Privacy Notice
privacy-2026-10-17-v1
Document status and operator
This is the approved and effective Privacy Notice as of 2026-10-17 for ElZobad Financial Analysis Platform (operated by Ahmed Khaled Abdalla; privacy and data requests contact: privacy@elzobad.com). Infrastructure and processing services are hosted on Microsoft Azure (UAE North / East US / Europe regions).
Data the service processes
Account data includes email, optional display name, password hash, verification status, plan, accepted terms/privacy versions and acceptance time. Usage data includes watched stocks, alert preferences, Somaa questions and answers, and security records. Network addresses are processed for request limits and protection, and hosting infrastructure logs technical connection data necessary for security and operations.
Purposes and cookies
Data supports account creation/verification, sessions, password resets, watchlists, requested messages, Somaa answers, abuse prevention and correction auditing. The platform uses essential session and request-forgery-protection cookies. Passwords are not stored as plaintext, and session/action tokens are stored as hashes. These safeguards do not guarantee that no security incident can occur.
AI processing and service providers
For a Somaa answer, the question, necessary financial context and a bounded relevant conversation history are sent to the configured AI provider (Azure OpenAI, and optionally Groq when configured). Email uses Azure Communication Services, and disclosure-document processing uses Azure Document Intelligence within the approved Microsoft Azure hosting regions (UAE North / East US / Europe).
Messages, retention and rights
Messages support account verification/recovery and watchlist alerts according to available features and preferences. Link or session expiry does not delete its database record. Account and chat data are retained while the account remains active and until an explicit deletion request is submitted to privacy@elzobad.com (fulfilled within 30 days), while security/audit logs and encrypted backups are retained for up to 90 days for legal and operational protection. Access, correction or deletion requests may be submitted to privacy@elzobad.com.
External services and updates
Disclosure links may lead to external sites with their own policies. The interface loads a font from Google Fonts, which may send technical connection data to that provider. This notice is effective as of 2026-10-17, and any material update will be published on the platform with a new version identifier.