What we collect, why, who else touches it, and what stays on your computer: your broker credentials, your local order database and your scripts.
Last updated 26 September 2026
While25 (“we”) is run by individuals, not a company. We decide how the personal data described here is used and are responsible for it. This policy covers while25.com, your While25 account, While25 Desktop (the “App”) and the online services the App uses. It does not cover your broker, your data vendor or any other service you connect to; they have their own policies. Write to hello@while25.com about anything on this page.
Account. Your email address, username and password (stored only as a one-way hash), profession if you give it, your plan, whether your email is verified, and when you accepted our terms and which version. With Google sign-in we receive your email address, name, Google account ID and whether Google verified your email; never your Google password or other Google data.
Sign-in and security. When you sign in: the time, a session record and a short description of your browser or App (its user agent). Your IP address is used to block abuse (rate limiting), part of it is kept in our sign-in audit log, and our hosting providers keep it in their logs for a limited time.
Waitlist.Your email address, anything optional you add (name, what you trade, your broker, what you would build first), the IP address you signed up from, and your device's time zone, so a follow-up email reaches you in the morning.
Trading records from the App. So that your protective settings survive a change of computer, the App uploads:
We do not receive your broker passwords, API keys, secrets or access tokens, and we cannot place an order on your account.
Settings and workspaces. Watchlists, favourites, layouts, chart and indicator settings, saved templates and similar settings, so they follow you to other computers.
AI assistant. When you use it we receive:
We also keep a profile the assistant uses to personalise answers (instruments you view or pin, indicators you use, how detailed you like answers, topics you asked it to avoid), custom instructions you save, counts and cost of your AI requests to enforce limits, and, only if you switch chat memory on, your past conversations.
Support and feedback. What you send us, your email address, and technical details the App attaches to a bug report: App version, operating system and the last error. Messages sent through the contact form are delivered to us by email.
Website analytics. See cookies and analytics. The App contains no advertising or analytics trackers.
Email. Whether you have unsubscribed from product email, and a record of the product emails we sent you.
We send service email (verification, security, important changes) as part of the Service, and occasional product news you can unsubscribe from with one click.
To answer you, we send the AI information described above to a third-party AI model provider. We do not send your name or email address with it. Today that provider is DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.), which processes and stores data in the People's Republic of China and whose own policy says it may use data to improve its models. If you switch chat memory on, conversations are also stored and indexed with Qdrant. We may add or switch providers and will update this policy when we do. If you do not want your information processed this way, do not use the AI assistant. See also the AI disclosure.
We share personal data only with service providers that help us run the Service, only for that purpose, and when the law requires it:
Your broker receives your orders and requests directly from your computer, under your own agreement with them. Some market data, news and fundamentals the App shows come from our servers (from providers such as Twelve Data and StockNewsAPI), which request them without your identity; others the App fetches directly from your computer (for example Yahoo Finance and Google News), and those services see your IP address.
We may also disclose information if the law requires it (and will tell you unless we are forbidden to), to protect people or the Service, or to a successor if While25 is transferred, for example to a company we form to run it.
We and our providers process data in several countries, including India, the United States, the European Union and China, which may have different data protection laws from yours. Where the law requires a safeguard for a transfer, for example out of the UK or the EEA, we rely on standard contractual clauses or an adequacy decision.
Email hello@while25.com to access, correct, export or delete your data, to close your account, or to withdraw consent. We answer within 30 days and do not charge for it. You can unsubscribe from product email with the link in any such email, and avoid AI processing by not using the AI assistant.
Passwords are stored only as hashes, connections are encrypted, database access is limited to the people who need it, secrets live in managed secret storage rather than in code, and broker keys stay in your operating system's credential store. No system is completely secure. The App keeps data on your computer, so the security of your computer matters too. If a breach affects your data, we will tell you and the relevant authority as the law requires.
While25 is not for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us data, tell us and we will delete it.
We will update this policy when our practices change; the date at the top is always the current version. If a change is significant, we will tell you in the App, on the site or by email.
While25, Satellite, Ahmedabad, Gujarat 380015, India. Email: hello@while25.com.
Questions about this document: hello@while25.com.