Last updated: June 15, 2026 | Effective: June 15, 2026
Summary: DalalAI ("the Platform") is an AI-powered stock analysis tool for educational purposes. We collect minimal personal data (Google account info for login), store preferences locally on your device, and never sell your data to third parties. Payments are processed securely by PhonePe — we never see your payment credentials. If you use the Developer API, we store your API key and request logs for security and usage tracking.
DalalAI is operated by Viplav Anand ("we", "us", "our") as a personal project. The Platform is hosted on Firebase (Google Cloud) and is accessible at dalalai.com.
Contact: [email protected] | Phone: +91 93478 98545, +91 77805 39176
When you sign in using Google, we receive:
We do not receive or store your Google password.
If you choose to upgrade to a paid plan, you may provide a phone number for payment verification. This is stored in your Firestore user document and is used solely for transaction verification.
We store your preferences and app state locally on your device using browser localStorage:
This data never leaves your browser unless you explicitly use the export feature.
The following is stored in Google Firestore (cloud database):
| Collection | Data Stored | Purpose |
|---|---|---|
| users | Name, email, role, tier, login timestamps | Authentication & access control |
| payments | Transaction ID, amount, plan, timestamp | Payment records |
| pending_payments | Transaction ID, status | In-flight payment tracking |
| api_keys | Hashed API key, user ID, creation date, usage count | Developer API authentication |
| api_usage | Endpoint, timestamp, response status, user ID | API usage tracking & rate limiting |
We use Google Analytics to collect anonymous, aggregated usage data:
This data is anonymized and cannot be used to identify individual users.
If you use the DalalAI Developer API, we additionally collect:
API request logs are used for rate limiting, abuse prevention, usage analytics, and debugging. We do not log request bodies or response payloads.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| User authentication | Google account info | Consent (Google Sign-In) |
| Access control (RBAC) | User tier, role | Legitimate interest |
| Payment processing | Phone, plan, amount | Contractual necessity |
| App personalization | localStorage preferences | Consent |
| Platform improvement | Anonymous analytics | Legitimate interest |
| API authentication | Hashed API key, user ID | Contractual necessity |
| API rate limiting | Request count, timestamps | Legitimate interest |
| API abuse prevention | IP address, request patterns | Legitimate interest |
Payments are processed by PhonePe (PhonePe Private Limited), a RBI-licensed payment aggregator. When you make a payment:
PhonePe's privacy policy: phonepe.com/privacy-policy
The Platform uses the following third-party services:
| Service | Provider | Purpose | Data Shared |
|---|---|---|---|
| Firebase Auth | User authentication | Google account info | |
| Cloud Firestore | User data storage | Profile, role, payments | |
| Firebase Hosting | Web app hosting | None (static files) | |
| Google Analytics | Anonymous usage analytics | Anonymized usage data | |
| PhonePe | PhonePe Pvt. Ltd. | Payment processing | Transaction details |
| Yahoo Finance | Yahoo | Stock data (server-side) | None (API queries only) |
| Google Fonts | Typography | IP address (font loading) | |
| Font Awesome | Fonticons Inc. | Icons | IP address (CDN loading) |
We do not sell, rent, or share your personal data with any third party for marketing purposes.
While we implement industry-standard security measures, no internet transmission is 100% secure. We cannot guarantee absolute security.
You have the right to:
To exercise any of these rights, email us at [email protected].
DalalAI does not use first-party cookies. However:
When you first visit DalalAI, a consent banner asks whether you accept anonymous analytics tracking via Google Analytics. Your choice is stored locally in your browser (localStorage) and respected on all subsequent visits.
You can change your analytics preference at any time:
window._analyticsConsent.revoke() to deny, or window._analyticsConsent.grant() to allowWe use Google's Consent Mode v2 to ensure analytics are fully blocked until you explicitly opt in.
The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 18, we will delete it promptly.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Platform after changes constitutes acceptance of the revised policy.
This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts in Bengaluru, Karnataka, India.
For any privacy-related questions, data requests, or concerns:
We aim to respond to all privacy requests within 30 days.
DalalAI is NOT registered with SEBI (Securities and Exchange Board of India) as an Investment Advisor, Research Analyst, or Portfolio Manager. All content — including AI signals, scores, and analytics — is for educational and informational purposes only and does not constitute investment advice.