The data controller is the individual developer who independently operates Digsy, reachable through the Contact page. This policy applies to the website, the mobile apps and every email or notification we send. It is written with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (as amended in 2025) in mind — the Act’s main obligations take effect on 1 January 2027, and we follow them already; where that Act gives you rights, section 11 says how to use them.

We use your data to run the service you signed up for, and for nothing unrelated. The Personal Data Protection Act asks us to say which lawful basis each use rests on:

Several features are produced by a large language model run by a third-party AI provider, Anthropic. When you use one of them we send the provider the information needed to produce the result: for Deep Analysis and forecast validation, that is public market data, filings and news about the company; for statement import, it is the statement, PDF or photo you upload; for the Oracle Assistant, it is your message, the recent conversation and the market data its answer needs — plus, only when your question is about your account, your ruby balance, plan and watchlist. The provider processes it only to return the result and, under its commercial API terms, does not use it to train its models. We never send your name or email address, and no other account details beyond the ones just listed. AI outputs are estimates, can be wrong, and are labelled as such in the app.

Prices, announcements, corporate disclosures and fundamentals are sourced from publicly available Colombo Stock Exchange feeds and may be delayed. News headlines are gathered from public news feeds (including Google News) and macro figures from public Sri Lankan sources. Model views, conviction scores and model ranges are derived, informational estimates — they are not guarantees and not investment advice.

To keep you signed in we store a session token in your browser’s local storage, or in the app’s private storage on a phone. We also store your preferences (language, chart settings, dashboard layout) the same way. We do not use advertising or cross-site tracking cookies and we run no third-party analytics. If you use “Sign in with Google”, Google’s sign-in script sets its own cookie under Google’s policy. Clearing your browser storage signs you out.

Emails are sent through Zoho Mail. Push notifications on the apps are delivered through Google’s Firebase Cloud Messaging, which holds a device token but not the content of your account. Alerts, any daily company notice we offer and plan reminders are part of the service and are on unless you switch them off; newsletters and offers are direct marketing and stay off until you turn them on. You manage every category in Settings, and every marketing-style email carries an unsubscribe link. Emails needed to run your account (verification, password reset, receipts, security notices) are sent regardless.

We rely on a small number of providers, each processing data only as needed to deliver the service. Most of them are outside Sri Lanka, so your data is transferred and stored abroad:

Passwords are hashed, access is gated by session tokens, and new accounts confirm their email address. You can add two-factor authentication with an authenticator app and manage the devices that skip it. We apply rate limits and the usual hardening to the service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable measures to protect your information.

If we learn of a personal-data breach that is likely to put your rights at risk, we will notify the Data Protection Authority of Sri Lanka as the Act requires and tell you directly, by email, what happened and what we are doing about it.

You can update your name, photo, password, two-factor settings and notification preferences in Settings, edit or remove anything on your watchlist, alerts, dashboard and portfolio, and delete your account from Settings at any time.

Under the Personal Data Protection Act you may also ask us for access to the personal data we hold about you, for correction of inaccurate data, for erasure, to withdraw a consent you gave, or to object to a particular use. Send the request through the Contact page from the email on your account; we will answer within one month (the Act lets us extend that by up to two months for a complex request, and we will tell you if we do), and we will not charge for it unless a request is plainly excessive. If you are not satisfied with our answer you may complain to the Data Protection Authority of Sri Lanka. Model views and analytics describe listed companies, not you — we make no automated decisions about you that have legal or similarly significant effects.

Digsy is not directed at anyone under 18 and we do not knowingly collect data from them. If you believe a minor has created an account, tell us and we will remove it.

Digsy is an automated data and analytics tool for information and research only. It is not licensed by the Securities and Exchange Commission of Sri Lanka and does not provide investment advice. Nothing in the app constitutes financial, investment, legal or tax advice. Always do your own research before investing.

We may update this policy from time to time. Material changes will be reflected by the “Updated” date above, and we will tell you in the app or by email where the change matters to you.

By accessing or using Digsy — including browsing as a guest — you agree to be bound by these Terms and by our Privacy Policy. If you do not agree, please do not use the service. When you create an account, or continue past the acknowledgement notice, you accept these Terms electronically; that acceptance is valid under the Electronic Transactions Act, No. 19 of 2006, and we record the date and the version you accepted.

