Privacy Policy.

We collect only what the Platform needs in order to work:

• Your mobile number. Required. It is how you register and sign in — there is no password — and it is the identity your purchase is recorded against.
• Your name and email address, only if you choose to give them. Neither is required to use the Platform.
• Purchase records. When you buy access we store an order reference, the amount, the payment identifier returned by our payment gateway, and the time the payment and the access grant occurred.
• Basic technical information that any web server receives in order to serve a page, such as your IP address and browser type, held by our hosting and infrastructure providers for security and abuse prevention.

We do not collect your card, UPI or bank details. Payment credentials are entered on our payment gateway’s own secure checkout and are never transmitted to, seen by, or stored on our servers.

• To create your account and sign you in by one-time password
• To keep you signed in securely across pages and visits
• To take payment and to grant, record and restore your access to paid content
• To answer support requests and to reconcile a payment that did not complete correctly
• To operate, secure and maintain the Platform, and to prevent fraud and abuse
• To meet accounting, tax and other legal obligations

We do not use your information to build advertising profiles, and we do not send marketing messages from this Platform.

This Platform runs no analytics, advertising or third-party tracking of any kind. There is no Google Analytics, no advertising pixel, no session-recording tool and no cross-site tracker on any page.

We set exactly one cookie, named sop_session. It holds your signed-in session and nothing else. It is strictly necessary — without it you could not stay signed in — so it is not something we ask consent for, and there is no consent banner because there is nothing optional to consent to. Signing out clears it.

We do not sell, rent or trade your personal data. We share it only with the service providers required to run the Platform, and only to the extent each one needs:

• Our payment gateway, which processes your payment and confirms to us that it succeeded. It handles your payment credentials under its own privacy policy and applicable RBI and PCI-DSS requirements.
• Our identity service, operated by us, which sends your one-time password and holds your mobile number and account record.
• Our hosting and database providers, which store and serve the Platform and its data on our behalf, under contract.
• Legal disclosure, where we are required to share information by law, by a court, or by a regulator, or to establish or defend a legal claim.

Sessions are carried in a signed, HTTP-only cookie that scripts running in your browser cannot read, all traffic to the Platform is encrypted in transit over HTTPS, and one-time passwords are stored only in hashed form and expire shortly after they are issued. Access to production data is restricted to those who need it.

No method of transmission or storage is completely secure, and while we take these measures seriously we cannot guarantee absolute security.

Your account and your record of purchased access are retained for as long as your account exists, because access to paid content is granted for life and has to remain restorable. Payment and order records are retained for the period required by Indian tax and accounting law. One-time passwords are discarded within minutes of being issued.

Under the Digital Personal Data Protection Act, 2023 you have the right to access the personal data we hold about you, to have it corrected if it is inaccurate, to have it erased, to nominate another person to exercise these rights on your behalf, and to complain to us and then to the Data Protection Board of India.

To exercise any of these, write to our Grievance Officer at admin@bharatstox.com. Please note that erasing your account also erases the record of your purchase, and access cannot be restored afterwards.

The Platform is not intended for anyone under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Everything published on the Platform is for educational and informational purposes only. It is not investment advice and not a recommendation to buy or sell any security. We are not a SEBI-registered investment adviser or research analyst. Markets carry risk; decisions you make are your own.

We may update this Privacy Policy from time to time. The date at the top of this page always reflects the current version, and material changes will be notified to you at the mobile number or email address on your account. Continuing to use the Platform after a change means you accept the updated policy.

For any privacy question, data request or complaint:

• Company: WHITE COCONUT HOSPITALITY PRIVATE LIMITED
• Phone: +91 90999 12399
• Grievance Officer: admin@bharatstox.com
• Location: Surat, Gujarat, India

Full contact details are on our contact page.