Privacy Policy

Who We Are

AskApex.ai is provided by ApexLinux Technologies, licence 1596148 (Dubai), Dubai Investments Park 1, Dubai, United Arab Emirates, which decides how the data below is used. Write to support@askapex.ai about your data and to security@askapex.ai about security.

[data protection officer or representative, if the law requires one: to be confirmed by counsel]

What We Collect

Your account: your email address; your password, stored only as an Argon2id hash, never as the password itself; your full name.
Your profile, when you save it: your country, and the optional fields you fill in — city, a one-line address, company and phone number.
Sign-in and connection records: when your email was confirmed and your access period; your website sessions; failed sign-in counts and lockouts; email confirmation and password reset links; and the connections you approve for AI assistants — the assistant’s client identity, its return address and the connection’s expiry. Session tokens, links, codes and connection tokens are stored only as SHA-256 hashes.
Server logs: the IP address and the requests your browser or your assistant sends.
Tool calls: when your assistant uses AskApex.ai, the tool it calls and the arguments it sends, such as coins, timeframes and windows.

AskApex.ai receives your tool calls, not your conversation. When you ask it to send feedback, your words go with it.

Feedback You Send and Gaps the Assistant Reports

Two of AskApex.ai’s tools store what your assistant sends with your account. The market tools read no database, so they read no account data.

Feedback you send: your assistant sends feedback, a bug report or a suggestion only when you ask it to. We store your words as you gave them (up to 10,000 characters), the kind of feedback you chose (a bug, wrong data, a suggestion, praise or other), and the assistant’s note of what it is about — the question, the tool and the answer as the assistant saw them, without account details (up to 2,000 characters). You get a reference for it.
Gaps the assistant reports: when AskApex.ai’s tools could not answer a market question, your assistant may report it without telling you. We store the market question in the assistant’s words, what was missing and the tool that came closest. The assistant is told to leave out your name, your account, your identifiers and anything you did not ask about the market.
With each one: the time we received it, your account’s email address and which assistant sent it.
Limits: an account can store up to 20 feedback messages and 100 gap reports in the last day; a gap report that repeats one from the same account within 10 minutes is not stored.
Neither tool returns the stored text. No notification is sent about feedback or gap reports; the operator reads them.

[how long feedback and gap reports are kept: to be confirmed by counsel]

Why We Use It

To create your account, confirm your email and send you the emails you ask for: the confirmation link and the password reset link.
To sign you in on the website and to connect your AI assistant to AskApex.ai.
To answer your assistant’s tool calls with market data.
To protect accounts: the bot check on the registration, sign-in and password reset forms, the lockout after repeated failed sign-ins, and the breached-password check on new passwords.
To find and fix faults, and to alert the operator when something fails.

[legal basis for each use: to be confirmed by counsel]

Cookies

Signing in on the website sets one cookie, __Host-askapex_session, which holds a random token for your session; it is sent only to askapex.ai over HTTPS and cannot be read by scripts. The session ends when you sign out, after 7 days without use, or 30 days after it began.

The registration, sign-in and password reset forms run Cloudflare’s bot check. [what the bot check stores in your browser: to be confirmed by counsel]

Where It Is Held

Your account, profile and records are held on AskApex.ai’s servers in the United Arab Emirates. The website itself runs on Cloudflare’s network. [transfers outside the United Arab Emirates and their safeguards: to be confirmed by counsel]

Cloudflare hosts the website, delivers our emails and runs the bot check; it receives your IP address, your requests and, for an email, your email address.
A breached-password service checks every new password; it receives only the first 5 characters of the password’s SHA-1 hash, never the password or the whole hash.
Telegram carries the operator’s alerts; it receives your IP address only.
Your AI assistant’s provider, such as Anthropic, OpenAI or Google, sends us your assistant’s tool calls and receives our answers, under its own privacy policy.

How Long We Keep It

A website session ends after 7 days without use, 30 days after it began, or when you sign out.
An email confirmation link works for 24 hours; a password reset link works once, for one hour.
Changing or resetting your password ends your other sessions and your assistant connections.
Your account and its records: [retention period while the account exists and after it ends: to be confirmed by counsel]
Server logs and tool calls: [retention period: to be confirmed by counsel]

Your Rights

On your account page you can see and change your profile, change your password and sign out. To ask for a copy of your data, a correction, or the deletion of your account, write to support@askapex.ai from your account’s email address.

[the rights that apply to you, how quickly we answer, and how to complain to a supervisory authority: to be confirmed by counsel]

Security

Passwords are hashed with Argon2id; session tokens, links, codes and connection tokens are stored only as hashes; the website is served only over HTTPS. After 5 failed sign-ins within 15 minutes an account is locked for 15 minutes, doubling with each further lock up to 24 hours. Report a security issue to security@askapex.ai.

Children

[minimum age for an account: to be confirmed by counsel]

Governing Law

[to be confirmed by counsel]

Changes to This Policy

[how changes are announced and when they take effect: to be confirmed by counsel]