Privacy Policy

Last updated: 29 July 2026

This policy explains what DSE Insight Pro collects, why, where it is stored and how long it is kept. এই নীতিতে ব্যাখ্যা করা হয়েছে ডিএসই ইনসাইট প্রো কী তথ্য সংগ্রহ করে, কেন করে, কোথায় সংরক্ষণ করে এবং কতদিন রাখে।

1. What we collect

Data	Why
Name, email address, phone number	To create and identify your account.
Password	Stored only as a scrypt hash. We cannot read it, and we will never ask you for it.
Chart screenshots you upload	To produce your analysis. Cached briefly (see section 3).
Scan counts and timestamps	To enforce your tier's scan allowance.
Session duration and last-active time	Aggregate product analytics.
Payment reference (transaction ID, sender number, amount)	To verify your payment manually.
Error diagnostics (browser, error message, page)	To find and fix bugs.

We do not collect your brokerage account credentials, your portfolio holdings, your BO account number, or your NID. Do not send them to us.

2. What we do not do

We do not sell your personal data.
We do not share your identity or your scan history with brokerages, issuers or advertisers.
We do not use your uploaded screenshots to train AI models.

3. Screenshots and caching

An uploaded screenshot is sent to Google Vertex AI for analysis. We store a hash of the image alongside its analysis for up to 12 hours so that re-uploading an identical chart returns instantly without a second model call. After that window the cache entry expires and the analysis is regenerated.

Google processes the image to generate the response. Google's terms for the Vertex AI enterprise service apply; under those terms your content is not used to train Google's models.

4. Where data is stored

Account records, scan counters and cached analyses are held in Google Cloud Firestore in the us-central1 region (United States). The web application is served by Vercel's global edge network. This means your data leaves Bangladesh. If your organisation requires data residency within Bangladesh, contact us before signing up — we can discuss regional hosting for institutional accounts.

5. Third parties we use

Google Cloud (Vertex AI, Firestore) — analysis and storage.
Vercel — application hosting.
Telegram — internal operational alerts to our team (payment submissions, error reports). These alerts include your name, email and phone so a human can verify a payment.
Google Fonts — typography.

6. How long we keep it

Account data — until you ask us to delete it, or 24 months after your last sign-in.
Cached analyses — 12 hours.
Payment references — 6 years, for accounting and tax records.
Error diagnostics — 90 days.

7. Security

Passwords are hashed with scrypt and are never stored, logged or transmitted in plain text.
All traffic is encrypted in transit (HTTPS).
API access requires a signed session token; the browser holds no API keys or credentials of ours.
Internal services authenticate to each other with a shared secret, not with request headers a caller can forge.
Administrative access is passcode-protected and rate limited.

No system is perfectly secure. If you believe you have found a vulnerability, please report it to security@dseinsightpro.com rather than disclosing it publicly.

8. Your rights

You can ask us to show you the data we hold about you, correct it, or delete your account and its data. Email support@dseinsightpro.com from your registered address and we will respond within 30 days.

9. Cookies and local storage

We use browser local storage to keep you signed in between visits. We do not use advertising or third-party tracking cookies.

10. Children

The service is not intended for anyone under 18, and we do not knowingly collect data from minors.

11. Changes

Material changes to this policy will be announced in the app before they take effect.

Contact

DSE Insight Pro, a product of Khan AI Lab — support@dseinsightpro.com