Introduction
This policy explains what IQWealth collects about you, why it collects it, where it is stored, and what you can ask for regarding it. It covers the website and all of its pages and services.
The platform is free and charges nothing. It does not ask for card or bank-account details, and it executes no purchase or sale. You can browse most pages without creating an account at all; nothing is collected about you beyond the limited technical data described below.
As at the date of this version, Iraq has no comprehensive personal-data protection law in force, and a draft law is being prepared. We comply with what is in force, and we write this policy conservatively so that it does not promise what we cannot deliver.
Who operates the platform
The IQWealth platform is operated through the domain iraqsm.com, referred to in this policy as “the platform” or “we”. IQWealth is a financial information and data platform. It is not a financial broker, an exchange, or an investment adviser.
For any enquiry about privacy or personal data, use the contact method published on the Contact page. The email address published there is the official channel for requests to access, correct or delete account data.
The information we collect
We collect four categories only, and nothing else:
- Account data: your email address and the username you choose. Your password is handled entirely by the authentication provider (Supabase Auth); it never reaches us and we do not store it in any form.
- Your data inside the platform: your watchlist, the portfolio contents you enter yourself (ticker, quantity, purchase price, and an optional date or note), and the price alerts you create.
- Your preferences: language, light or dark appearance, and the sidebar state.
- Technical data: our infrastructure processes your IP address, browser and device data, request logs and performance measurements, as described in the service-providers section.
If you email us, your message and its sender address remain in our mailbox. There is no contact form on the site, and we do not store messages in our database.
We do not ask for an ID number, an address, banking details or any financial document, and we provide no file upload.
How we use the information
- To run your account: signing in, confirming your email address, and resetting your password.
- To save what you create and sync it between your devices: watchlist, portfolio, alerts and preferences.
- To run the features you ask for, and to show the prices and indicators related to what you follow.
- For service security, and to deal with faults and misuse.
- To reply to you if you write to us.
- To measure general performance and usage in order to improve the platform, through the two services named in the service-providers section.
We do not use your data for advertising. We do not sell it, rent it or trade it, we build no advertising profiles from it, and we share it with no data brokers.
Basis for processing, and your choices
We process account data and what you create inside the platform because you asked for the service: without them an account cannot run and a portfolio cannot be saved. We process technical data to the extent needed to operate and protect the site.
Your choice is practical and direct: you can use the platform with no account at all, you can enter no data into the portfolio, you can delete anything you added at any time, and you can sign out and clear your browser storage to remove the locally saved copy.
Cookies and local storage
We use exactly one cookie: the session cookie that keeps you signed in, managed by the authentication provider. We use no advertising cookies, no tracking pixels and no cross-site tracking tools.
We use your browser’s local storage — not our servers — to keep six keys: language, appearance, watchlist, portfolio, alerts and the sidebar state. That is what lets the portfolio and watchlist work without an account. Clearing the site’s data from your browser erases this copy.
Service providers
We rely on external providers to run the platform, each with a defined role:
- Supabase — authentication and the database. Account data, watchlists, portfolios and alerts are stored there, and passwords, confirmation emails and password resets are handled there.
- Vercel — hosting and running the site. Browsing requests and the technical data that accompanies them pass through it.
- Vercel Analytics and Vercel Speed Insights — measurement of general usage and page performance. Both run on every page.
We publish editorial material from a content management system of our own. That system is a SOURCE of content and receives no data about you.
The market-data sources — the Iraq Securities Commission, the Iraq Stock Exchange, brokerages, media sources and the gold and oil price sites — are publicly published information that we read. We send them nothing about you, and they have no connection to your personal data.
The platform relies on third-party technical providers for hosting, databases, authentication, analytics and supporting services. Data may be processed or stored on infrastructure located inside or outside Iraq, depending on the provider and where its systems are at the time of processing.
We do not promise that all data stays inside any particular country or data centre. When an external provider is used, we limit ourselves as far as possible to the data needed to run the service, and we apply the protections available in the product and in the provider’s settings.
Portfolio and watchlist data
The portfolio, the watchlist and the alerts are personal tracking tools: you enter the figures, and we save them, display them, and compute value and profit and loss from them.
IQWealth is not a financial broker and not a custodian. We hold no securities and no money, we execute no buy or sell orders, we do not connect to your account at any broker, and we do not verify your actual balances. What you enter here is a record you keep, not an investment account.
How long we keep data
We keep personal data only for as long as is necessary for the purpose it was collected for, or to run the account and the service, or to protect the platform from misuse, or to meet applicable legal obligations.
When an account is closed, or a deletion request is accepted, we delete or anonymise the data associated with the account once there is no longer a legitimate need to keep it. Limited copies may remain for a further period inside backups or security logs until those systems’ own retention cycles end, or where retention is required to evidence a transaction, deal with a dispute, or meet a legal requirement.
We do not apply a single retention period to every kind of data; the period differs by record type and purpose. You can ask about a specific category of data through the privacy channel published on the Contact page.
In practice: your account data and what you created inside the platform remain for as long as the account exists, because that data IS the service. Technical data and logs are kept by the service providers according to their own retention cycles.
Deleting your account and data
You can delete anything you added at any time: a portfolio row, a ticker from your watchlist, or an alert. It is removed immediately from the browser and from your account.
To delete the account in full, together with the data attached to it, write to us from the email address registered on the account. We process the request manually and confirm to you when it is done.
There is currently no in-product button to delete an account, and for that reason we do not promise a specific turnaround time. This will be stated here explicitly when the feature exists.
Information security
The site is served over HTTPS; authentication and passwords are handled by a specialist provider that gives us no sight of your password; and access to account data is restricted at the database level so that a user reaches only their own rows.
No internet service is absolutely secure, and we do not claim otherwise. We hold no compliance certification and no security accreditation, and we claim none. You are responsible for keeping your password confidential.
External links and sources
The platform contains links to sites we do not operate: official bodies, data sources, media outlets, and our own social media accounts. Each has its own policies, and this policy does not apply to them. The presence of a link does not mean we share any data about you with that site.
Minimum age
The service is intended for people aged 18 or over. The platform does not target children and does not knowingly invite anyone below that age to create an account.
If it becomes apparent to us that an account was created for someone below the permitted age, we may restrict or delete the account and take reasonable steps to remove the data associated with it, subject to any legal obligation requiring a particular record to be kept.
If you are a parent or guardian and believe a child has created an account, write to us and we will deal with it.
Your rights and requests
You can write to us from your registered email address to request:
- A copy of the account data we hold about you.
- Correction of inaccurate data, such as your username.
- Deletion of the account and what is attached to it.
- Any enquiry relating to this policy.
We commit to what we can actually carry out, and we usually reply within one to two working days. We do not promise steps the platform has no ability to perform.
Changes to this policy
We may update this policy whenever the platform or its service providers change. We publish the updated version on this page and change the last-updated date at the top of it. It is worth reviewing from time to time.
Contact
For any question or request relating to privacy, write to us at boatlef@gmail.com — the same address published on the Contact page. This is the designated channel for privacy requests; social media accounts are not an official channel for them.
Who operates the platform is set out in the “Who operates the platform” section above.