Privacy Policy

Last updated: August 1, 2026

1. Introduction

Stocker ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform (the "Service").

If you do not agree with our policies and practices, please do not use the Service. By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

Personal Information — collected when you register or use the Service:

• Username and email address
• Phone number and country code (if provided)
• Account credentials (securely hashed — we never see your password in plain text)
• Profile information (first name, last name — if provided)

Usage Data — collected automatically as you use the Service:

• Stocks you add to your watchlist
• Pages you view and features you use
• Notification preferences
• Login activity and session data

Usage data is recorded on a first-party, server-side basis (no third-party analytics or tracking cookies). Usage events are retained for up to 365 days, are never sold or shared, and are kept only on an anonymized basis after account deletion.

Technical Data — collected automatically from your device:

• IP address
• Browser type and version
• Device information and operating system
• Access times and dates

Data from Google Sign-In — if you use Google OAuth to sign in:

• Your Google account email address
• Your Google profile name
• Your Google profile picture

We do not request, store, or access any other data from your Google account.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Display stock analysis, signals, and watchlist data relevant to you
• Send you notifications about trading opportunities (if enabled)
• Send password reset emails and account security notifications
• Respond to your inquiries and provide customer support
• Detect, prevent, and address fraud or technical issues
• Comply with our legal obligations

We do not sell your personal information to any third party. We do not share your watchlist or trading activity with any broker, advertiser, or third party.

4. Data Storage & Security

We use industry-standard security measures to protect your information:

• Encryption: All data in transit is encrypted via HTTPS/TLS. Passwords are hashed using PBKDF2-SHA256.
• Access controls: Access to user data is restricted to authorized administrators only.
• Secure authentication: We use Django's built-in authentication framework with CSRF protection, session security, and rate limiting.
• Compliance: We comply with the Prevention of Electronic Crimes Act (PECA), 2016, regarding unauthorized access to data.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

5. Third-Party Services

We use trusted third-party services to operate the Service:

• Google OAuth: For sign-in authentication (if you choose Google login)
• Market data providers: For stock prices, fundamentals, and market data
• Hosting provider: For application hosting and database storage
• Email provider: For transactional emails (password reset, notifications)

These third parties have their own privacy policies. We only share the minimum information necessary for them to provide their services to us.

6. Data Retention & Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service. If you wish to delete your account and all associated data, you may:

• Use the account deletion feature in your Settings (self-service)
• Email us at support@psxstocker.com with your request

Account deletion is processed within 90 days of the request. After deletion, your personal information is permanently removed from our systems. Your market-activity records (such as watchlists and trades) may be retained on an anonymized basis for analytics purposes and cannot be linked back to you. Where retention is required by law (e.g., payment audit trails for FBR/SECP compliance, if applicable), records are retained only for that purpose.

7. Pakistan Data Protection

Stocker processes personal data in accordance with:

• Prevention of Electronic Crimes Act (PECA), 2016
• Personal Data Protection Bill, 2023 (and any successor legislation)

We act as the data controller. We process data only for lawful purposes directly related to the Service, on the basis of your consent and our legitimate interests. We apply data minimization and purpose limitation principles.

Sensitive personal data (including financial and trading-preference data such as watchlists) receives enhanced protection. Critical personal data is processed within Pakistan to the extent feasible. Cross-border transfers occur only to countries with equivalent data protection or with your explicit consent.

In the event of a personal data breach, we will notify the relevant authority within 72 hours and affected users without undue delay, as required by the PDPB.

For data protection inquiries, contact our Data Protection Officer at support@psxstocker.com.

8. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you (responded to within 30 days)
• Correction: Request correction of inaccurate or misleading data
• Deletion: Request that we erase your personal data (processed within 90 days)
• Objection: Object to the processing of your data for specific purposes
• Data portability: Request your data in a machine-readable format
• Withdraw consent: Withdraw your consent to data processing at any time

To exercise any of these rights, email us at support@psxstocker.com.

9. Cookies

We use essential cookies only to maintain your session and authentication. We do not use third-party advertising cookies, tracking pixels, or analytics cookies that profile your behavior.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe a child under 18 has provided us with personal information, please contact us and we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are effective immediately upon posting the updated policy on this page. We will notify you of significant changes by posting a notice on the Service or sending an email. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact