Privacy Policy

Apex-MD ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our crypto trading platform.

1. Information We Collect

• Account Information: Username, email address, and hashed password when you register.
• Usage Data: Pages visited, features used, scan history, and trade records within the platform.
• API Keys: Exchange API keys you optionally add are stored encrypted using AES-256-GCM encryption. We never store keys in plaintext.
• WhatsApp Number: If you choose to link WhatsApp, we store your WhatsApp JID to deliver notifications.
• AI API Keys: GROQ and Gemini API keys you optionally provide are stored encrypted.

2. How We Use Your Information

• To provide and operate the trading platform services.
• To deliver WhatsApp notifications and trading signals you have opted into.
• To improve platform features and user experience.
• To maintain security and prevent fraud.

3. Data Storage and Security

• AES-256-GCM encryption for all API keys and sensitive credentials.
• Scrypt hashing for passwords — never stored in plaintext.
• Secure connections for all data transmission.
• Access controls limiting data access to authorised systems only.

4. Third-Party Services

• Binance API: For real-time market data (read-only).
• Groq / Google Gemini: For AI analysis summaries (only when you provide your own key).
• WhatsApp: For optional notification delivery.
• Alternative.me: For Fear & Greed Index data.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Cookies

We use a single session cookie (apex_user_session) required for the platform to function. We do not use tracking or analytics cookies.

6. Data Retention

We retain your account data for as long as your account is active. Closed trade records are automatically deleted after 7 days. You may request account deletion at any time.

7. Your Rights

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Remove linked API keys and WhatsApp connections at any time through Settings.

8. Children's Privacy

Our platform is not intended for users under the age of 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting a notice on the platform.