Digsy provides market data, charts, corporate disclosures and news for CSE-listed securities, together with automated analytics: model views (bullish, neutral or bearish), conviction scores, model ranges, screens, rankings and portfolio tools produced by statistical and AI models, and an AI assistant (the Oracle Assistant) that answers questions about the app and listed companies. The same service is offered on the website and in the mobile apps. Features may be added, changed or removed at any time, and some depend on third-party data and services that we do not control.

You may create an account with an email and password, or by signing in with Google or Apple. You must be at least 18 years old to create an account or buy a paid plan. Every account acknowledges, at signup or on first use, that Digsy is not licensed by the Securities and Exchange Commission of Sri Lanka and does not give investment advice; we record that acknowledgement. You are responsible for keeping your credentials secure (two-factor authentication is available in Settings) and for activity under your account. Provide accurate information, and use the service only where you are legally permitted to do so. One account per person: free rubies (welcome rubies, daily check-in rewards and other promotions) are for your own use, and collecting them through several accounts is misuse — we may remove those rubies or close the accounts.

You agree not to misuse the service. In particular, you will not:

Digsy is an automated data and analytics tool for information and research only. Digsy is not licensed by the Securities and Exchange Commission of Sri Lanka as a market intermediary, investment manager or in any other capacity, and does not provide investment advice. Nothing in the app constitutes financial, investment, legal or tax advice, a recommendation, or an offer to buy or sell any security. A “model view” (bullish, neutral or bearish) describes what a statistical model expects; it is not an instruction and can be wrong. You are solely responsible for your own decisions. Always do your own research before investing.

Prices, announcements and fundamentals come from publicly available CSE feeds and may be delayed, incomplete or inaccurate. Model views, conviction scores, model ranges and every other analytic are derived, informational estimates produced by statistical and AI models — they are not guarantees and may be wrong. Past performance, including our published track record, does not indicate future results. Some features send the data they are about — and any file you upload for them — to a third-party AI provider to produce the result, as described in the Privacy Policy. The Oracle Assistant is an AI: it answers questions about the app and listed companies from our data, can make mistakes, does not give investment advice, and will not tell you whether to buy or sell or how to divide your money between investments. Check anything important against the source.

You keep ownership of anything you upload or enter — broker statements, transactions, notes, targets. You grant us the limited licence needed to store and process it to provide the service to you, including sending an uploaded statement to our AI provider for extraction. You are responsible for having the right to share what you upload and for checking the extracted result.

The Digsy name, interface, and original content are owned by us and protected by applicable laws. We grant you a limited, personal, non-exclusive and revocable licence to use the service for your own research. Underlying market data remains the property of the Colombo Stock Exchange and its sources.

The service is provided “as is” and “as available”, without warranties of any kind, whether express or implied, including fitness for a particular purpose, accuracy, or uninterrupted availability. We do not warrant that the data or model outputs are correct, complete or current.

To the fullest extent permitted by law, Digsy and its operators will not be liable for any investment losses or for any indirect, incidental, special or consequential damages arising from your use of — or inability to use — the service or its data and model outputs. Where liability cannot be excluded, it is limited to the amount you paid us in the twelve months before the claim.

Digsy offers a free tier and paid Pro (Seer) and Elite (Oracle) plans, sold for a monthly or an annual period. Prices shown include any applicable Sri Lankan taxes unless the checkout states otherwise. There are two ways to buy a plan. On the website, each purchase is a one-time payment in Sri Lankan Rupees (LKR) through our payment processor, PayHere, for the period you choose. Website plans do not renew automatically: your plan runs until the end of the paid period, we email you a reminder about a week before it ends, and you renew manually if you wish — renewing before expiry adds the new period on top of the remaining one. In the iOS and Android apps, plans are sold as auto-renewable subscriptions that are sold and billed by Apple (App Store) or Google (Google Play) under their terms, at the price and in the currency the store shows. A store subscription renews automatically at the end of each period until you cancel it in your App Store or Google Play account settings; cancelling stops the next renewal and the current period runs to its end. When a plan ends, the account reverts to the free tier and your data is kept. Seer and Oracle plans include a monthly allowance of Rubies, described below. We may change plan prices or features on a forward-looking basis; if we ever add automatic renewal to website purchases we will tell you and update these Terms before it applies to you. We may decline, cancel or reverse a transaction where we suspect fraud, error or misuse.

