Privacy Policy

Smart Algos Investment Solution Ltd ("Smart Algos", "we", "us", "our") operates Smart Algos Capital, a quantitative research and investment technology platform. We are committed to protecting the privacy of everyone who visits or subscribes to our platform.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. By subscribing or using our platform you agree to this policy.

Email address — collected when you subscribe for free access to research and strategy content, or when you make a payment for premium reports or consultation.

Payment data — we do not store card numbers or CVVs. All payment processing is handled by Paystack, a PCI-DSS Level 1 certified processor. We only receive a transaction reference and status confirmation.

Usage data — standard server logs including IP address, browser type, pages visited, and access timestamps, collected automatically by our hosting infrastructure (Vercel, Supabase). This data is used for security monitoring and to improve the platform.

Communication data — any messages you send to us via email or the contact form.

• To provide you with access to subscribed research content and strategy data
• To send research updates, new publications, and platform announcements (you can unsubscribe from any email at any time)
• To process payments and send receipts
• To confirm and manage consultation bookings
• To respond to your enquiries and provide support
• To monitor platform security and detect fraudulent activity
• To comply with applicable laws and regulations

We do not use your data for automated profiling or advertising, and we do not sell your data to third parties.

For users in the European Economic Area, we process your data under the following legal bases:

• Consent — for email subscriptions and marketing communications
• Contract performance — to deliver paid services you have purchased
• Legitimate interests — for platform security monitoring and fraud prevention
• Legal obligation — where required by applicable law

We do not sell, trade, or rent your personal information. We share data only with:

• Paystack — our payment processor (PCI-DSS compliant, processes payments securely)
• Supabase — our database and authentication provider (SOC 2 Type II certified, data stored in encrypted databases)
• Vercel — our hosting and deployment platform
• Email delivery services — to send transactional emails and newsletters
• Legal authorities — where we are required to disclose data by law, court order, or to protect our rights

We retain your email address and subscription records for as long as you remain subscribed. If you unsubscribe or request deletion, we will remove your data within 30 days, except where retention is required by law.

Payment transaction records are retained for 7 years as required by financial regulations in Kenya.

We implement industry-standard security measures:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for data at rest
• Row-level security (RLS) in our database — users can only access their own data
• Regular security reviews and dependency vulnerability scanning

No method of electronic storage is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

We use minimal cookies for session management and basic analytics. We do not use third-party advertising cookies. You can disable cookies in your browser settings, though this may affect platform functionality.

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your data (subject to legal retention obligations)
• Opt-out — unsubscribe from marketing emails at any time using the unsubscribe link in any email
• Portability — receive your data in a machine-readable format (GDPR users)
• Objection — object to processing based on legitimate interests (GDPR users)

To exercise any of these rights, contact us at the address below.

Our infrastructure providers (Vercel, Supabase) may store or process data in the United States or other jurisdictions. When this occurs, appropriate safeguards are in place, including standard contractual clauses where required by applicable law.

We may update this Privacy Policy from time to time. We will notify subscribers of material changes by email. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy enquiries, data requests, or to exercise your rights:

Email: privacy@smartalgos.com

Company: Smart Algos Investment Solution Ltd

Location: Embu, Kenya