Privacy Policy

Information we collect

• Account information: your email address, a password hash managed by our authentication provider, and optional profile details you choose to add such as a display name, avatar image, profile title, bio, time zone, and trading style.
• Security information: two factor authentication enrollment status, sign in timestamps, and security event records used to protect your account.
• Preferences: watchlists, scanner settings, alert preferences, and alert delivery targets you provide, such as an email address or phone number for notifications.
• Connection information: if you connect an exchange or wallet, we store what is needed for the feature you enable. A public wallet address is stored for read only wallet views. If you connect an exchange API key, the key is stored in a server side encrypted vault and is never displayed back to you or to anyone else through the service.
• Technical information: server logs, request metadata, and approximate request origin used for security, rate limiting, and debugging.

How we use information

• To provide, operate, and secure the service.
• To send the alerts and notifications you request.
• To display your own account, watchlists, connections, and book to you.
• To respond to support requests.
• To comply with legal obligations.

What we do not do

• We do not sell your personal information.
• We do not run third party advertising or ad trackers.
• We do not publish your personal information, positions, or connections to other users. Platform signals and the house track record are platform content and do not contain your personal data.

How information is shared

• Infrastructure providers that host and process data for us, currently including Supabase (database, authentication, storage) and Vercel (application hosting). They process data on our behalf.
• Exchanges and brokers you connect. When you enable a connection, requests are made to that venue using your credentials to power the features you turned on. Their handling of your data is governed by their own policies.
• Legal requirements. We may disclose information if required by law or to protect the service and its users.

Workspace content

Chat messages, shared files, and notes posted in operator workspace surfaces are visible to platform operators. Do not post information in shared surfaces that you want to keep private.

Cookies and local storage

We use cookies and browser storage for session authentication and to cache your own preferences on your device, scoped to your signed in account. We do not use third party advertising cookies.

Data retention and deletion

We keep your information while your account is active. You can request deletion of your account by contacting us. On deletion we remove your profile, preferences, delivery targets, and stored connection secrets, except for records we are required to keep for security, audit, or legal reasons.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, including rights under the GDPR or the CCPA. To exercise any of these rights, contact us at the address below and we will respond within the time required by applicable law.

Security

We protect data with encryption in transit, database row level security that isolates each account, an encrypted vault for exchange keys, and optional two factor authentication. No system is perfectly secure, so please use a strong unique password and enable two factor authentication.

Age requirement

The service is for adults. You must be at least 18 years old to create an account. We do not knowingly collect information from children.

Changes to this policy

We may update this policy as the service evolves. We will update the date at the top of this page and, for material changes, notify signed in users.

Contact

Privacy questions and requests: support@aperionai.io