Privacy Policy
01Who we are
Apex (“we”, “us”) is operated by Apex Trade Corp., a company registered in the Republic of Panama under registration number 155787601, with its registered address at 55th Street East, SL55 Building, 21st Floor, Office 3, Panama City, Republic of Panama (the “Operator”). The Operator is the data controller for personal data processed through the website apexgo.online and the Apex mobile applications (together, the “Service”).
Privacy contact: [email protected].
02What this policy covers
Apex is a software service that lets users create and run automated trading bots on their own accounts at third-party crypto exchanges, connected through API keys. Apex does not hold user funds, is not an exchange or broker, and does not provide investment advice.
This policy applies to website visitors, app users, subscribers and people who contact support. It does not cover third-party exchanges, app stores or other services you use alongside Apex; their own policies apply to them.
03Data we collect
We collect only the data we need to run the Service. It comes from you, your device, the exchanges you connect, app stores and our analytics providers.
| Category | Examples |
|---|---|
| Account data | Email address, password hash or social-login identifier, country, language, optional name |
| Exchange connection data | Encrypted API keys and secrets, exchange name, account identifiers, balances, positions, orders and trades read through the API to run and display your bots |
| Bot data | Bot settings, strategies, schedules, performance and trade history |
| Device and usage data | IP address, device and advertising identifiers, operating system, app version, time zone, screens viewed, actions taken, crash logs |
| Subscription data | Plan, status and transaction identifiers received from the app store or payment processor. We do not receive full card numbers |
| Support data | Messages, attachments and survey answers you send us |
| Attribution data | Referrer, campaign parameters and install source, where permitted |
We do not intentionally collect special-category data. We do not require identity documents. If identity verification is introduced, this section will be updated.
04How we use data and why
We use personal data only for the purposes below. Where the GDPR or UK GDPR applies, the legal basis is shown; the Brazilian LGPD and the Nigeria Data Protection Act 2023 give equivalent grounds.
| Purpose | Legal basis |
|---|---|
| Create your account and run your bots through the exchanges you connect | Contract |
| Process subscriptions and prevent payment fraud | Contract; legitimate interests |
| Keep the Service secure and detect abuse | Legitimate interests; legal obligation |
| Provide support and respond to requests | Contract; legitimate interests |
| Understand how the Service is used and improve it | Legitimate interests; consent where required by law |
| Send service messages (alerts, changes to terms) | Contract; legitimate interests |
| Send marketing messages | Consent, or legitimate interests where the law allows. You can opt out at any time |
| Comply with law, tax and regulatory requests | Legal obligation |
We do not make decisions with legal or similarly significant effects about you based solely on automated processing. Your bots act only on the settings you choose.
05Who receives your data
We do not sell personal data. We share it only with the recipients below, and only as needed for the purposes in Section 4.
- Exchanges you connect. When you link an exchange, we send API requests and orders to it on your instruction.
- Service providers. Cloud hosting, analytics, crash reporting, email and notification delivery, customer support tools, and payment processing (including the Apple App Store and Google Play). They act under contracts that limit their use of your data.
- Affiliates. Companies under common control with the Operator that help us provide, support or secure the Service, only for the purposes in this policy.
- Professional advisers such as lawyers, auditors and insurers.
- Authorities and other parties, where the law requires it or to protect rights, safety and the Service, and in a merger, sale or reorganisation of our business, with notice to you where required.
- Anyone else with your consent.
A list of current sub-processors is available on request at [email protected].
06International transfers
Your data may be processed outside your country, including in [COUNTRIES OF HOSTING AND PROVIDERS]. Where the law restricts such transfers, we rely on adequacy decisions, standard contractual clauses (including the UK addendum where relevant) or other mechanisms the law accepts, including those recognised under the LGPD and the Nigeria Data Protection Act 2023. You can request a copy of the safeguards at [email protected].
07How long we keep data
We keep data only as long as needed for the purposes in Section 4.
| Data | Retention |
|---|---|
| Account and bot data | While your account is active, then deleted or anonymised within 30 days of deletion |
| Exchange API keys and secrets | Deleted when you disconnect the exchange or delete your account |
| Device, usage and security logs | Up to 12 months |
| Subscription and payment records | As long as tax and accounting law requires, typically 7 years |
| Support messages | 24 months after the case is closed |
| Backups | Overwritten within 35 days |
08Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. To use these rights, email [email protected] or use the settings in the app. We may need to verify your identity and will reply within the time the law requires, normally one month.
- EU and UK: you may also complain to your local data protection authority.
- Brazil (LGPD): you may also request information about sharing and complain to the ANPD.
- Nigeria: you may complain to the Nigeria Data Protection Commission.
- California: you may ask what we collect, request deletion or correction, and opt out of the sale or sharing of personal information. We do not sell personal information or share it for cross-context behavioural advertising. We will not treat you differently for using these rights.
09Security
We protect data with encryption in transit (TLS) and at rest, access controls, logging and regular reviews. Exchange API keys are encrypted with [KEY MANAGEMENT SERVICE], are never shown again after you enter them, and are used only to carry out the actions you configure.
We ask you to create API keys that cannot withdraw funds, and to restrict them to our IP addresses where the exchange allows it. Please keep your passwords and two-factor authentication safe. No system is completely secure. If a breach affects your data, we will notify you and the authorities as the law requires.
10Children
The Service is for adults only (18 or the age of majority where you live, if higher). We do not knowingly collect data from minors and will delete it if we learn we have.
12Deleting your account and data
You can delete your account in the app under Settings, Account, Delete account, or at apexgo.online/delete-account, or by emailing [email protected]. We delete or anonymise your data within 30 days, except what we must keep by law (Section 7). Deleting your account disconnects your exchanges and removes the stored API keys. Uninstalling the app alone does not delete your account.
13Changes and contact
We may update this policy. We will post the new version here with its date and, for material changes, notify you by email or in the app at least 30 days before they take effect.
Questions and requests: [email protected]
Apex Trade Corp.55th Street East, SL55 Building, 21st Floor, Office 3
Panama City, Republic of Panama