Privacy Policy

This Privacy Policy explains how Zero Finance (“we”, “us”, “our”) collects, uses, shares and protects personal data when you use the website, web application, game, simulator, leaderboards, leagues and related features (the “Platform”). It should be read with the Terms of Service, whose definitions apply here.

For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Information Technology Act, 2000 and its rules, we act as the data fiduciary for personal data processed through the Platform.

By creating an account, signing in or otherwise using the Platform, you consent to the processing of your personal data as described in this Policy. If you do not agree, please do not use the Platform.

The Platform is a Simulated Educational Tool. We are NOT a SEBI-registered broker, no real money is traded, and we provide ZERO financial or investment advice. Because no real transactions take place, we have no need for, and do not collect:

• bank account, card, UPI, wallet or other payment details;
• demat, trading or broker account numbers or credentials;
• PAN, Aadhaar, passport or other government identity numbers;
• KYC documents, income, net-worth or investment-experience information; or
• contacts, messages, files or other content from your Google account or device.

Do not send us any of this information. If you do, we may delete it without notice, and we are not responsible for any consequence of your having shared it.

Your virtual balance, trading cash, game points and portfolio are simulation data. They are not financial information about you and do not reflect any real holding.

Account data. Your email address and, if you register with a password, a credential that is stored by our authentication provider in hashed form (we never see or store your password in readable form). If you sign in with Google, we receive the basic profile information Google shares with us for sign-in: your email address and, where provided, your name and profile picture.

Simulation and activity data. Your virtual balance and Game Points, simulated orders, holdings and trade history, watchlist, quiz results and concepts encountered, streaks, faction pledge, league memberships and codes, leaderboard standing, generated share cards, and records of promotional or partner credits.

Referral data. If you use a partner or referral link, a record that you started the referral, and any funding confirmation reported to us by the partner for crediting your Virtual Currency. We do not receive your account details with the partner.

Technical and usage data. Your IP address, device and browser type, operating system, language, referring pages, pages and features used, timestamps, and diagnostic and security logs.

Storage data. Small items stored in your browser, such as your sign-in session and your light/dark theme choice. See “Cookies, Local Storage and Analytics”.

Communications. Anything you send us, such as a support request or grievance, and our replies. Messages sent through the in-app Feedback & Support form (your name, email address and message) are delivered to us by Web3Forms, a form-delivery service, and are used only to respond to you.

If you choose “Continue with Google”, you are redirected to Google to authenticate. Google tells our authentication provider who you are, and we create or sign in to the matching account on the Platform. We request only the basic profile and email information needed to do that.

We do not read your email, contacts, calendar, files or any other Google data, and we do not post to your Google account. Google's handling of your data is governed by Google's own privacy policy. You can review and revoke the Platform's access at any time from your Google Account settings.

We use personal data to:

• create and secure your account, authenticate you and restore your session;
• run the simulation: maintain your virtual wallet and portfolio, process simulated orders, grade quizzes and record progress;
• operate leaderboards, leagues, watchlists and share cards;
• detect and prevent fraud, abuse, bots, exploitation and security incidents, and enforce the Terms;
• operate, maintain, measure and improve the Platform and its performance;
• communicate with you about your account, security, changes to our terms and policies, and support requests;
• credit partner promotions to your Virtual Currency; and
• comply with law and respond to lawful requests from authorities.

We do not use your personal data to give personalised investment advice, because we do not give investment advice. We do not make decisions about you that have legal or similarly significant effects, and the Platform's automated features (such as quiz grading and the “Roast”) operate only on simulation data and only within the simulation.

We process personal data on the basis of your consent, given when you register or sign in and by continuing to use the Platform, and for the “legitimate uses” permitted by the DPDP Act, such as complying with law, responding to a medical or security emergency, and performing functions the law requires.

You may withdraw consent at any time by deleting your account or contacting us. Withdrawal does not affect processing done before it, and it means we can no longer provide features that depend on your data, including your account.

Leaderboards display your simulated results next to a masked version of your email address or a display name, not your full email. Members of a league you join can see your name or masked identifier, your standing and your simulated holdings within that league.

