What we collect

• Account details — your name, email address, and password (stored hashed, never in plain text).
• Watchlist and portfolio data — the companies you watch and the trades you record. This is self-reported by you, for your own use.
• Payments — the M-Pesa number you pay from, the amount, and the M-Pesa receipt, so we can match a payment to your plan or booking. We never see your M-Pesa PIN.
• Consultation requests — the phone number you give us and what you'd like help with, so we can arrange the session.
• Newsletter email — if you subscribe, just the email address you give us.
• Basic technical data — standard web server logs (IP address, browser type, pages visited) kept for security and troubleshooting.

How we use it

To run your account, show you your own watchlist and portfolio, confirm your payments and arrange any consultation you book, send account-related emails (password resets, verification), and — if you've subscribed — the newsletter. We don't sell your data, and we don't use it for anything beyond running Ipahco itself.

Who we share it with

We use third-party infrastructure to run the service — hosting, email delivery, M-Pesa (Safaricom) to take payments, and a market data provider for share prices. These providers process data on our behalf under their own security practices; we don't hand your data to anyone else for their own marketing or resale purposes.

Cookies

We use a session cookie to keep you signed in and a CSRF token to protect form submissions. We don't use third-party advertising or tracking cookies.

Your data, your control

You can update your account details or delete your account entirely from Settings at any time — deleting your account removes your watchlist, portfolio, and personal details from our database.

Contact

Questions about this policy or your data: info@ipahco.co.ke.