SUPER

LEGAL

Privacy Policy

Last updated: 3 October 2026 · We revise this page whenever what we collect changes. Questions: [email protected].

Looking for the in-app controls — visibility levels, the privacy mask, preview-as-visitor? Those live on Privacy controls. This page is the policy: what we collect and why.

Short version

We measure how this website is used, and we use ordinary web analytics and advertising tools to do it — so yes, there are cookies and third-party scripts here. If you join the waitlist we also hold your email address. We do not sell your data, we do not publish your portfolio, and nothing we measure on this website is used to decide what the market data says. If you would rather not be measured, the last section tells you how to stop it.

Who we are

SuperX is a Pakistan Stock Exchange portfolio tracker and data service, operated from Pakistan. Questions about this policy, or any request about your data, go to [email protected].

What this website collects

  • Your waitlist email, if you give it to us — the address, the page you signed up from, the date, and your browser’s user-agent string. We email you once, when SuperX opens. You can unsubscribe in one click or ask us to delete the address.
  • How you use the site — pages viewed, what you clicked, what you searched for, how far you scrolled, which device and browser you used, your approximate location from your IP address (city level, not an address), and whether something failed while you were here.
  • Where you came from — the search, link, advertisement or referral that brought you.

We do not ask for your name, your phone number, your CNIC, your broker credentials or any payment detail anywhere on this website.

Cookies, and what they are used for

This site uses cookies and similar browser storage for three purposes:

  • Necessary — remembering your place in the waitlist queue so the page can show it when you come back. Without this the site still works; you just see less.
  • Measurement — counting visits and distinguishing one visit from another, so “1,000 visits” does not mean one person reloading.
  • Advertising and personalisation — measuring whether an advertisement worked, and showing SuperX advertisements to people who have visited before or who resemble visitors who found it useful.

We also use automated analysis, including machine learning, on this measurement data — to group visitors by behaviour, to decide which advertisements to show, and to improve the product. These are decisions about pages and audiences. No automated system here makes a decision with a legal or financial effect on you, and none of it touches the market data the site publishes, which comes from the sources listed below and is the same for everybody.

Who else sees it

The measurement above is collected through third-party services, which means those companies receive it under their own privacy policies. We use, or may use:

  • Google Analytics and Google Search Console — how the site is used, and how it appears in Google search.
  • Google Ads, Meta (Facebook and Instagram) and TikTok advertising pixels — switched on when we advertise on those platforms, to measure whether the advertising worked and to build audiences.
  • Cloudflare — serves this website and sees the requests that reach it.
  • Our email provider — holds your waitlist address so we can send the one email.

These services operate outside Pakistan, so this data is processed abroad. We never send them your waitlist email address, and we never send them anything about a portfolio. We do not sell your data.

What the app will collect

The SuperX app is not released yet. This page will say precisely what it collects before you can install it. The shape we are building to:

  • Account info — email, only if you sign up; there is a guest mode
  • Portfolio data — held on your device, and uploaded only if you opt in to sync
  • Imported screenshots and statements — read to extract holdings, then discarded

How long we keep it

  • Waitlist email — until you unsubscribe or ask us to delete it.
  • Analytics — 14 months, after which Google deletes the event-level records and we keep only aggregate counts.
  • Advertising audiences — per the platform’s own retention, typically up to 180 days from your last visit.

What we still don’t do

  • We don’t sell your data to anyone
  • We don’t send your email address, your holdings or any rupee figure to an advertising platform
  • We don’t share your portfolio with other users unless you set your visibility to allow it
  • We don’t read or analyse your transaction notes
  • We don’t ask for your broker password, and there is no broker connection to ask for

Children

This website and the SuperX app are not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us an email address, write to [email protected] and we will delete it.

Governing law

This policy, and any dispute about it, is governed by the laws of the Islamic Republic of Pakistan, and the courts at Karachi have exclusive jurisdiction. If you are reading this from the EU or the UK and would rather we did not measure your visit, the browser controls in the next section stop it.

Your choices

  • Turn off measurement — block third-party scripts in your browser, use a content blocker, or install Google’s Analytics opt-out add-on. Everything on this site works with all of it blocked; none of the data pages need it.
  • Clear the cookies — your browser’s site-data controls remove everything this site has stored, including your waitlist queue position.
  • Advertising — opt out of personalisation at Google My Ad Center and in your Meta and TikTok account settings.
  • Your waitlist address — unsubscribe in one click from the email, or ask us to delete it at [email protected]. We delete within 30 days.

Your controls

  • Four visibility levels — public, percent-only, followers-only, private (how they work)
  • Global privacy mask (one tap to blank every Rs amount)
  • Reset all data — wipes everything locally
  • Delete account — removes server-side data on request to [email protected]

Contact

Questions about this policy go to [email protected]. Other addresses are on the contact page.