Last updated: 21 June 2026 · consent version 2026-06-21.v1
Aligned to the Digital Personal Data Protection Act, 2023. Data controller: Koti Labs Private Limited ("Āagman", "we").
This policy governs personal data we process when you create an account and use Āagman. By accepting it at signup you consent to the processing described here. You may withdraw consent, which may limit the service.
Name, mobile number, email, password (hashed).
Broker API keys / access tokens, broker client identifiers, the static IP you whitelist. We do not store your broker login password.
Strategies you build or deploy, orders, positions and fills retrieved from your broker / exchange, backtest and screener activity, in-app interactions.
Device, IP address, log and diagnostic data.
Provide the service and route algo orders to your own broker account
Authenticate and secure access
Regulatory audit, order-tagging and record-keeping
Grievance handling and support
Service improvement
We do not sell your personal data.
We share data with your broker(s) and the exchange(s) to place and manage orders and meet algo-tagging / audit obligations; with regulators when legally required; and with vetted sub-processors under confidentiality.
Personal and order data are hosted on servers located in India.
Retained for the life of your account and thereafter as required by SEBI / exchange record-keeping (at least 5 years for trading and audit records), then deleted or anonymised.
Encryption in transit, hashed credentials, OAuth and two-factor authentication, static-IP whitelisting, least-privilege access controls and audit logging.
No system is perfectly secure; report concerns to the Grievance Officer.
You may access, correct, complete and erase your data, withdraw consent, nominate, and seek grievance redressal. Exercise these via the Grievance Officer.
Access your personal data
Request correction or completion
Request deletion
Withdraw at any time
The service is for users aged 18 and above.
We may update this policy; material changes are notified and re-consent sought at next login.