Privacy Policy

1. Information We Collect

Apex1819 collects the following categories of information:

Account Information

• Email address and name (provided during registration)
• Subscription tier and billing information (processed via Stripe)
• Risk profile and trading preferences (configured during onboarding)

Brokerage Metadata

• Broker name and account type (paper/live)
• Account balance and buying power (refreshed periodically)
• Position and order data necessary for AI agent operation

Note: Brokerage API credentials are encrypted and stored in a dedicated encrypted secrets vault. They are never stored in plaintext, never logged, and are fetched only at trade execution time and immediately discarded from memory.

Trading Activity

• Trade history (entries, exits, P&L)
• Signal generation data and AI agent decisions
• Signal DNA feature vectors (for learning system improvement)

Usage Data

• Pages visited, features used, session duration
• Device type, browser, operating system
• IP address (for security and fraud prevention)

2. How We Use Your Information

• To operate the AI trading platform and execute trades on your behalf
• To improve AI agent accuracy through aggregated, anonymized learning
• To manage your subscription and process payments
• To communicate important account and platform updates
• To detect and prevent fraud, abuse, and security threats
• To comply with legal and regulatory obligations

3. Data Sharing

Apex1819 never sells your personal data to third parties.

We share data only with:

• Your brokerage — API calls necessary to execute trades and retrieve account data
• Stripe — payment processing (Apex1819 does not store credit card numbers)
• Cloud infrastructure provider — authentication, database, and secrets hosting
• Law enforcement — only when required by valid legal process (subpoena, court order)

4. Credential Storage (Vault)

Brokerage API credentials are stored in a dedicated encrypted secrets vault (a purpose-built secrets manager). Credentials are:

• Encrypted at rest using AES-256-GCM
• Never stored in application database columns
• Fetched at trade execution time only
• Immediately discarded from memory after each use
• Never included in application logs

5. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights:

To exercise these rights, contact privacy@apex1819.com. We will respond within 30 days.

6. Data Retention

7. Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, row-level security (RLS) for multi-tenant data isolation, and regular security audits. However, no system is completely secure, and we cannot guarantee absolute security of your data.