Last updated: June 2026 · Operated by CSE Tracker Pro, Matara, Sri Lanka · csetrackerpro@outlook.com
CSE Tracker Pro is committed to protecting your personal data and handling it in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka. This policy explains what we collect, how we use it, and your rights.
We collect your name, email address, and (optionally) phone number for account creation, login, and account-related communication. We store the portfolio data you enter or import (holdings, transactions, dividends, watchlists, alerts) so the Platform can show your portfolio across devices. We do not collect any data we do not need to run the service, and we do not ask for bank, card, or brokerage login credentials.
Your data is used solely to provide and operate the Platform: to authenticate you, display and analyse your portfolio, send service and trial/subscription notices, and respond to support requests. We process your data on the lawful bases of performing our contract with you and your consent, which you may withdraw at any time by deleting your account.
We do not sell, rent, or share your personal data with third parties for marketing, and we do not use advertising or cross-site tracking cookies. Your data may be disclosed only where required by a valid court order, applicable law, or a lawful request from a regulatory authority (including the SEC of Sri Lanka or the Central Bank of Sri Lanka).
To run securely, the Platform relies on trusted infrastructure providers who process data on our behalf under their own security and privacy obligations: Supabase (authentication and database hosting), Cloudflare (website delivery and security), and an email delivery provider for transactional emails (such as verification, password reset, and trial/subscription notices). These providers process only what is necessary to deliver their service and are not permitted to use your data for their own purposes.
We use only essential cookies and browser local storage required for authentication, session management, security, and remembering basic preferences (such as your theme or remembered email). These are strictly necessary for the Platform to function. We do not use advertising or third-party tracking cookies.
Passwords are hashed and never stored in readable form. All communication between your browser and our servers is encrypted using TLS/HTTPS, and HTTPS is enforced. Data is stored on enterprise-grade cloud infrastructure protected by access controls, secure session tokens that expire after inactivity, and rate-limiting against automated attacks. While we take strong measures to protect your data, no system can be guaranteed completely secure.
We retain your account and portfolio data for as long as your account remains active. When you request deletion, your personal data is permanently removed from our active systems, and from routine encrypted backups in the normal backup-rotation cycle, except where retention is required by law.
Under the PDPA you have the right to access, correct, or delete your personal data, and to withdraw consent. You can edit your profile in Settings, and request account deletion from Settings or by contacting us. Deletion requests are processed within thirty (30) days.
The Platform is intended for users aged 18 and over and is not directed at children. We do not knowingly collect data from anyone under 18.
In the unlikely event of a breach affecting your personal data, we will notify affected users promptly by email, take reasonable steps to mitigate the impact (including resetting affected credentials where appropriate), and cooperate with the relevant authorities.
We may update this policy from time to time. Material changes will be communicated through the Platform. Continued use after changes constitutes acceptance of the updated policy.
For data requests or privacy questions: CSE Tracker Pro · Matara, Sri Lanka · WhatsApp +94 71 207 0850 · www.csetracker.lk · csetrackerpro@outlook.com