What we store, and what
we never ask for

Summary written for humans, not lawyers.

What we never ask for

There is no broker integration in this product, and there never needs to be. We do not ask for — and you should never enter anywhere — your broker username, password, CDC credentials, or trading PIN. Trades come from PDFs you already have, or from manual entry.

What is stored

• Account — your name, email address, and a hashed password (if you did not sign in with Google).
• Portfolios — names, ordering, and each portfolio's ATL / non-ATL tax setting.
• Trades — date, ticker, side, quantity, price, commission, and the source (manual or imported) with the broker contract number where applicable.
• Cash and dividends — the entries you record, including withholding and zakat figures on confirmed dividend receipts.
• Snapshots — a daily record of portfolio value and cost, used to draw the performance chart.

How your password is handled

Passwords are hashed with bcrypt before being stored and are never written down in plain text. Password-reset links are stored only as a SHA-256 hash, expire after one hour, and are single-use — so even a copy of the database would not hand someone a working reset link.

Who can read your portfolio

Only you. Every request that reads or writes portfolio data checks your signed-in session first and confirms the portfolio belongs to you. A request for someone else's portfolio is refused, whether or not you happen to know its ID.

The one thing that is shared

Market data — closing prices, intraday quotes, and index levels — is stored once and read by everyone. A closing price is the same fact for every user, so there is no reason to keep a private copy per person, and nothing about your holdings is inferable from it.

Your PDF files

Contract-note PDFs are parsed in your browser. The file itself is never uploaded. Only the structured trade rows you review and approve are sent to the server and saved.

Third parties

• Pakistan Stock Exchange — market data is fetched from PSX's public data service by our servers, not by your browser, so your holdings are never disclosed to it.
• Google — only if you choose Google sign-in, and only to confirm your identity.
• Email delivery — a transactional email provider sends verification and password-reset messages. It receives your email address and the message, nothing about your portfolio.

Deleting things

Deleting a portfolio permanently removes its trades, cash entries, dividends, and snapshots along with it. This is immediate and cannot be undone, so export or screenshot anything you want to keep first.

Not financial advice

This is a tracking and analysis tool. Tax figures are estimates based on published NCCPL buckets and the status you select; price data may be delayed or incomplete. Nothing here is investment, accounting, or tax advice. Verify against your broker statement and your own advisor before acting.