Privacy Policy

1. Introduction & Scope

PSX Expert provides free, automated analytics derived from publicly available Pakistan Stock Exchange data, including prices, technical indicators, fundamental metrics and AI-generated forecasts. This Policy applies to all visitors, registered and unregistered users, and anyone who otherwise interacts with the Service, regardless of how or from where they access it.

This Policy is designed to meet international standards, including the European Union and United Kingdom General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), and other applicable data-protection laws. Where a specific law grants you rights, those rights are described in Section 11. This Policy does not apply to third-party websites, products or services that we do not own or control, even where we link to them (see Section 13).

The Service is operated from the Islamic Republic of Pakistan. Nothing in this Policy constitutes financial, investment, legal or tax advice; the Service is provided for informational purposes only. Please also review our Terms of Service, Cookie Policy and Disclaimer.

2. Information We Collect

We collect information in the following categories. We aim to minimise the personal data we collect and to process only what is necessary to operate, secure and improve the Service.

• Account data. If you create an account, we collect the information you provide, such as your name or username, email address and a hashed password. We never store your password in plain text. Optional profile details (for example, watchlists, saved preferences or display settings) are stored to personalise your experience.
• Usage & analytics data. Information about how you interact with the Service, such as pages and instruments viewed, features used, search queries, session duration, referring and exit pages, and aggregated behavioural metrics.
• Cookies & similar technologies. Small data files and identifiers stored on or read from your device. See Section 4 and our Cookie Policy.
• Log & device data. Information automatically collected by our servers and infrastructure, including your IP address (which may be truncated or anonymised), browser type and version, operating system, device type, language preferences, date and time stamps, and diagnostic or crash data.
• Communications data. If you contact us by email or through our contact page, we collect your message content, your email address and any other information you choose to provide, so that we can respond and keep a record of the correspondence.

The PSX market data displayed on the Service is sourced from the public PSX Data Portal and is not personal data about you. We do not knowingly collect special-category (sensitive) personal data, and we ask that you do not submit such data to us.

3. How We Use Information & Legal Bases

We use the information described above to provide, maintain, secure and improve the Service, to communicate with you, to display relevant advertising, and to comply with our legal obligations. Under the GDPR, we rely on one or more of the following legal bases for each processing activity:

• Performance of a contract. To create and manage your account, deliver the features you request, and provide customer support — this is necessary to perform our agreement with you under the Terms of Service.
• Legitimate interests. To operate, secure, debug and improve the Service, prevent fraud and abuse, understand how features are used, and protect our rights — where such interests are not overridden by your fundamental rights and freedoms.
• Consent. To set non-essential cookies, serve personalised advertising, run certain analytics, and send optional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legal obligation. To comply with applicable laws, respond to lawful requests from public authorities, and enforce our agreements.

4. Cookies & Tracking Technologies

We and our partners use cookies, web beacons, local storage and similar technologies to keep you signed in, remember your preferences, measure traffic and performance, and deliver and measure advertising. Essential cookies are required for the Service to function; non-essential cookies (including analytics and advertising cookies) are set only where permitted by law and, where required, with your consent.

You can manage or disable cookies through your browser settings and, where offered, through our consent banner. Disabling certain cookies may affect the functionality of the Service. For a detailed description of the cookies we use and your choices, please read our Cookie Policy.

5. Google AdSense & Advertising

The Service is supported by advertising. We use Google AdSense, a third-party advertising service provided by Google LLC, to display ads. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.

Google's use of advertising cookies — including the DoubleClick DART cookie — enables Google and its partners to serve ads to you based on your visit to our Service and/or other sites on the Internet. These cookies may collect information such as your IP address, device identifiers, browsing activity and ad-interaction data to personalise and measure advertising.

You may opt out of personalised advertising by Google by visiting Google Ads Settings. You may also opt out of personalised advertising from many third-party vendors by visiting www.aboutads.info (the Digital Advertising Alliance) and www.youronlinechoices.eu (for users in the EU/EEA). Opting out does not remove advertising; it means the ads you see may be less relevant to you.

For more information about how Google collects and uses data when you use our partners' sites or apps, please see Google's "How Google uses information from sites or apps that use our services" page. We do not control the cookies or technologies used by Google or other advertising vendors; their use is governed by their own privacy policies.

6. Analytics

We use analytics services to understand how visitors find and use the Service so that we can improve it. These services may set cookies and collect usage and device information such as pages visited, time spent, referral sources, approximate geographic location (derived from IP address) and aggregated interaction data. Wherever possible we configure analytics to anonymise or truncate IP addresses and to limit data retention.

Analytics providers act as our processors and process data on our behalf and under our instructions. Where required by law, analytics that are not strictly necessary are loaded only after you provide consent. You can opt out of analytics cookies through our consent banner or your browser settings, and through any opt-out tools the relevant provider makes available.