Share cards you create display simulated positions and may be seen by anyone you share them with. Share them only if you are comfortable doing so.

We use browser local storage and similar technologies that are strictly necessary to keep you signed in and remember your theme preference. They are not used to track you across other websites.

Where the Platform is configured with Google Analytics, we also use it to measure traffic and feature usage in aggregate. Google Analytics may set cookies and collect your IP address and device and usage information, which Google processes under its own terms. You can block cookies in your browser settings or use Google's opt-out tools, although parts of the Platform may not work as intended if you block the storage that keeps you signed in.

We do not sell your personal data to advertisers or data brokers. We share it only as follows:

• Service providers (data processors) that act on our instructions and are bound by confidentiality and security obligations: authentication and database hosting, application hosting and content-delivery networks, object storage for historical market data, market-data providers, analytics, and form delivery for the Feedback & Support form.
• Google, when you choose to sign in with Google or where analytics is enabled.
• Partners, but only to the limited extent needed for a referral you start: for example, the partner may confirm to us that a referral led to an account, so that we can credit your Virtual Currency.
• Authorities and advisers, where we believe disclosure is required by law, court order or a lawful request, is necessary to protect rights, safety or the security of the Platform, or is needed by our professional advisers under a duty of confidentiality.
• A successor, if the Platform is merged, acquired or its assets are transferred, in which case this Policy continues to apply to your data until you are told otherwise.

The Platform may link to third-party websites, including a broker through a paid partner link. When you leave the Platform, this Policy no longer applies. The third party collects and uses your data under its own policies, and any account you open with it may involve real money and real regulatory obligations that are between you and that third party alone.

A partner link is not advice or an endorsement. We are not responsible for the privacy, security or conduct of any third party.

Our providers may store and process personal data on servers located outside India. Where personal data is transferred outside India, we do so in accordance with the DPDP Act and any restrictions notified under it, and we require our providers to maintain appropriate safeguards.

We keep personal data for as long as your account is active and as needed for the purposes in this Policy, to resolve disputes, to enforce our terms and to meet legal obligations. When you delete your account or ask us to erase your data, we delete or anonymise it within a reasonable period, except for what we must keep by law or for legitimate security and fraud-prevention records. Simulation data that has been anonymised so that it no longer identifies you may be retained.

We use reasonable technical and organisational safeguards, including encrypted connections, access controls, row-level data-access rules and rate limiting, to protect personal data. No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for keeping your credentials confidential and for signing out on shared devices.

If a personal-data breach affects you, we will notify you and the relevant authority as the law requires.

Subject to the DPDP Act and applicable law, you have the right to:

• obtain a summary of the personal data we process about you and the processing activities;
• request correction, completion or updating of inaccurate or incomplete data;
• request erasure of your personal data when it is no longer needed for the purpose for which it was processed;
• withdraw your consent at any time;
• have your grievance redressed; and
• nominate another person to exercise your rights in the event of your death or incapacity.

To exercise a right, contact us at contact@finance.zerodayonyx.com from the email address on your account so that we can verify your identity. We may need to keep certain information where the law requires.

The Platform is for adults only. You must be at least eighteen (18) years old to create an account. We do not knowingly collect personal data from anyone under eighteen. If you believe a minor has registered, contact us and we will delete the account and associated data.

We may update this Policy to reflect changes to the Platform or the law. The “Effective” date at the top shows the current version. Where a change is material, we will take reasonable steps to tell you, such as a notice on the Platform. Continuing to use the Platform after a change means you accept the updated Policy.

Privacy questions, requests to exercise your rights and grievances can be sent to our designated grievance contact at contact@finance.zerodayonyx.com. We acknowledge grievances promptly and aim to resolve them within the period required by law. If you are not satisfied, you may approach the Data Protection Board of India once it is constituted and operational, as provided under the DPDP Act.

This channel is for privacy and support matters only. It is not an advisory service. No financial or investment advice is given, and no real money is handled, through the Platform or this contact.