Privacy Policy

Last updated: 12 August 2026

Who we are

Gale.in is an Indian stock-market research and education website operated by Vinoth Kanna. Questions and privacy requests can be sent to admin@gale.in.

Information we collect

The information collected depends on which features you use:

Account and sign-in data: email address, optional name, account plan, sign-in dates and, if you use Google sign-in, the stable Google account identifier returned to us. Email one-time codes are stored only as secure hashes. We do not receive your Google password.
Security data: IP address and browser user-agent may be recorded with sign-in sessions, one-time-code requests, contact messages and payment claims to prevent abuse and investigate account problems.
Portfolio and basket data: holdings, quantities, purchase or sale prices, investment dates and plans you choose to save in Gale.in tools.
Membership and payment data: plan, membership history, payment status and provider references. If you use manual UPI verification, this also includes the UPI reference, payer name and email you submit. Gale.in does not receive or store your card number, CVV, UPI PIN or bank-login credentials.
Messages and research requests: information you send through the contact form, stock requests and any email address supplied for a requested one-time publication alert.
Email preferences: the date and source of an explicit marketing opt-in, onboarding emails due or sent, and any unsubscribe request.

How we use the information

We use this information to create and secure accounts, provide portfolio and membership features, verify payments, answer messages, send requested service emails, improve the website and prevent fraud or misuse.

Account creation does not automatically enrol a new user in marketing. The research-email checkbox is optional and unchecked by default. If you choose it, Gale.in sends a short onboarding and research sequence. You may withdraw that choice from the link in any marketing email. An unsubscribe stops marketing and onboarding messages but does not stop essential account, login, payment or security messages.

Service providers

We use a limited number of providers to operate the service:

Resend delivers sign-in, account, service and opted-in marketing emails.
Google verifies Google sign-in and, where enabled, provides Google Analytics. Analytics storage and advertising features remain denied unless you accept the cookie notice; choosing essential-only leaves them denied.
SendFox may hold newsletter or legacy subscriber lists and deliver separately subscribed campaigns.
Cashfree Payments provides hosted online checkout. Cashfree receives the customer and transaction information needed to process, authenticate, settle, refund and investigate a payment under its own privacy terms. Gale.in receives transaction status and payment references, not card, UPI PIN or bank-login credentials.
Infrastructure and backup providers process encrypted connections and stored application data as needed to host Gale.in.

These providers process information under their own privacy terms. We do not sell personal information.

Cookies and local storage

Gale.in uses a secure, HTTP-only session cookie to keep you signed in for up to 60 days. A separate interface cookie lets static pages show that you are logged in; it is not used to authorise access. The site also stores your analytics-consent choice in browser local storage. Administrative access uses a separate secure cookie.

Declining analytics cookies does not block account or research features.

Retention

One-time sign-in codes expire after 10 minutes and expired rows are removed during application housekeeping.
Sign-in sessions expire after 60 days and are removed after expiry or logout.
Account, saved portfolio and basket data remain while the account is active or until a valid deletion request, subject to records we must keep for security, payment, accounting or legal reasons.
Membership events, payment orders and payment-verification records are retained as an audit trail for access, accounting, refunds, disputes, fraud prevention and legal obligations.
Email consent and suppression records are retained as needed to prove consent and honour an unsubscribe. Removing the suppression record too early could cause unwanted email.
A one-time stock-publication alert is marked complete after the requested notification is sent.

Backups may retain deleted information for a limited operational period before rotation.

Your choices and rights

You may ask for a copy or correction of your personal information, request account deletion, or object to a particular use by emailing admin@gale.in from the address connected to the account. We may need to verify the request before acting. Some payment, security or legal records may need to be retained even after an account is closed.

Every opted-in marketing email includes an unsubscribe link. You can also reply to an email and ask us to remove the address manually.

Security

Connections to Gale.in use HTTPS. Session identifiers are random, one-time codes are stored as keyed hashes, and paid access is checked on the server. No online service can guarantee absolute security; please tell us promptly at admin@gale.in if you believe an account has been misused.

Changes to this policy

We may update this policy when the website or its providers change. The revision date at the top shows when it was last updated.