Rubies. Some features are paid for with Rubies, a prepaid credit used only inside Digsy. You get rubies by buying a ruby pack (on the website through PayHere, or in the apps through Apple or Google), with a Seer or Oracle plan (a monthly allowance that is used first and does not carry over), or free from us (for example welcome rubies and daily check-in rewards). Every feature shows its ruby price before you use it, except messages to the Oracle Assistant, which are metered: each message costs between 1 and 5 rubies depending on its length and the work needed to answer it — the rubies are reserved when you send it, anything unused is returned once it is answered, and the final cost is shown with the reply and recorded in your ruby history.

Rubies you buy and free rubies we give do not expire while your account is open. Rubies have no cash value: they are not money, a deposit, a security or a cryptocurrency, and they cannot be withdrawn, transferred, sold or exchanged. Rubies left in an account are lost when the account is deleted or closed for misuse. We may change ruby prices, feature costs and free-coin promotions on a forward-looking basis; a change never removes rubies you already hold, except free rubies collected through misuse. If we ever close Digsy permanently, we will give you at least 30 days’ notice and, on request, refund any unused purchased rubies at the price you paid.

Refunds of plans and ruby packs are governed by our Refund Policy.

Digsy publishes automated model views, and we run the product under a written conflicts-of-interest policy. Nobody with early access to model output may trade a company from the moment it enters the signal pipeline until two full trading sessions after publication, or trade against a live view. Where a member of the team holds a company that appears in a signal, forecast or analysis, that surface carries a disclosure line. Any company notice sent to every subscriber is limited to companies that clear a minimum liquidity gate, so it is unlikely to move the price. Signals are generated by the pipeline and are never added, removed or reordered by hand for personal benefit. We accept no payment from listed companies, brokers or promoters for coverage.

Read the full Conflicts of Interest Policy.

Signing in with Google or Apple, paying through PayHere, Apple or Google, receiving push notifications through Google’s Firebase, and the AI features (which use Anthropic) each involve a third party acting under its own terms and privacy policy. We do not control those services and are not responsible for them. Market data is supplied by the Colombo Stock Exchange and may be subject to the Exchange’s own conditions of use.

We may update these Terms from time to time; material changes will be reflected by the “Updated” date above and, where they matter to you, announced in the app or by email, and your continued use means you accept them. We may suspend or terminate access at any time, including for breach of section 4, and you may stop using the service or delete your account from Settings whenever you like.

These Terms are governed by the laws of the Democratic Socialist Republic of Sri Lanka. Any dispute that cannot be resolved between us will be brought before the courts of Colombo, Sri Lanka. Nothing in these Terms limits any rights you have under applicable consumer-protection law, and nothing excludes liability that cannot lawfully be excluded.

These Terms, the Privacy Policy and the Refund Policy are the whole agreement between you and us about the service. If any part of them is found unenforceable, the rest still applies. If we do not enforce a term on one occasion, we may still enforce it later. You may not transfer your account or these Terms to anyone else; we may transfer them to a successor that takes over the service, on notice to you. The English text prevails over any translation shown in the app.

Digsy offers a free tier plus paid Pro (Seer) and Elite (Oracle) plans, sold for a monthly or an annual period. This policy applies to plans and Ruby packs bought on the website through PayHere. Plans and ruby packs bought in the iOS or Android app are sold and billed by Apple or Google (plans as auto-renewable subscriptions): refunds for those purchases are handled by Apple or Google under their own refund policies (request them through the App Store or Google Play), and you cancel them in your store account settings. The free tier is, of course, free — there is nothing to refund.

Each website purchase is a one-time payment in Sri Lankan Rupees (LKR) through our payment processor, PayHere, for the period you choose. Website plans never renew automatically: your plan runs until the end of the paid period, we email you a reminder about a week before it ends, and if you want to continue you renew manually. Renewing before the period ends adds the new period on top of the time you have left. When a plan ends, the account simply reverts to the free tier; your watchlist, portfolio and settings are kept. Because a website plan does not renew, there is nothing to cancel — you just don’t renew. (App-store subscriptions work differently — see section 01.)

If you are not happy with your first paid plan, request a refund within 7 days of the charge and we will refund it in full and end the plan. This applies to your first purchase of a given plan; it does not apply to renewals or to repeat purchases after a refund. Ruby packs work differently: a ruby pack bought on the website can be refunded in full within 7 days if none of its rubies have been spent (we check your ruby history); once rubies from it are spent, it is not refundable.

Outside the 7-day guarantee, a paid period — monthly or annual — is non-refundable. We do not pro-rate unused time, and a plan’s monthly ruby allowance is part of the plan, not a separately refundable item. An annual plan is a discounted single payment for twelve months and follows the same rule after its own 7-day window.

