This notice explains what Kataly keeps about you, why, who else sees it, and how to remove it. It is written to meet Malaysia's Personal Data Protection Act 2010.
If you just browse
Your preferences (what you trade, your country, what you care about) are saved in a cookie in your browser so pages can show your markets first. We count these preferences in total (for example, how many visitors chose stocks) without linking them to anyone. We don't use advertising trackers or sell data.
If you make an account
- Sign-in: your email address, your name if Google or Microsoft gives it, and a scrambled (hashed) form of your password if you set one. We never store the password itself. A sign-in cookie keeps you logged in.
- What you add: your watchlist, holdings, price levels, notes, trade journal, the whales you follow and your alert and email settings. These are private to you and are used only to show you your own pages and alerts.
- Alerts: if you turn on phone or browser alerts, your browser gives us a delivery address for them, and we keep a list of what was already sent so you don't get repeats.
- Payments: Stripe handles payment. We keep your Stripe customer number, your plan and its status. We never see your card number. For free trials, Stripe gives us a one-way card fingerprint (not the card number) so one card can only start one free trial. We keep that fingerprint after an account is deleted, only for that purpose.
Who else handles it
- Stripe, for payments.
- Google or Microsoft, only if you choose to sign in with them.
- Our email provider, to send sign-in links, alerts and recaps you asked for.
- Your browser's push service (for example Google, Apple or Mozilla), only if you turn on alerts.
- Cloudflare, which carries traffic to the site.
These companies may be outside Malaysia. We share only what each needs to do its job.
Emails
We send sign-in links and the emails you switch on. Every recap and alert email has an unsubscribe link, and you can change all of them on your account page.
Your choices
- See and change your details and settings on your account page.
- Delete your account there. This removes your sign-in details and everything private you added. Stripe keeps its own payment records as the law requires.
- Clear your browsing preferences by deleting cookies in your browser.
Questions or requests about your data: [email protected].