📋 Legal Document

Privacy policy for PSX IndexMate

PSX IndexMate is built on a simple promise: your data is yours. This page explains how we handle account information, saved tickers, essential cookies, and third-party asset requests.

Effective Date: 23 May 2025 Last Updated: 23 May 2026 Version: 1.0 Applies to: PSX IndexMate Web Application
✅ No data selling
✅ No third-party sharing
✅ No tracking across sites
✅ You can delete your account anytime

1. Overview

PSX IndexMate ("we", "our", "us") is a self-hosted, open-source portfolio planning tool designed for the Pakistan Stock Exchange (PSX). We respect your privacy completely. This policy describes what information we collect, why we collect it, and the strict limits on how it is used.

Our core principle: We collect only the minimum information required to run the application. We do not use your personal data for any commercial purpose, analytics profiling, or third-party disclosure — ever.

2. What We Collect

We collect only what is strictly necessary to provide the service:

  • Email address — used solely for account authentication (login, email verification, and password reset).
  • Password (hashed) — stored as a one-way bcrypt hash. We cannot see or recover your plain-text password.
  • Your saved tickers — the list of PSX stock symbols you choose to save. Stored locally in our database purely to restore your preferences between sessions.
  • Session data — a temporary server-side session to keep you logged in during your browser session. It expires on logout or inactivity.

3. What We Don't Collect

We explicitly do NOT collect:
  • Your real name, phone number, address, or any other personally identifiable information beyond email.
  • Financial details, bank accounts, investment amounts, or trading history.
  • Device identifiers, browser fingerprints, or hardware information.
  • Location data or IP-based geolocation.
  • Browsing history outside of PSX IndexMate.
  • Behavioural analytics or engagement metrics.
  • Any data for advertising, marketing, or profiling purposes.

4. How We Use Your Data

Your data is used for one purpose only: to provide you with PSX IndexMate functionality.

  • Your email is used to identify your account and send you account-related emails (verification link, password reset). Nothing else.
  • Your saved tickers are loaded when you log in so your preferences are remembered.
  • Your session is used to keep you authenticated across page loads.
We do not use your data for any secondary purpose. No analytics platforms receive your data. No machine-learning models are trained on it. No A/B testing is performed using your personal information.

5. No Sharing Policy

We have a strict zero-sharing policy. We will never:

  • Sell, rent, or trade your personal data to any organisation, company, or individual.
  • Share your data with advertisers, data brokers, or analytics companies.
  • Disclose your data to any third-party service except where required by applicable Pakistani law and only after being presented with a valid legal order.
  • Transfer your data outside the jurisdiction in which it is hosted without your explicit consent.
In plain English: No one outside of PSX IndexMate will ever see your email address or ticker preferences. Period.

6. Data Security

We implement reasonable technical measures to protect your data:

  • Passwords are hashed with bcrypt — industry-standard one-way hashing. Even database administrators cannot see your password.
  • Sessions are managed server-side with a cryptographically random secret key.
  • The application is designed to run on a private or self-hosted server; there is no cloud data warehouse.
  • Account and ticker data are stored in the application's configured database and are not exposed as public files.

While we take security seriously, no system is 100% secure. If you discover a vulnerability, please report it responsibly via our contact page.

7. Your Rights

You have full control over your data:

  • Access: You can view your saved tickers at any time from your account.
  • Correction: You can update your email or password from the Profile page.
  • Deletion: You can permanently delete your account and all associated data from the Profile & Settings page. Deletion is immediate and irreversible.
  • Portability: Your ticker list can be exported or modified at any time.

8. Cookies

PSX IndexMate uses a single, essential session cookie to keep you logged in. This cookie:

  • Does not track you across websites.
  • Contains no personal information — only a random session identifier.
  • Is deleted when you log out or clear your browser cookies.
  • Is required for the application to function. Without it, you cannot stay authenticated.

We use no analytics scripts and no cookies beyond the essential session cookie described above.

9. Third-Party Services

PSX IndexMate loads a small number of open-source UI libraries from public CDNs:

  • Bootstrap 5 (CSS/JS) — from cdn.jsdelivr.net

These requests go directly from your browser to jsDelivr's servers. jsDelivr may log your IP address as part of normal CDN operation. We do not control this and recommend reviewing jsDelivr's privacy policy if you are concerned. We do not send any of your personal account data to these services.

Stock data is fetched server-side from PSX (Pakistan Stock Exchange) official data endpoints. Your account details are never sent to PSX.

10. Children's Privacy

PSX IndexMate is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

11. Changes to This Policy

If we make significant changes to this Privacy Policy, we will update the "Last Updated" date at the top of this page. Continued use of PSX IndexMate after any changes constitutes acceptance of the new policy. We encourage you to review this page periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us or email [email protected].