Privacy policy

Who we are

This privacy notice describes how BullKarma ("we", "us") handles personal data when you use bullkarma.com, related subdomains such as news.bullkarma.com, and our research and analytics tools (the "Service").

BullKarma is an unregistered trade name operated as a sole proprietorship by Amit Lamba, an individual based in India. It is not a company, LLP, or other incorporated entity. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), Amit Lamba operating as BullKarma is the Data Fiduciary for personal data processed through the Service.

This notice is meant to be read on its own (separate from our Terms of use). It reflects how the product works today.

Personal data we process

Depending on how you use the Service, we may process:

• Account details from Google Sign-In: name, email address, and profile image (as provided by Google).
• Contact form details: email (if you are not signed in), phone number, country calling code, and your message text.
• Product content you submit: for example research chat questions and related prompts needed to run those features.
• Technical and usage data: IP address, device/browser signals, pages viewed, approximate location inferred by analytics providers, and product events (such as sign-in, research chat asks, Find stocks searches, and financial statement page views).
• Session and authentication cookies needed to keep you signed in.

We do not sell your personal data.

Purposes of processing

We process personal data for these purposes:

• Authenticate you and maintain your session (Google Sign-In and session cookies).
• Provide requested features (research chat, screeners, financial views, and related tools).
• Respond to support and contact requests (including routing messages to our internal notification channel).
• Operate, secure, and troubleshoot the Service (logs, abuse prevention, reliability).
• Understand product usage via Google Analytics 4 so we can improve the Service (see below).
• Meet legal obligations and resolve disputes where applicable.

Where the DPDP Act requires consent for a purpose, we will seek it. Signing in or submitting a form is an affirmative action for the processing needed to provide that action. Analytics cookies that are not strictly necessary should be controlled through your browser settings or any in-product controls we provide.

Usage analytics (Google Analytics)

We use Google Analytics 4 to understand how the site is used — for example which pages are visited and whether key features are used. This helps us see what is working and what to improve.

Analytics may include page views, approximate device and location signals provided by Google, and product events such as sign-in, research chat asks, Find stocks searches, and financial statement page views. Event parameters are limited to non-identifying details (for example company symbol on a financials page, or whether a search used an industry filter).

We configure analytics so that email addresses, names, phone numbers, and research chat question or answer text are not sent to Google Analytics as event parameters.

Google may process this data under its own terms and privacy policy. See Google's Privacy Policy.

Cookies and similar technologies

We use cookies and similar technologies for authentication (keeping you signed in) and for analytics (Google Analytics). Essential authentication cookies are required for signed-in features. You can control cookies through your browser settings; blocking some cookies may limit parts of the Service.

AI and language-model providers

Research and related features may send prompts and necessary context to third-party language-model providers so we can generate responses. Do not submit information in chat that you are not comfortable sharing with those processors. Model outputs are not verified investment advice; see our Terms of use.

Sharing and service providers

We use infrastructure and service providers who process data only as needed to provide services to us, including for example:

• Cloud hosting and databases for running the Service.
• Google (authentication and Analytics).
• Language-model / AI providers for research features.
• Internal notification tools (for example Slack) to receive contact-form messages.

We may also disclose personal data if required by law, regulation, legal process, or to protect rights, safety, and the integrity of the Service.

Cross-border transfers

Some providers (including Google, cloud hosting, and AI providers) may process personal data on servers outside India. Under the DPDP Act, transfers are generally permitted except to countries restricted by the Central Government. We use providers we believe are appropriate for operating the Service and will adjust practices if transfer restrictions apply.

Data retention

Account and product data are kept while your account is active and as needed to operate the Service, meet legal obligations, or resolve disputes. Contact-form messages are kept as needed to respond and for a reasonable follow-up period. Research chat content may be retained to provide the feature, for security, and to improve reliability. Analytics data is retained according to our Google Analytics property settings and Google's practices. When the purpose is complete and no legal retention duty applies, we delete or de-identify personal data within a reasonable period.

Security

We use reasonable security safeguards appropriate to the nature of the data and our size of operation, including encrypted transport (HTTPS), access controls, and encryption of certain sensitive fields at rest where implemented in our systems. No method of transmission or storage is completely secure.

Your rights (India)

Subject to the DPDP Act and applicable rules, you may have the right to:

• Access a summary of personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of personal data, subject to legal limits.
• Withdraw consent for consent-based processing (withdrawal does not affect processing already completed).
• Nominate another individual to exercise rights in case of death or incapacity, where the law provides for nomination.

To exercise these rights, or to withdraw consent where applicable, use our Contact page and describe your request. We will respond within a reasonable period. You may also stop using the Service at any time. If you delete or disconnect your sign-in method, some data may remain in backups for a limited time.

If you are not satisfied with our response, you may have the right to complain to the Data Protection Board of India under the DPDP Act, once the Board's complaint mechanisms are available for your case.

Grievance officer

For privacy or data-protection grievances, contact:

Grievance Officer: Amit Lamba
Role: Operator of BullKarma (sole proprietorship / unregistered trade name)
Channel: Contact form on bullkarma.com

We aim to acknowledge grievances promptly and address them within a reasonable period (and within any timeline required by applicable law).

Children

BullKarma is intended for adults (18+). We do not knowingly collect personal data from children. Under the DPDP Act, processing personal data of individuals under 18 generally requires verifiable consent of a parent or lawful guardian. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.

Personal data breaches

If a personal data breach occurs that requires notification under applicable law, we will take steps to contain the incident and notify the Data Protection Board of India and affected individuals as required.

Changes

We may update this notice as the product or law changes. The "Last updated" date at the top will change when we do. For material changes, we may also provide an additional notice in the product or by email where we have an address for you. Continued use after an update means you acknowledge the revised notice, except where applicable law requires a different process (for example fresh consent for a new purpose).

Contact

Questions about privacy? Contact Amit Lamba via our Contact page. See also our Terms of use.