Legal
Privacy Policy
1. Who we are
This policy covers the Magnet trading and wealth-planning platform (the "Service"), operated from madhurram.com. We are the data controller for the personal information described here — meaning we decide what is collected and why, and we are accountable for it.
When you use the in-product guide, the question you type is recorded along with your account, the page you asked it from and the topic it matched. This is used to find where the product is unclear and to improve it. These records are deleted automatically after 180 days, and are visible only to administrators of your own workspace.
2. Information we collect
Everything below is either given to us by you, or is a necessary by-product of serving a web page. We collect nothing else.
2.1 Information you give us
| What | When | Why | Why we may do this |
|---|---|---|---|
| Name, email address, your message | You submit the “Request Demo” form | To answer your enquiry | Our legitimate interest in answering a request you sent us |
| Email address and password | You create an account | To create and secure your account | Necessary to provide the service you asked for |
| Financial figures you enter (holdings, goals, income, expenses) | You use the Wealth planner | To calculate and display your own plan | Necessary to provide the service you asked for |
Passwords are stored only as a salted scrypt hash. We cannot read your
password, and neither can anyone who obtains a copy of our database.
Financial figures you enter are used solely to render your own plan back to you
— they are never analysed across users, sold, or shared.
2.2 Information collected automatically
| What | Why | Retention |
|---|---|---|
| IP address, browser user-agent, language, browser time zone | Recorded with a demo request or a cookie decision, to prevent abuse and to evidence consent | 24 months |
| Cookie choice, and the policy version it was made against | To honour your choice and to show that consent was given | 24 months |
| A count of visits to this page | To see whether it is read. No IP address is stored for this | 24 months |
We do not use analytics or measurement products, we do not build profiles, and we make no automated decisions producing legal or similarly significant effects about you.
2.3 Information we deliberately do not collect
- Payment card numbers, bank account numbers, or government identifiers.
- Precise geolocation. We store the IP address a request came from; we do not convert it into a location, and we do not send it to any lookup service.
- Special category data (health, biometrics, religion, political opinion), sensitive personal information, or data from third-party data brokers.
3. How we use your information
- To operate the Service, keep you signed in, and secure your account.
- To answer enquiries you send us.
- To prevent abuse — rate limiting and spam filtering on public forms.
- To meet legal obligations, including evidencing cookie consent.
We do not use your information for advertising, profiling, automated decision-making, or training machine-learning models.
4. Sharing and disclosure
We do not sell personal information, and we do not share it for advertising. We have not done so in the preceding 12 months, and we have no plans to.
Personal information reaches a third party in only these circumstances:
| Recipient | What they receive | Why |
|---|---|---|
| Our hosting provider | Data at rest on the server, and connection metadata | To run the Service. Bound by contract to process only on our instructions |
| Law enforcement or a court | Only what is legally compelled | Where we are required by law, and where lawful, we will tell you |
We load no third-party resources. Fonts, stylesheets and scripts are all served from our own servers, so visiting this site sends your IP address to nobody but us. Our Content-Security-Policy enforces this at the browser, which means a third-party resource added by mistake fails visibly rather than quietly leaking.
If the Service is ever sold or merged, personal information may transfer with it. You would be notified before that took effect, with an opportunity to delete your account first.
5. Where your information is held
Our servers are located in the United States, and your information is stored and processed there. If you are somewhere else, using the Service means your information is transferred to and held in the United States, where data protection rules may differ from those where you live.
Where information crosses a border, we rely on recognised legal safeguards intended to keep the same level of protection with it. You can ask us at any time which safeguards apply to you.
6. How long we keep it
| Record | Kept for | Then |
|---|---|---|
| Account and the data you enter into it | While your account is open | Deleted within 30 days of account closure |
| Demo request enquiries | 24 months from last contact | Deleted |
| Cookie consent records | 24 months | Deleted. Kept this long only to evidence consent |
| Privacy page view counts | 24 months | Deleted. Contains no identifier |
7. Cookies and local storage
We set one cookie, and only after you sign in. We store your cookie choice in your browser's local storage so we do not have to ask on every page.
You can change or withdraw your choice at any time. Withdrawing is exactly as easy as giving it was:
Browser controls also work: every major browser lets you block or delete cookies. Blocking the session cookie will prevent you from signing in, because that is the mechanism by which you stay signed in.
8. Your rights
Your rights over your personal information vary depending on where you live. Rather than sorting people by location, we apply the same standard to everyone — so in practice all of the following are available to you.
- Access — a copy of the personal information we hold about you, and an explanation of how it is used.
- Correction — to have anything inaccurate put right.
- Deletion — to have your information erased, where we have no overriding reason to keep it.
- Portability — a copy in a common, machine-readable format.
- Restriction — to pause our use of your information while a question about it is resolved.
- Objection — to any use we make of your information on the basis of our legitimate interests.
- Withdraw consent — at any time, and as easily as you gave it. Withdrawing does not affect anything done beforehand.
- Opt out of sale or sharing — we do not sell or share personal information, so there is nothing to opt out of, but the right stands and we will honour automated opt-out signals if that ever changes.
- Non-discrimination — we will never give you a worse price or a worse service for exercising any of these rights.
- Nominate someone — to act for you, or to exercise these rights on your behalf if you become unable to.
8.1 How to exercise them
Email rerole.ai@gmail.com with the subject line "Privacy request", telling us what you would like us to do. We will ask you to confirm your identity first — usually by replying from the address we already hold — because acting on an unverified request would itself put your information at risk.
We aim to respond within 30 days. If a request is unusually complex we may need longer, and we will tell you before that deadline passes. There is no charge.
8.2 If you are not satisfied
Please tell us first — most concerns are quickest to fix directly. If we have not resolved things to your satisfaction, you are entitled to raise the matter with the data protection or privacy regulator responsible for your area. You may do so at any time, and you do not need to come to us first.
9. Security
- All traffic is encrypted in transit with TLS.
- Passwords are stored as salted
scrypthashes, never in plain text. - Session cookies are
HttpOnlyandSameSite=Lax, andSecureover HTTPS — so they cannot be read by scripts. - Every account's data is isolated at the database level.
- Public forms are rate-limited and strictly validated against injection.
- Access to production is restricted to key-based authentication.
No system is perfectly secure. If a breach occurs that affects your rights, we will notify the appropriate authorities within the time limits that apply to us, and tell you directly without undue delay where the risk to you is high.
Found a vulnerability? Please tell us at rerole.ai@gmail.com. We will not pursue legal action against good-faith security research that respects user privacy and does not degrade the Service.
10. Children
The Service is not intended for children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
11. Changes to this policy
When we make a material change we increment the policy version shown at the top, publish the updated policy here, and ask for your cookie choice again — old consent is not carried over to new practices. Minor corrections that do not change what we collect or why will not re-prompt you.
12. Contact and complaints
Privacy questions, requests, and grievances: rerole.ai@gmail.com
We aim to answer every privacy question within 30 days. If you would rather raise a concern with a regulator instead, you are free to do so at any time.
This policy describes our actual practices, verified against the code that implements them. Nothing here is legal advice.