Legal

Privacy Policy

Effective date: May 1, 2026 · Last updated: May 2026

Apex Automated Trade Systems LLC ("we", "us", "our") operates apexaitrade.com and the Apex Automated Trade Systems software. This Privacy Policy explains what data we collect, how we use it, and your rights. We take your privacy seriously — especially given that this product touches your financial infrastructure.

Key point: We never see your trading data.

All trade history, positions, account balances, API keys, and strategy configurations are stored exclusively on your server. None of this data is transmitted to us.

1. What Data We Collect

DataPurposeRetention

Email addressAccount creation, license delivery, supportRetained while account is active

Stripe customer IDSubscription billing and managementRetained while account is active

License keyGenerated on purchase, stored in our DBRetained while account is active

Machine ID (hostname hash)License activation and validationRetained while license is active

IP address (validation requests)Fraud prevention, license validation logsRetained 90 days

Purchase historyBilling records, refund eligibilityRetained 7 years (legal requirement)

We do not collect: your Alpaca API keys, your trading history, your positions, your account balances, your strategy configurations, or any data stored on your server.

2. How We Use Your Data

To fulfill your purchase and deliver your license key
To validate your license on an approximately 23-hour cycle
To communicate important updates about the software or your subscription
To process payments and manage your subscription via Stripe
To respond to support requests
To detect and prevent fraud or Terms of Service violations

We do not use your data for advertising, sell it to third parties, or share it with data brokers.

3. Third-Party Services

DataPurposeRetention

StripePayment processingstripe.com/privacy

DigitalOceanLicense server hosting (Singapore region)digitalocean.com/legal/privacy-policy

CloudflareDNS, DDoS protection, CDNcloudflare.com/privacypolicy

Resend / FormspreeTransactional email (license delivery, support)resend.com/legal/privacy-policy

These services receive only the minimum data required to perform their function. We do not share your data with any other third parties.

4. Your Trading Data Stays on Your Server

The Apex Automated Trade Systems software runs entirely on a server you own or rent. All of the following data is stored exclusively on your server and is never transmitted to us:

Alpaca API keys (paper and live)
Trade history and positions
Equity curve and analytics data
Strategy configuration (.env file)
PostgreSQL database contents
Telegram bot credentials

You have full control over this data. Deleting your server deletes all of it — we have no copy.

5. Cookies and Analytics

Our marketing website (apexaitrade.com) may use privacy-first analytics (such as Plausible or Vercel Analytics) that do not use cookies, do not track individuals across sites, and do not share data with advertising networks.

We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking.

6. Data Retention

We retain your account data for as long as your subscription is active, plus a reasonable period afterward to handle support requests and disputes. Billing records are retained for 7 years as required by accounting regulations. You may request deletion of your account data at any time (see Section 8).

7. Security

We use industry-standard security practices: HTTPS/TLS for all data in transit, encrypted storage for sensitive fields, access controls on our license server, and regular security reviews. Our license server runs on DigitalOcean in the Singapore region.

No system is 100% secure. If you believe you've found a security vulnerability, please contact us at [email protected].

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you
Correction: Request that we correct inaccurate data
Deletion: Request deletion of your account and personal data
Portability: Request your data in a machine-readable format
Objection: Object to specific processing of your data

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Children

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website at least 14 days before the changes take effect. Continued use of the Service constitutes acceptance.

11. Contact

Privacy questions or requests: [email protected]
General contact: contact page