Privacy Policy & Institutional Data Isolation Guarantee
Effective Date: October 2026 • Developed by Cyntrona SMC-Private Limited
STRICT TENANT ISOLATION GUARANTEE:
COMPLIFY.PK enforces strict architectural and database-level tenancy boundaries. Each Pakistan Stock Exchange (PSX) and Pakistan Mercantile Exchange (PMEX) brokerage operates inside an isolated organizational container. Platform Super Administrators and platform support staff CANNOT view, read, or inspect company internal tasks, checklists, private comments, employee attendance logs, client debit balances, or uploaded evidence files.
1. Scope of Information Collected
We collect and process only the minimal data points necessary to deliver compliance workflow services:
- Brokerage Profile: Official Company Name, TREC Number, Registered Exchange (PSX / PMEX), Regulatory Category, Official Office Address, and NTN.
- Authorized User Accounts: Names, official email addresses, mobile numbers, CNIC numbers, employee codes, designations, and cryptographic password hashes (BCRYPT).
- Operational Artifacts: User-created task records, checklist verifications, attendance punch timestamps, IP addresses, and uploaded compliance evidence documents.
- Billing Data: Transaction references, bank transfer deposit receipts, and billing entity details.
2. Purpose of Processing & Non-Disclosure
Your operational data belongs exclusively to your brokerage. Cyntrona SMC-Private Limited does not sell, rent, commercialize, or share your proprietary data with any third party, marketing network, or commercial broker. We process data solely to execute platform functions (e.g. sending 11:00 AM PKT reminder notifications, compiling letterhead compliance reports, and calculating punctuality metrics).
3. Security Standards & File Storage Protection
Uploaded evidence files (strictly validated and capped at 2MB per file) are stored in private server directories protected with server-level access controls prohibiting direct web indexing. All passwords are encrypted using one-way cryptographic hashing algorithms.
4. Regulatory Confidentiality
We recognize the sensitive nature of brokerage operations, client assets segregation records, and AML/CFT risk evaluations. Cyntrona SMC-Private Limited treats all subscriber operational data as strictly confidential proprietary information.
