Privacy

This policy explains what data منصتي collects, how we use and protect it, and your rights under the Saudi Personal Data Protection Law.

What we collect

• Account data: name (optional), email address and interface language. We never store your password in readable form, only a one-way encrypted hash of it.
• What you add: watchlists, portfolios and their trades, alerts, notes, error reports and contact messages.
• Technical data: IP address and browser type at sign-in, to protect your account from unauthorised use, and server logs for security and troubleshooting.
• Subscriptions: when payments launch, card details will be handled directly by the payment gateway; we will not store your card number.

How we use it

• To run your account and tools (watchlists, portfolios, alerts) and decide what your plan includes.
• To send necessary messages such as email confirmation, password reset and your alerts.
• To protect the platform from fraud and abuse, and to improve the service.

We do not sell your data, share it for advertising, or use advertising trackers.

Cookies

We only use cookies the platform needs to work:

• your sign-in session (30 days) and a cookie that protects against forged requests;
• a short-lived copy of your access token (15 minutes) so pages show your plan's content when they open;
• display preferences such as light/dark mode, and a hint that selects the signed-in layout.

Who processes data with us

• Hosting and protection provider that carries the site's traffic.
• AI provider used to summarise results and disclosures and translate company descriptions; it receives company data only, never personal data.
• Email provider and payment gateway once enabled, only as needed to deliver the service.

Retention

We keep your account data while your account exists. A sign-in session expires after 30 days at most, and server logs are kept for a limited time.

Your rights

You may access your data, ask us to correct it, ask us to delete your account and data, and object to its processing. Send your request through contact us with the topic “Privacy and personal data”, and we will answer within the legal time limit.

Security

We use encrypted connections, hashed passwords and restricted access to servers and databases.

Changes

We may update this policy and will post the new version here with its date.