Privacy Policy

Your email address. We need it to sign you in and to send you the alerts you ask for. If you sign in with Google, Google gives us your email address and, if your Google profile has them, your name and profile picture. We do not receive your Google password.

What you build in the product. The tickers on your watchlist, the filters you save, and your notification settings (the address or Telegram chat we send alerts to, your timezone, and how often you want to be interrupted).

Your plan. Which tier your account is on and when it expires.

Server logs. Our web server records the IP address, the page requested, and the time. We keep these briefly to find faults and block abuse. Our application servers are configured not to log request contents.

We do not collect anything else. There are no advertising trackers, no analytics cookies, and no third-party scripts that profile you.

Card numbers. Payments are handled entirely by our payment provider on their own pages. We receive confirmation that a payment happened, and the email address or account reference it was made under, so that we can activate your plan. We never see or store your card details.

Your passwords. Signing in uses a one-time code sent to your email, or Google. We do not store passwords at all.

We hold your email address and what you build in the product because they are necessary to provide the service you asked for. We hold server logs because we have a legitimate interest in keeping the service running and not being abused. We do not rely on advertising or profiling as a purpose.

Supabase — authentication and the database. Data is stored in Amazon Web Services' US West (Northern California) region, in the United States.

Our own servers — hosted in Silicon Valley, United States.

Our email provider — sends sign-in codes and alerts on our behalf.

Our payment provider — takes payments and holds the billing relationship.

Cloudflare — serves the site and absorbs abusive traffic.

These companies act on our instructions. We do not sell your data and we do not share it with advertisers or data brokers.

The service runs in the United States, so your data is stored and processed there. If that is not acceptable to you, please do not create an account.

We keep your account and what you build in it for as long as your account exists. Ask us to delete your account and we delete it, along with your watchlist, saved filters and notification settings. Server logs roll off on their own within a short period.

We may keep a minimal record of payments for as long as Hong Kong tax and accounting rules require.

Under the Hong Kong Personal Data (Privacy) Ordinance you may ask us what personal data we hold about you, ask us to correct it, and ask us to delete it. Write to [email protected] from the address on your account and we will answer within a reasonable time and without charge.

You can stop all alerts at any time from your notification settings, without deleting your account.

The UK and EU General Data Protection Regulation apply to you even though we operate from Hong Kong, because we offer this service to you where you are. Staffix Limited is the controller of your personal data. We do not profile you and we make no automated decisions about you — what this site automates is the analysis of share prices, not of people.

Your rights here are wider. As well as asking what we hold, correcting it and deleting it, you may ask us to restrict how we use it, object to our use of it where we rely on legitimate interests, and receive a copy of what you gave us in a portable, machine-readable form. Write to [email protected] from the address on your account. We answer within one month.

Transfers out of the UK and EEA. The service runs on our own servers in the United States, which is what makes it possible to provide the service you signed up for. Where a provider in the United States processes data on our behalf, our agreement with them includes the European Commission's Standard Contractual Clauses together with the UK Addendum — the safeguard the UK and EU GDPR require for transfers of this kind.

If we get this wrong, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office.

Two cookies, both functional. One remembers which language version of the site you are on. The other keeps you signed in, and is only set once you sign in. Neither is used for tracking and neither is shared. We set no advertising or analytics cookies at all — which is why this site never asks you to accept anything.

The price moves we report, and the filings, press releases and news articles we link to, are public information about public companies. They are not personal data about you, and nothing you do on this site is visible to other users.

If we change this policy in a way that affects you, we will say so on this page and, for material changes, by email. The date at the top always reflects the current version.

Staffix Limited, Unit C, 9/F, Winning House, No. 72–76 Wing Lok Street, Sheung Wan, Hong Kong. Email [email protected].