Privacy Policy

Who we are

Karsa is a shared research workspace for Indonesian equities. For privacy questions, contact thoriqfy@gmail.com.

Information used for sign-in

When you continue with Google, Karsa receives your basic account identity through Supabase Auth: your account ID, email address, and display name. We use this information to recognize your session and show your account in the workspace. Karsa does not request access to your Gmail messages, contacts, or Drive files.

Supabase handles the Google sign-in exchange. Karsa keeps access and refresh tokens in HTTP-only cookies so you can stay signed in. Signing out clears Karsa’s session cookies.

Service data and device settings

The market research, company information, and paper portfolio shown in Karsa are shared across signed-in users. They are not separate personal portfolios. Your browser may save interface preferences such as the selected theme and sidebar state on your device.

Cloudflare hosts the site, and Supabase provides authentication. These services may process technical request information, such as IP address and browser details, to deliver and protect the service.

Use, sharing, and retention

We use account information to provide sign-in, maintain sessions, and troubleshoot the service. We do not sell Google account information or use it for advertising. Account information is processed by Google and Supabase for authentication and by Cloudflare to deliver the site.

Karsa’s access cookie lasts up to one hour and its refresh cookie up to seven days unless you sign out or the session ends earlier. Your Supabase account and any service logs may remain after sign-out. To ask about your account information or request deletion, email thoriqfy@gmail.com.

Changes

We may update this policy as the service changes. The effective date above shows when this version took effect.