Privacy Policy

Information we collect

• Account information: your email address, a password hash managed by our authentication provider, and optional profile details you choose to add such as a display name, avatar image, profile title, bio, time zone, and trading style.
• Security information: two factor authentication enrollment status, sign in timestamps, and security event records used to protect your account.
• Preferences: watchlists, scanner settings, alert preferences, and alert delivery targets you provide, such as an email address or phone number for notifications.
• Connection information: if you connect an exchange or wallet, we store what is needed for the feature you enable. A public wallet address is stored for read only wallet views. If you connect an exchange API key, the key is stored in a server side encrypted vault and is never displayed back to you or to anyone else through the service.
• Lounge, council, and direct messages: posts, replies, images, and videos you share in the Lounge, your Lounge handle and display name, reports you file, the questions you ask the council, and the direct messages and media you send to other members or to support.
• Technical information: server logs, request metadata, and approximate request origin used for security, rate limiting, and debugging.

How we use information

• To provide, operate, and secure the service.
• To send the alerts and notifications you request.
• To display your own account, watchlists, connections, and book to you.
• To respond to support requests.
• To run the Lounge and direct messages, including moderation and the review of messages that members report.
• To answer the questions you ask the council.
• To comply with legal obligations.

What we do not do

• We do not sell your personal information.
• We do not run third party advertising or ad trackers.
• We do not publish your personal information, positions, or connections to other users. Platform signals and the house track record are platform content and do not contain your personal data.

How information is shared

• Infrastructure providers that host and process data for us, currently including Supabase (database, authentication, storage) and Vercel (application hosting). They process data on our behalf.
• Our AI provider, currently Anthropic, which processes the questions you ask the council so it can write the answers.
• Exchanges and brokers you connect. When you enable a connection, requests are made to that venue using your credentials to power the features you turned on. Their handling of your data is governed by their own policies.
• Legal requirements. We may disclose information if required by law or to protect the service and its users.

Questions to the council

When you ask the council a question, in the Agent Observatory or by tagging a council agent in one of your Lounge posts, the question (up to 600 characters) is sent to our AI provider, Anthropic, together with the council's published material and a short list of the signals you have accepted, so the answer can speak to your own record. We keep each question and its answer to review the quality and cost of the council. An answer to a Lounge post is visible only to you and to Aperion, and we share an answer with the room only if it says nothing about your signals or your account. Direct messages are never sent to an AI model, and we do not use your questions, Lounge posts, or direct messages to train AI models.

The Lounge and direct messages

• Lounge posts and replies are visible to every member who can open that room. If you edit a post, we keep its earlier text for moderation. If you delete a post, it disappears for other members and a record of it is kept for moderation.
• Aperion and the members we appoint as moderators can see hidden posts, the earlier text of edited posts, and the moderation log. Every moderation action is recorded with who took it and any reason given. We can remove a post and its media permanently, for example when you ask us to.
• Direct messages are private between the two people in the conversation. Aperion staff do not read them, except a message that one of you reports, when required by law or valid legal process, or to investigate a security incident. Moderators never see direct messages or reports about them.
• Images and videos in direct messages are stored privately. Only the two of you can open them, and Aperion can open the ones in a message that was reported.
• If you delete a message you sent, its text and media are erased for both of you. If the message was already reported, a copy stays with the report until we review it.
• When a message is reported, we review that one message, its media, and the reporter's note, never the rest of the conversation. If we remove the message, its text is erased for both of you and its media is deleted. If we dismiss the report, a copy of the message text stays with the report as part of the moderation record.
• You can block a member. They then cannot message you, and the conversation leaves your list. Support conversations with Aperion cannot be blocked.

Workspace content

Chat messages, shared files, and notes posted in operator workspace surfaces are visible to platform operators. Do not post information in shared surfaces that you want to keep private.

Cookies and local storage

We use cookies and browser storage for session authentication and to cache your own preferences on your device, scoped to your signed in account. We do not use third party advertising cookies.

Data retention and deletion

We keep your information while your account is active. You can request deletion of your account by contacting us. On deletion we remove your profile, preferences, delivery targets, and stored connection secrets, except for records we are required to keep for security, audit, or legal reasons.

When either person's account is deleted, their direct message conversations are deleted for both people, with their images, videos, and any reports about them. Lounge posts you made stay in the room's history so the conversations around them still make sense, with your name and handle removed. If you want your posts erased as well, ask us and we will remove them and their media permanently.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, including rights under the GDPR or the CCPA. To exercise any of these rights, contact us at the address below and we will respond within the time required by applicable law.

Security

We protect data with encryption in transit, database row level security that isolates each account, an encrypted vault for exchange keys, and optional two factor authentication. No system is perfectly secure, so please use a strong unique password and enable two factor authentication.

Age requirement

The service is for adults. You must be at least 18 years old to create an account. We do not knowingly collect information from children.

Changes to this policy

We may update this policy as the service evolves. We will update the date at the top of this page and, for material changes, notify signed in users.

Contact

Privacy questions and requests: support@aperionai.io