Privacy Policy
CISCOM · operated by Precession Advisory Ltd · Last updated 24 September 2026
Your privacy matters. This policy sets out what we collect, why we collect it, who we share it with, and your rights under Malaysian law.
1. Who we are and scope
This policy explains how CISCOM, operated by Precession Advisory Ltd (the "data user" for the purposes of Malaysian law), collects, uses, shares and protects your personal data when you use ciscom.ai. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA). Questions and requests about your data can be sent to alerts@ciscom.ai.
2. What we collect
When you register and use the Service, we collect your account and profile details (name, email address, a securely hashed password or your basic Google profile if you sign in with Google, mobile number, state, date of birth to confirm you are 18 or older, and investing experience), records of the consents you gave, and subscription and payment records such as plan, amount and order references (card and banking details are entered into our payment provider's secure checkout, shown within our site, and are never seen or stored by us). We also keep your product activity: your watchlist, records you choose to track, preferences, questions you ask the AI assistant (kept so you can see your own history), records of service emails sent to you, and basic technical logs used for security and rate limiting.
3. Cookies
We use an essential cookie to keep you signed in, and one first-party cookie that remembers, for 30 days, which website or campaign link first brought you to CISCOM and the page you landed on, so we know which channels help people find us. We also count page views with cookie-free, anonymous analytics. We do not use advertising cookies or third-party ad trackers on the Service.
4. How we use your data
We use your data to create and secure your account, provide and personalise the Service, process subscriptions and confirm payments, confirm eligibility, keep records of consent, send transactional emails such as verification codes, renewal reminders and IPO event alerts, respond to support requests, and protect the Service against abuse. If and only if you opted in, we also send product updates and offers, and you can withdraw that consent at any time. We may produce aggregated, de-identified statistics that do not identify you, for example the demand and performance statistics shown in the product.
5. Legal basis and consent
We process your data with your consent, given at registration, and as necessary to provide the Service you request and to meet our legal obligations. Withdrawing marketing consent does not affect your account or the transactional emails that are part of the Service.
6. Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf to run the Service, covering hosting and database infrastructure, payment processing (your card details go straight to the payment provider's secure checkout), sending our service emails, and AI processing when you use the AI assistant, and where disclosure is required by law. Some of these providers store or process data outside Malaysia; where that happens, we rely on their contractual and security safeguards.
7. Retention
We keep your data for as long as your account is active and as needed afterwards to meet legal, accounting and dispute-resolution obligations, after which it is deleted or anonymised. Short-lived records such as signup verification codes expire and are removed quickly. Payment records are kept as required for financial record-keeping even if you delete your account.
8. Security
We protect your data with encryption in transit, hashed passwords, role-based database access controls, signature-verified payment notifications and rate limiting. No system is perfectly secure, but we design for safety first and continue to harden the Service.
9. Your rights
Subject to the PDPA, you may request access to the personal data we hold about you, ask us to correct it, withdraw consent, or ask us to delete your account and data. Email alerts@ciscom.ai from your registered address and we will respond within a reasonable time. Deleting your account removes your personal data except records we must keep by law, such as payment records.
10. Children
The Service is for adults. We do not knowingly collect personal data from anyone under 18, and signup requires a date of birth confirming you are 18 or older.
11. Changes to this policy
We may update this policy as the Service evolves. Material changes will be notified in the product or by email and may require you to re-accept. The date at the top of this page shows the current version.