Data Retention Policy
1. Market Data
SouqData retains historical market data (stock prices, financial statements, dividends, announcements, and governance records) indefinitely. This data is sourced from public exchange filings and regulatory disclosures and forms the core analytical foundation of the platform. Market data is not personally identifiable information.
2. User Account Data
Account information (email address, name, subscription tier, API keys) is retained for the duration of your active subscription plus 90 days after account closure. After this period, account data is permanently deleted from our systems. You may request immediate deletion at any time by contacting support@souqdata.com.
3. Usage & Analytics Data
API request logs (endpoint, timestamp, response code) are retained for 12 months for rate limiting, abuse prevention, and service improvement. Google Analytics data is retained for 14 months per Google's default retention setting. Copilot query logs (anonymized) are retained for 6 months for service improvement.
4. Portfolio & Watchlist Data
Portfolio holdings and watchlists created without an account are stored in your browser's localStorage and are not transmitted to our servers. When account-synced portfolios are available, this data will follow the same retention policy as account data (active subscription + 90 days).
5. Cookie Data
Essential cookies (theme, locale) persist until cleared by the user. Analytics cookies (Google Analytics) expire after 2 years per Google's default. Cookie consent preferences are stored in localStorage indefinitely. See our Cookie Policy for details.
6. Data Subject Rights
Under the UAE Federal Decree-Law No. 45 of 2021 (PDPL) and the EU General Data Protection Regulation (GDPR), you have the right to access, correct, export, and delete your personal data. To exercise any of these rights, contact us at privacy@souqdata.com. We will respond within 30 days.
7. Data Hosting & Security
All data is hosted on Supabase PostgreSQL in the eu-central-1 (Frankfurt) region. Database backups are automated via Supabase's point-in-time recovery. Data in transit is encrypted via TLS 1.2+. Data at rest is encrypted via AES-256. Access to production databases is restricted to authorized personnel only.
8. Data Deletion Requests
To request deletion of your personal data, email privacy@souqdata.com with the subject line "Data Deletion Request" and include your registered email address. We will confirm deletion within 30 days. Note that market data (which is publicly sourced and not personally identifiable) is not subject to deletion requests.
Last updated: 5 April 2026
SouqData is operated by Pangaea / Mamba Ventures.