LIDA

Privacy Policy

Last updated: 22 June 2026

Li-Da respects your privacy and handles personal data in line with Malaysia's Personal Data Protection Act 2010 (as amended). This notice explains what we collect, why, and your rights. By using Li-Da, you consent to the practices described here.

1. Who we are

Li-Da is operated by Carlson Koh ("we"), the data controller. Contact for any privacy matter: carlsonkoh61@gmail.com.

2. What we collect

• Account data: your email address (and authentication details handled by our login provider).
• Your activity in Li-Da: the stocks you read, save, watchlist, set alerts on, and your journal/decision logs.
• Technical/usage data: basic logs, and a one-way hashed (not raw) version of your IP address used only to limit abuse of free reads.
• Cookies: a small functional cookie to run the free-read limit and keep you signed in. We don't use advertising or tracking cookies.

We collect only what we need to run the service.

3. Why we use it

To provide and secure the service, generate your reads, save your history, send alerts you've asked for, prevent abuse, and improve Li-Da. We do not sell your personal data.

4. Who we share it with (our service providers)

We use trusted third-party providers to run Li-Da. They process data on our behalf, only as needed:

• Supabase — database and authentication (stores your account and activity).
• Vercel — hosting.
• Anthropic (Claude) — generates the AI read. We send it market data and the ticker you ask about — not your name or email.
• Finnhub / Twelve Data — market-data providers; they receive only the ticker symbol, not your personal data.
• Resend — sends alert emails (receives the email address for delivery).

5. Data stored outside Malaysia (cross-border transfer)

Our providers above operate servers outside Malaysia. By using Li-Da and providing your data, you consent to your personal data being transferred to and processed in those locations for the purposes in this notice. We take reasonable steps to ensure your data is protected to a comparable standard.

6. How we protect it

We use access controls (row-level security on our database), encryption in transit (HTTPS), service-key isolation for sensitive operations, and hashed (not raw) IP storage. No system is perfectly secure, but we take practical steps to protect your data.

7. How long we keep it

We keep your data while your account is active and as needed to provide the service. You can ask us to delete your account and associated data.

8. Your rights

You may access, correct, or delete your personal data, withdraw consent, or request a copy of your data, by emailing carlsonkoh61@gmail.com. We'll respond within a reasonable time as required by law. If we ever become aware of a personal-data breach that may affect you, we'll act in line with our legal obligations.

9. Children

Li-Da is not intended for anyone under 18, and we don't knowingly collect data from minors.

10. Changes

We may update this notice; the "last updated" date will change. Material changes will be highlighted.

11. Contact

Privacy questions or requests: carlsonkoh61@gmail.com