Privacy Policy
CISCOM · operated under Precession Advisory · Version 2026-07-02
Your privacy matters. This policy sets out what we collect, why, and your rights under Malaysian law.
1. Scope
This policy explains how CISCOM, operated under Precession Advisory, collects, uses and protects your personal data. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
2. What we collect
When you register and use the Service, we collect:
- Account details: name and email address.
- Basic profile / KYC: mobile number, state, date of birth (to confirm you are 18+) and your self-declared investing experience.
- Consent records: which policies you agreed to, the version, and the date/time.
- Subscription & payment records: plan, status and transaction references (card details are handled by our payment provider, not stored by us).
- Usage data: pages viewed, watchlist items and basic technical logs.
- AI chat history: questions you ask our AI assistant and its answers are stored, to show you your own conversation history and to improve the service (for example, building better answers and FAQs).
3. How we use it
To create and secure your account, provide and personalise the Service, process subscriptions, confirm eligibility, keep records of consent, communicate with you about your account, and, only if you opt in, send product updates and offers. We may produce aggregated, de-identified statistics that do not identify you.
4. Legal basis and consent
We process your data with your consent (given at registration) and as necessary to provide the Service you request. You may withdraw marketing consent at any time without affecting your account.
5. Sharing and processors
We do not sell your personal data. We share it only with service providers who process it on our behalf, for example our hosting/database provider (Supabase), payment provider (DOKU) and email/analytics tools, and where required by law. These providers may process data outside Malaysia under appropriate safeguards.
6. Retention
We keep your data for as long as your account is active and as needed to meet legal, accounting and dispute-resolution obligations, after which it is deleted or anonymised.
7. Security
We use reasonable technical and organisational measures to protect your data, including encryption in transit, hashed passwords and access controls. No system is perfectly secure, but we work to protect your information.
8. Your rights
Subject to the PDPA, you may request access to or correction of your personal data, withdraw consent, or ask us to delete your account. Contact us and we will respond within a reasonable time.
9. Changes
We may update this policy; material changes will be notified and may require you to re-accept. The version and date are shown at the top of this page.