; correct or update it; delete it; stop using it where you gave consent; and name another person to use these rights for you if you die or cannot act. Email support@chartinmotion.com from your account email with “Privacy request” in the subject. If you write from another address, tell us your account email. We reply within one month. If you withdraw consent or delete your account, we stop the parts of the service that need that data. This does not undo what we did before. If the law makes us keep some data, we will tell you what and why.
To ask us to delete your account and its data, email support@chartinmotion.com from your account email. If you pay for a plan, cancel it in Plans first. We act on it within 30 days. Copies in backups go as the backups rotate out, and billing records are kept as section 7 says.
If our answer does not settle a personal-data complaint, write to our Grievance Officer (section 1). The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 apply now, and under them the Grievance Officer must resolve your grievance within one month. Once the Data Protection Board of India’s complaint process is in force under the Digital Personal Data Protection Rules 2025, you can also complain to the Board. Those rules start in phases, and the Board’s complaint process is expected from 13 May 2027 unless the government brings it forward.
10. International processing
Some providers process data outside India. Formspree processes form submissions on infrastructure in the United States. Resend, a United States company, receives email sent to support@chartinmotion.com and sends our account emails. Vultr hosts the website and the app on a server in India. Google, a United States company, runs Google sign-in. OVHcloud, a French company, hosts our backup machine, and Dropbox, a United States company, stores copies of our backups. Razorpay, an Indian company, takes payments in India. PayPal, a United States company, takes payments from outside India.
11. Children
The service is for adults (18+). We do not knowingly collect personal data from children; if you believe a child has provided data, email support@chartinmotion.com and we will delete it.
12. Changes and contact
Material changes will update the effective date and, where required, be brought to users’ attention. Changes on 30 October 2026: the cim_seen cookie and the once-a-day new or returning count, the fuller daily visit totals, and the app’s usage counts, now kept with no set end date instead of 7 days, and made for everyone who uses the app, with the Usage counts switch removed. Changes on 29 October 2026: Razorpay and PayPal named as payment providers, the billing data we keep, Resend named as the service that receives support email and sends account emails, the daily visit count from our server logs, the cookie that keeps a friend’s invite code, the app’s own usage counts and their 30-minute visit cookie (a clarification), and the Usage counts switch with the cookie that remembers it. Changes on 11 October 2026: backups, the full list of providers, read-aloud data, server logs kept for 180 days, and when the Data Protection Board takes complaints. Contact support@chartinmotion.com with questions.