A renewal is a new purchase you make yourself, for a new period. The 7-day guarantee does not apply to renewals, but the section on duplicate or incorrect charges always does.

Send a request through our Contact page using the email on your account, and tell us which charge you mean. Approved refunds are issued to your original payment method through PayHere, typically within 7–14 business days depending on your bank or card provider, in the currency of the original charge (LKR).

Except where required by law or expressly stated above, the following are not refundable:

If you are billed twice for the same period, charged the wrong amount, or charged for a plan you did not receive because of a technical or billing error, let us know and we will investigate and refund any verified error in full — regardless of the 7-day window.

If something is wrong with a charge, please contact us first — we resolve verified errors quickly and in full. If you dispute a charge with your bank or card issuer instead, we may suspend paid features on the account until the dispute is resolved, and a dispute that turns out to be unfounded may be treated as misuse under the Terms of Service.

Plans bought on the website do not renew automatically. In-app subscriptions bought through Apple or Google do renew automatically until you cancel them in your App Store or Google Play account settings; that billing is handled by the store. If we ever add automatic renewal to website purchases, we will update this policy and the Terms of Service before it applies to you, tell you how to cancel, and never enrol an existing plan in automatic renewal without asking.

We may update this policy from time to time; material changes will be reflected by the “Updated” date above. The policy in effect at the time of your purchase applies to that purchase. Nothing here limits any rights you may have under applicable consumer-protection law.

This policy binds every covered person: the operator, staff, contractors, and anyone else who can see a model view, signal, scan result or forecast before it is published, or who can change what gets published. It covers accounts a covered person controls or benefits from, including family and company accounts.

Any trade by a covered person in a security that appeared in a published view in the previous 30 calendar days is recorded within one business day: date, ticker, side, quantity, price, and which account. The log is kept for six years.

Signals are only published for securities that clear the minimum liquidity gate, so that a notification to every subscriber is unlikely to move the price. The gate is applied by the signal pipeline and is configurable in the admin panel:

Signals, scans and forecasts are produced by the pipeline. A covered person must not add, remove or reorder names for personal benefit. The only manual interventions allowed are safety withdrawals (for example a distress or winding-up flag), and each one is logged with the reason.

Digsy does not accept payment, gifts or other benefit from a listed company, broker, promoter or shareholder in exchange for coverage, a view, or placement. Any commercial relationship with a listed company or a market intermediary is disclosed on the surfaces that mention that company.

A breach of sections 2, 3 or 6 results in immediate removal of pipeline access, disgorgement of any profit to a registered Sri Lankan charity, and a written record. A breach that may amount to an offence under the SEC Act is reported to the Commission.

This policy is reviewed at least once a year, and whenever the signal pipeline, the notification reach, or the relevant law changes. Material changes bump the version and are summarised in the Terms of Service.

It applies to everything Digsy publishes about a listed company or the market, on the website, in the apps, in emails and push notifications, and in the company's own social-media posts: model views (Bullish, Neutral, Bearish), model ranges, conviction figures, AI Deep Analyses, the Track Record, financial-distress flags, expected dividends, factor scores and screens.

These checks run automatically on every view. No individual view is reviewed by a person before it is published; the controls are the gates below, the nightly data audit and the daily self-check. The only manual interventions are safety withdrawals (for example a winding-up notice), and each one is logged with its reason (Conflicts of Interest Policy §6).

The Conflicts of Interest and Independence Policy applies: no trading ahead of or against a view, a holdings register and disclosure line, a trading log, no manual steering, no paid coverage.

Anyone, including a listed company, may report an error. The Corrections Procedure sets the channel, the timelines (acknowledgement within two business days, decision within five), the interim "under review" step for disputed flags, and the record kept.

This standard is reviewed at least once a year, and whenever the method, the notification reach or the relevant law changes. Material changes bump the version.

Anyone: a user, a listed company or its officers, a stockbroker, the Colombo Stock Exchange, the Securities and Exchange Commission, or a member of the public. A company does not need an account.

Business days are Colombo business days.

A view that was published and later corrected or withdrawn keeps its entry in the ledger with the correction noted; the record is never silently rewritten.

Every report is logged with the date received, the company, the reporter's category, the decision, who decided it and the date of the decision. The log is kept for six years and can be produced to the Commission or the Exchange on request.

Digsy’s independent developer decides every correction. Where the decision needs market knowledge the developer may take advice, but the decision and the record stay with the developer.

the Contact page at https://www.digsy.lk/contact