Safety, regulation & terms

What protects you, in plain words.

Where your money sits, how your keys and data are handled, what MudraVault is under Indian regulation, and the terms you accept when you use it.

Updated 2 November 2026 · v4.2.0

Your money

  • Non-custodial. Your cash stays with Zerodha and your shares in your own demat account at CDSL, under your name. MudraVault never receives, holds or moves funds.
  • Orders only. Kite Connect lets the engine place and cancel orders. It can't withdraw money or transfer shares out of your account.
  • Exits live at the broker. Each buy gets a resting target and a GTT stop at Zerodha, so they keep working if our servers don't.
  • Hard limits. Deployable cash, the Safe Money Vault, the position limit and the 30-day window cap what the engine can do. The kill switch stops it at once.

Keys & data

  • Broker API keys, and your TOTP secret and PIN if you enable auto-login, are encrypted with AES-256-GCM and stored in a database that is separate for every member.
  • Your credentials are only ever sent to Zerodha. We never sell or share your personal data.
  • Under the Digital Personal Data Protection Act, 2023 you can ask us to erase your personal data and keys. Trade records may be kept, without your identity attached, for as long as tax and securities law require.

Regulation

MudraVault is software that runs trading rules on your own Zerodha account through Zerodha's official API. It is not registered with SEBI as an investment adviser, research analyst, stockbroker or portfolio manager, and it doesn't give personal advice, tips or buy and sell calls.

SEBI's framework for retail algorithmic trading requires API orders to come through the broker from known sources, with each algorithm identified. We follow Zerodha's requirements for API access and keep improving our compliance as the framework is rolled out. That is why real-money access is invite-only and limited.

We never advertise assured or fixed returns. The numbers on our scoreboard are past and simulated results, shown so you can judge the engine, not a forecast.

Risk disclosure

Trading in securities involves a risk of loss, including loss of your capital. Past and simulated results do not predict future results.

  • SEBI found that about 7 in 10 individual intraday traders in the equity cash segment lost money in FY23, and about 9 in 10 individual F&O traders lost money over FY22 to FY24.
  • Rules don't remove market risk: gaps, circuit limits, exchange halts and broker outages can stop an exit from filling at its price.
  • Most strategies in our own Paper Lab are losing or no better than random entries over the window so far.

Terms of use

1. What you get

A licence to use the MudraVault software on your own Zerodha account for the length of your operating window. Any fee you pay is for the software only. MudraVault takes no profit share and no commission on trades.

2. Your responsibilities

You decide whether to switch the engine on and how much capital it may use. You keep your Zerodha account, Kite Connect app and contact details valid, and you pay Zerodha's and the exchanges' charges and your own taxes.

3. No guarantee

MudraVault does not guarantee profits or protect against losses. Your results depend on the market.

4. Access

Access is by personal invitation only. Invite links are single-use and can't be transferred. The owner may decline, renew, extend or end any account. When an account ends, the engine opens no new positions and manages open ones to their exits.

5. Liability

To the extent the law allows, MudraVault and Graaphix are not liable for trading losses, missed profits, slippage, or failures of brokers, depositories, exchanges, networks or other third parties. Our total liability is limited to the fees you paid for the current operating window.

6. Governing law

These terms are governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

By invitation

Read the numbers. Then ask.

Requesting an invitation takes two minutes. The owner reviews every request personally.

Request an invite →