7. How We Share Data

We do not sell your personal data for money, and we do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA, except to the extent that the use of advertising and analytics cookies described above may be considered a "sale" or "sharing" under California law — in which case you may exercise the opt-out choices described in Sections 5, 6 and 11. We disclose information only in the following circumstances:

• Service providers / processors. With trusted vendors who perform services on our behalf — such as hosting, content delivery, analytics, advertising, email delivery and error monitoring — under contracts that require them to protect your data and use it only for the purposes we specify.
• Advertising partners. With Google and other advertising vendors as described in Section 5, for the purpose of serving and measuring ads.
• Legal & safety. When required to comply with applicable law, legal process or enforceable governmental request, or to protect the rights, property or safety of PSX Expert, our users or the public.
• Business transfers. In connection with a merger, acquisition, financing, reorganisation or sale of assets, in which case we will require the recipient to honour this Policy or notify you of any material change.
• With your consent. For any other purpose disclosed to you at the time we request your consent.

8. International Data Transfers

We operate from Pakistan, and our service providers may process data in countries other than the one in which you reside, including the United States and the European Economic Area. Data protection laws in these countries may differ from those in your jurisdiction.

Where we transfer personal data of individuals in the EEA, the United Kingdom or Switzerland to a country that has not been deemed to provide an adequate level of protection, we implement appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) or reliance on a recipient's certification, together with supplementary technical and organisational measures where necessary. You may contact us to obtain more information about these safeguards.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide the Service, comply with our legal, accounting and reporting obligations, resolve disputes and enforce our agreements. Retention periods vary by data type:

• Account data is retained for the life of your account and deleted or anonymised within a reasonable period after you close it, unless a longer period is required by law.
• Server logs and diagnostic data are typically retained for a limited period for security and troubleshooting, then deleted or anonymised.
• Analytics and advertising data are retained according to the configured retention settings of the relevant provider.
• Communications are retained for as long as needed to address your enquiry and to keep appropriate records.

When data is no longer required, we securely delete, anonymise or aggregate it so it can no longer be associated with you.

10. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include encryption of data in transit (HTTPS/TLS), hashing of passwords, access controls and least-privilege principles, network protection, and regular review of our practices.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected users where required by applicable law.

11. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data. We honour these rights to the extent required by applicable law.

If you are in the EEA, the United Kingdom or a similar jurisdiction (GDPR), you have the right to:

• Access — obtain confirmation of whether we process your data and a copy of it.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — request deletion of your data ("right to be forgotten") where grounds exist.
• Restriction — request that we limit our processing in certain circumstances.
• Data portability — receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller where feasible.
• Object — object to processing based on legitimate interests, and to object to direct marketing at any time.
• Withdraw consent — withdraw any consent you have given, at any time, without affecting prior lawful processing.

You also have the right to lodge a complaint with your local data-protection supervisory authority.

If you are a California resident (CCPA/CPRA), you have the right to:

• Know — request disclosure of the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it.
• Delete — request deletion of personal information we have collected, subject to legal exceptions.
• Correct — request correction of inaccurate personal information.
• Opt out of the sale or sharing of personal information, including for cross-context behavioural advertising.
• Non-discrimination — not receive discriminatory treatment for exercising your privacy rights.

How to exercise your rights. To make a request, contact us at support@psxexpert.com or through our contact page. We will verify your identity before acting on a request and will respond within the timeframes required by law. You may use an authorised agent to submit a request on your behalf where permitted. We do not charge a fee for most requests, but we may charge a reasonable fee or decline a request that is manifestly unfounded, excessive or repetitive, as allowed by law.

12. Children's Privacy

The Service is not directed to children, and we do not knowingly collect personal data from children under the age of 16 (or under 18 where a higher age of consent applies in your jurisdiction). If you are below the applicable age, please do not use the Service or provide any personal information. If we learn that we have collected personal data from a child without appropriate consent, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us using the details in Section 15.

13. Third-Party Links & Services

The Service may contain links to third-party websites, services and resources — including the public PSX Data Portal, advertising destinations and external references — that are not operated by us. This Policy does not apply to those third parties, and we are not responsible for their content, privacy practices or security. We encourage you to review the privacy policies of any third-party site or service you visit before providing them with personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make material changes, we will revise the "Last updated" date at the top of this page and, where appropriate or required by law, provide a more prominent notice. Your continued use of the Service after an updated Policy takes effect constitutes acceptance of the changes. We encourage you to review this page periodically.

15. Contact Us

PSX Expert is the data controller responsible for your personal data as described in this Policy. If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@psxexpert.com
• Contact form: Contact page

We will do our best to respond to your enquiry promptly and to resolve any concerns you may have about how we handle your personal data.