Privacy policy

1. The short version

We collect as little as possible. We do not sell your email or any personal data. Your watchlists and portfolio are stored privately and survive only as long as you keep them. You can export or delete your data at any time via /data-requests.

2. What we collect

• Account email + name when you sign in with Google, Microsoft, or GitHub via OAuth. Used only to identify your account and sync your watchlists/portfolio across devices.
• User-entered data — watchlists, portfolio holdings, alerts — stored in your browser's localStorage by default. If Supabase sync is enabled, this data is stored under your account in our Supabase project with row-level security so only you can read or write it.
• Waitlist email when you opt in on the landing page. Used only to email you launch updates. Stored in-memory today, moving to Resend / Loops before any public launch.
• Anonymous analytics — page views and event counts only. No session replay, no IP storage, no third-party ad tracking.

3. What we do not collect

• Payment-card numbers — all billing runs through Paystack and Stripe.
• Bank account numbers or broker credentials — we never ask and you should never enter them.
• Location data beyond the region your request lands in.
• Contact lists, social graphs, or other device data.

4. How we use your data

• To render your watchlists and portfolio.
• To send the alerts and digest emails you opt in to.
• To respond to support or corrections requests you email us.
• To improve the product by looking at aggregated, anonymised usage.

We never sell your email, your portfolio, or any other personal data, and we do not use your portfolio data to train models.

5. Data protection registration

Ghana's Data Protection Act, 2012 (Act 843) regulates how entities process personal data. We intend to register with the Data Protection Commission under Act 843 before we go beyond closed beta. We will publish the registration number on this page when available. Until then, we soft-gate any feature that would process new categories of personal data.

6. Your rights

Under Act 843 and general Ghanaian law you are entitled to:

• access the personal data we hold on you,
• correct any inaccuracies,
• request that we stop processing your data,
• request deletion, subject to any overriding legal obligation.

Exercise any of these via /data-requests or email privacy@nkosuo.com.

7. Cookies

We use a tiny set of cookies only when necessary: a session cookie for authentication and a preference cookie for your theme choice. We do not use third-party advertising cookies. If we add analytics cookies in the future, we will ask for your consent first.

8. Contact

Privacy questions: privacy@nkosuo.com.