Privacy Policy
What we hold about you, why we hold it, and how to get rid of it.
Stocks ZW Data (“we”, “us”) runs getstocks.co.zw, a market information site covering the Zimbabwe Stock Exchange and the Victoria Falls Stock Exchange. This notice explains what personal information the site holds, why, and what you can do about it. It describes what the site actually does today — if that changes, this page changes with it.
What we collect
No account is needed to read the site. Browsing companies, sectors, filings and the calendar is open to everyone, and we do not build a profile of anonymous visitors. The one thing we ask for is analytics: if you accept the cookie banner, Google Analytics counts your visit so we can see which parts of the site get used. Decline it and nothing is sent. Either way the choice is yours to change, and the cookie policy sets out exactly what it stores.
If you create an account, we hold:
- Your account details — name, email address, a one-way hash of your password (never the password itself), and the date you confirmed your email.
- Security settings you choose to enable — your two-factor authentication secret and recovery codes (stored encrypted), and the public credentials of any passkeys you register, along with when each was last used.
- What you build in the product — the issuers on your watchlist, the price alerts you set, and whether you are subscribed to the Stocks ZW market emails.
- Technical session records — for each active sign-in, the IP address, browser user-agent string and time of last activity. This is how “stay signed in” works and how we spot abuse.
We do not collect payment details, because the site is free and takes no payments. We do not ask for your national ID, date of birth, address or phone number. We do not run advertising, and we do not buy, sell or receive personal data from data brokers.
Why we hold it
- To let you sign in, and to keep your account secure.
- To show you your own watchlist, alerts and dashboard.
- To send you the emails you asked for — email verification, password resets, triggered price alerts, the daily digest and the weekly recap.
- To keep the service working and to investigate abuse or technical faults.
We do not use your personal information to train machine-learning models, and we do not send your watchlist or any other account data to an AI provider.
Who else can see it
We use a small number of service providers, each limited to what it needs:
- Resend delivers our email. It receives your name, your email address and the contents of the message being sent to you.
- Hetzner hosts the application and the database, in a data centre in Falkenstein, Germany. This means your account data is stored outside Zimbabwe.
- Cloudflare R2 stores issuer documents such as filings and annual reports. It holds no personal information.
- Google Analytics counts page views, only if you accepted analytics cookies. It receives your IP address (which Google truncates), your browser and device type, and the pages you viewed. It never receives your name, your email address or anything from your watchlist. If you declined, Google is not contacted at all.
Nobody else receives your personal information. We do not sell it, rent it, or share it for anyone else’s marketing. We would disclose it if a Zimbabwean court or a law with binding force over us required it, and we would tell you unless we were prohibited from doing so.
How long we keep it
- Account data — for as long as your account exists.
- Session records — a session expires after 120 minutes of inactivity, and expired records are cleared out.
- Server logs — short-lived, and kept only for diagnosing faults.
When you delete your account, we delete it — along with your watchlist, your price alerts and your registered passkeys. Deletion is immediate and is not reversible. Copies may survive briefly in encrypted database backups before those are rotated out.
What you can do
- See and correct it. Your name and email are editable at Settings → Profile. Your watchlist and alerts are yours to change at any time.
- Stop the digest. Every digest email carries an unsubscribe link, and you can also switch it off in your settings. Turning it off does not stop security emails such as password resets.
- Delete everything. The delete-account control is at Settings → Profile.
- Ask us anything. Email data@getstocks.co.zw for a copy of what we hold about you, or with a complaint. We will respond within 30 days.
Security
The site is served over HTTPS, passwords are stored as one-way hashes, and two-factor authentication and passkeys are both available — we would encourage you to turn one of them on. We will not make promises here about certifications or audits we have not actually undergone. No system is perfectly secure; if a breach ever affects your data, we will tell you.
Children
The site is intended for adults making their own investment research decisions and is not directed at children. If you believe a child has created an account, email data@getstocks.co.zw and we will remove it.
Changes
If we change this notice we will update the date at the top of this page. If a change materially affects what we do with your information, we will tell account holders by email before it takes effect.