Privacy Policy

1. Information we collect

• Account information — when you create an account, we collect your name, email address, and (for email/password sign-up) a securely hashed password. If you sign in with Google, we receive your basic Google profile (name, email, and profile image).
• Content you create — such as your watchlist, saved calculations, and portfolio/asset entries you add to your account.
• Local storage — when you are not signed in, your watchlist and calculator inputs are stored in your browser only (localStorage) and are not sent to us.
• Technical data — standard log and session information (such as IP address, browser type, and pages visited) used to operate and secure the Service.

2. How we use your information

• To provide, maintain, and improve the Service.
• To authenticate you and keep your account secure.
• To save and sync your watchlist, calculations, and portfolio.
• To respond to your enquiries and provide support.
• To comply with legal obligations and prevent misuse or fraud.

3. How your data is stored and secured

Your account data is stored in a managed PostgreSQL database and served through our hosting provider. Passwords are never stored in plain text — they are salted and hashed. Data is transmitted over encrypted (HTTPS) connections. While we take reasonable measures to protect your information, no method of transmission or storage is completely secure.

4. Third-party services

We rely on trusted third parties to run the Service, including:

• Google — optional sign-in via Google OAuth.
• Hosting & database providers — to host the application and store your account data.
• Market data sources — public market data is sourced from the Nairobi Securities Exchange (NSE), the Central Bank of Kenya (CBK), and other public feeds. This data is informational only.

These providers process data on our behalf under their own privacy and security terms.

5. Cookies and local storage

We use essential cookies to keep you signed in and to remember your preferences (such as light/dark theme). We use browser localStorage to hold your watchlist and calculator inputs when you are signed out. We do not sell your personal information.

6. Data retention

We retain your account information for as long as your account is active. If you delete your account, we delete or anonymise your associated personal data, except where we are required to retain it to comply with legal obligations.

7. Your rights

Subject to applicable law, including the Kenya Data Protection Act, 2019, you may request to access, correct, export, or delete your personal data, and object to or restrict certain processing. To exercise these rights, contact us using the details below.

8. Children's privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Contact us

If you have questions about this Privacy Policy or your data, contact us at info@pesalogic.com.