Master Privacy Policy & Data Protection Framework

Operational Governance & Future Corporate Assignment

MarketRoro is an independent digital financial market newsroom, macroeconomic data aggregator, and quantitative equity intelligence platform operated directly by the MarketRoro publishing team ("the Publishers", "We", "Us", or "Our").

Future Corporate Structure & Assignment Clause: As MarketRoro expands its global newsroom operations across international bureaus, a formal corporate legal entity may be incorporated to hold and manage all platform assets. In such an event, all legal rights, editorial titles, software repositories, user agreements, data compliance records, and operational responsibilities shall be assigned to and assumed by such registered entity without interruption to reader services.

Until formal corporate assignment takes effect, MarketRoro operates as an unincorporated independent digital publishing enterprise governed by its primary editorial desk and designated compliance administrators.

1. International Regulatory Compliance & Cross-Border Applicability

This Master Privacy Policy establishes the binding data governance standards, technical controls, and procedural workflows enforced across all digital properties, APIs, Edge servers, and syndication feeds operating under MarketRoro. Our data protection principles align with major international statutory frameworks:

2. Exhaustive Data Inventory & Collection Taxonomies

MarketRoro operates under strict data minimization guidelines. We never collect sensitive personal identifiers, government ID numbers, financial account credentials, credit card records, biometric data, or health records. Information processed is strictly limited to the following technical and operational categories:

2.1. Automated Edge CDN & Server Infrastructure Logs

When your browser or mobile client accesses any page on marketroro.com, our globally distributed Edge Content Delivery Network (CDN) and secure web servers record non-identifying telemetry metrics into encrypted log archives:

• Network Identifiers: Internet Protocol (IP) address, port number, and Autonomous System Number (ASN).
• Geographic Approximation: Country, state, and metropolitan area derived via coarse GeoIP lookups (used exclusively to render regional market indices by default).
• Client Environment Data: Browser engine version, operating system architecture, screen resolution, and preferred language tags.
• Request Routing Telemetry: Requested Uniform Resource Identifier (URI), HTTP method (GET/POST), response status codes (e.g. 200 OK, 304 Not Modified), payload byte quantities, referring URL, and server processing latency.

2.2. User-Initiated Contact Portal Submissions

MarketRoro does not operate direct public email inboxes to prevent spam and ensure rigorous audit compliance. When you contact our newsroom or legal desk via our Official Contact Portal, we store:

• Contact Identifiers: Full legal name and verified email address.
• Department Routing Tags: Selected category (e.g. Editorial & Newsroom, Fact Check & Corrections, Advertising & Commercial Partnerships, Press Relations, Legal & RSS Syndication).
• Message Dossier: Subject line and complete message body submitted for evaluation.
• Audit Timestamp: Exact UTC submission date and time.

2.3. Browser Local Storage State

To deliver customizable financial dashboards without requiring user accounts or passwords, MarketRoro stores preference tokens directly inside your browser’s local storage (HTML5 LocalStorage):

• marketroro_region: Preferred regional focus (India, US, Europe, Asia-Pacific).
• marketroro_theme: Interface visual mode (Dark Mode vs Light Mode).
• marketroro_recent_searches: Up to 10 recently queried stock tickers for instant client-side autocomplete.

3. Lawful Bases for Processing Under GDPR Article 6

We process personal data strictly where an established legal basis exists under applicable data protection statutes:

• Legitimate Interests (GDPR Art. 6(1)(f)): Processing network telemetry and server access logs to protect portal infrastructure against DDoS attacks, detect automated scrapers, optimize CDN cache latency, and deliver localized capital market indices.
• Consent (GDPR Art. 6(1)(a)): Processing voluntary contact submissions and newsroom tips initiated by the user.
• Legal Compliance (GDPR Art. 6(1)(c)): Preserving correspondence archives to fulfill statutory reporting and regulatory audit requirements.

4. Digital Advertising, Google AdSense & Third-Party Cookies

To maintain free access to financial intelligence for all investors, MarketRoro displays digital advertisements served via programmatic ad partners, including Google AdSense. In strict accordance with Google AdSense Program Policies, we disclose that:

• Google & Third-Party Cookies: Third-party vendors, including Google, use cookies (including the DoubleClick DART cookie) to serve advertisements based on your prior visits to MarketRoro or other sites on the Internet.
• Ad Personalization: Google's use of advertising cookies enables it and its certified partners to serve relevant financial and consumer ads to our readers.
• User Opt-Out: You may opt out of personalized advertising at any time by visiting Google Ads Settings or through the Digital Advertising Alliance at aboutads.info/choices.

For complete disclosures, see our full Advertising Policy. MarketRoro never sells, rents, or trades your direct contact information or personal submissions.

5. Technical Security Architecture & Data Encryption

MarketRoro enforces multi-layered technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of all systems:

• Encryption in Transit: 100% of web traffic is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS encryption) with strict HSTS preloading.
• Database Protection: Contact submissions and database records are hosted on isolated Supabase infrastructure with automated Row Level Security (RLS) policies and encrypted at rest using AES-256 standards.
• Hashed Administrative Routing: Newsroom administration dashboards utilize non-indexed, cryptographic hash paths protected by secondary authentication barriers.
• Continuous Vulnerability Audits: Automated dependency scanning, security patch cycles, and Edge CDN firewall filtering against zero-day exploits.

6. Data Retention Lifecycles & Automated Deletion

We retain personal data only for the minimum duration necessary to satisfy the purpose for which it was collected:

7. Exercising Your Statutory Privacy Rights (Access, Correction & Erasure)

Regardless of your citizenship or physical jurisdiction, MarketRoro guarantees full statutory data subject rights:

• Right of Access (GDPR Art. 15 / CCPA § 1798.100): Request confirmation and an exported digital copy of personal records associated with your email address.
• Right to Erasure / "Right to be Forgotten" (GDPR Art. 17 / CCPA § 1798.105): Request immediate, permanent deletion of your contact form messages and correspondence logs.
• Right to Rectification (GDPR Art. 16): Request immediate correction of inaccurate or incomplete contact records.
• Right to Restrict Processing (GDPR Art. 18): Request temporary suspension of data processing during formal dispute evaluations.
• Right to Non-Discrimination: Enjoy equal access, speed, and features on MarketRoro without penalty when exercising your privacy rights.

8. Official Compliance Mechanism: Contact Portal Submission

Important Procedural Notice: MarketRoro does not publish or maintain direct public email inboxes for privacy inquiries or legal service. To submit a formal data access demand, correction notice, or erasure request, you must submit your notice through our secure Official Contact Portal.

When submitting your request:

1. Select "Legal & RSS Syndication" or "Fact Check & Corrections" in the department selector.
2. Specify "Formal Data Subject Access / Erasure Request" in your subject line.
3. Provide the specific email address associated with your prior communications so our compliance desk can verify and execute your request.

Our data protection compliance desk evaluates and resolves all statutory privacy requests strictly within 24 business hours.