1. Overview & Data Controller
This Privacy Policy explains how ApexTrader OS ("we", "us", "our", or "the Platform") collects, processes, stores, and protects personal data when you interact with our website, terminal, and related software tools. For the purposes of the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), the Data Controller is the ApexTrader OS Privacy Group.
2. Information We Collect
We collect only the minimum information necessary to deliver software functionality and ensure platform security:
A. Account Identification Data
- Username & Display Name: Used to identify your account and forum posts.
- Email Address: Used for subscription provisioning, password recovery, and transactional notifications.
- Password Security Data: We store passwords strictly as cryptographically salted
scrypthashes. We never have access to your plain-text password.
B. User Trading Journal Data
- Trade Logs & Entries: Trade entry price, exit price, lot size, currency pairs, R-multiples, setup tags, and emotional annotations entered voluntarily by the user.
- Chart Screenshots & Markups: Visual files uploaded to illustrate setups. These files are stored in your private user storage directory.
C. Technical & Security Telemetry
- Session Information: IP address, browser user-agent, operating system, and login timestamps used exclusively for account authentication and brute-force intrusion prevention.
3. How We Use Your Data
Your data is processed strictly for the following operational purposes:
- To compute personalized trading metrics, expectancy curves, and Monte Carlo drawdown distributions within your private dashboard.
- To validate active subscription sessions and manage billing permissions.
- To deliver automated security notifications (e.g., password changes, unrecognized logins).
- To maintain platform uptime, system health, and spam mitigation in the community floor.
ApexTrader OS does NOT sell, rent, license, or trade your personal information, email address, trading records, or analytical inputs to any third party, broker, prop firm, or data broker. We do not participate in cross-site behavioral tracking networks.
4. Data Isolation & Storage Architecture
Unlike legacy cloud journals that pool all customer trades into an unsegregated monolithic database, ApexTrader OS utilizes isolated user data directories (users_data/[user_id]/). Each trader's journals, routines, and screenshots exist in an isolated directory accessible only through validated session tokens.
5. Cookies & Local Storage
We employ a minimal, privacy-first cookie policy:
- Essential Session Cookies: We set a single secure session cookie (
apex_session) to maintain your login status across pages. This cookie is strictly necessary for service operation. - No Third-Party Marketing Trackers: We do not deploy third-party advertising cookies, cross-device tracking pixels, or invasive surveillance scripts.
6. Third-Party Service Providers
To maintain commercial billing and reliable cloud infrastructure, we partner with industry-leading, compliant infrastructure providers:
- Payment Processors (PayPal): Handles financial transactions under Level 1 PCI-DSS compliance. We do not store or have access to full credit card or bank credentials.
- Market Data Feeds: Live currency rates and macroeconomic calendar updates are received from institutional data APIs without transmitting your personal identity.
7. Your Rights (GDPR & CCPA Directives)
Depending on your location, you have robust statutory rights regarding your personal information:
| Right | Description | How to Exercise |
|---|---|---|
| Right of Access | Request a complete copy of all personal and trade data stored about you. | One-click CSV/JSON export in Journal Settings or email request. |
| Right to Erasure ("To Be Forgotten") | Request permanent deletion of your account, trade records, and uploaded screenshots. | Email privacy@apextrader.bond with subject "Account Deletion". |
| Right to Rectification | Update or correct inaccurate personal details or account information. | Directly within user settings or via support ticket. |
| Right to Portability | Export your complete trade history in standard format (JSON/CSV) to move to another system. | Built-in export feature in the Trade Journal interface. |
| Right to Non-Discrimination | We will never deny services, charge different prices, or provide a lower quality of service for exercising your privacy rights. | Guaranteed by company charter. |
8. Data Retention Policy
We retain your account and trade records only for as long as your subscription or user account remains active. If you choose to close your account or request data erasure, all associated user directories, logs, and screenshots will be permanently expunged from production systems within thirty (30) days.
9. Children's Privacy
ApexTrader OS is strictly intended for individuals aged 18 and older who are legally capable of executing financial agreements. We do not knowingly collect personal information from minors under the age of 18.
10. Contact Our Data Protection Desk
If you have questions regarding this Privacy Policy, wish to exercise your GDPR/CCPA rights, or have a security concern, please contact:
Data Protection Officer (DPO): privacy@apextrader.bond
General Support Desk: support@apextrader.bond