MALI Privacy Policy

Last Updated: October 2026

1. Scope

This Privacy Policy explains how MALI collects, uses, and protects information related to your use of the platform.

2. Data Collected

  • Account data: name, email, authentication identifiers.
  • Profile data: the answers you give during onboarding (experience, risk tolerance, trading style, focus and goals).
  • Portfolio data: the purchases and holdings you record.
  • Usage data: logs, events, agent interactions, feature usage.
  • Market data: symbols, watchlists, preferences.
  • Technical data: IP address, device, browser, timestamps.

3. Purpose of Processing

We use data to:

  • Authenticate users and secure access.
  • Provide dashboards, analytics, and agent workflows.
  • Improve performance, reliability, and UX.
  • Comply with legal and regulatory obligations.

4. Legal Basis

Where applicable, processing is based on:

  • Contract (providing the service).
  • Legitimate interest (security, improvement).
  • Consent (optional features, marketing).

5. Data Sharing

We share data with these service providers only to provide MALI:

  • AI model providers: DeepSeek, with Zhipu AI as a backup. Both are based in China. When you use an AI feature we send them your question and the context it needs. That can include symbols, holdings and figures from your portfolio, and your profile answers. Demo sessions send no profile.
  • Stripe, for payments and subscriptions. Card details go to Stripe directly; MALI never stores them.
  • Our email provider (IONOS), to send account, billing and service emails.
  • Hosting and infrastructure providers that run MALI's servers and databases.
  • Regulatory or legal authorities when the law requires it.

We do not sell your personal data.

6. Data Retention

Data is retained for as long as necessary to provide the service and meet legal obligations, then deleted or anonymized.

7. Security

We use encryption, access controls, and audit logging to protect data.

8. Your Rights

Subject to applicable law, you may:

  • Access, correct, or delete certain data. Download a copy of your data, or delete your account, under Settings > Your Data.
  • Object to or restrict processing.
  • Withdraw consent where processing is based on consent.

9. Contact

For privacy questions or requests, contact: mali@trw-opex.com