Effective October 18, 2026. AptiStockX is developed and published by AptiStock LLC. This policy explains what information AptiStockX and AptiStock LLC handle, why network requests occur, how information is used, and the choices available to you.
Local-first desktop data
Your chart files, watchlists, workspaces, downloaded market and fundamental data, drawings, indicators, screenshots, and application settings are stored locally on your device. AptiStock LLC does not receive those files or your trading decisions through normal use.
Data-provider and AI-provider credentials are stored using the operating system credential store where supported. AptiStock LLC does not receive those credentials.
Website and package downloads
When you download an AptiStockX installer from aptistock.com, AptiStock LLC may record the package name, version, download time, source label, referring site path where available, country and Cloudflare data-center code derived from normal network metadata, a broad user-agent family such as browser or package manager, and a one-way hash of the user-agent string. The AptiStockX download statistics table is not designed to store raw IP addresses.
WebApp traffic analytics
When you open web.aptistock.com, AptiStock LLC records a server-side page-view event in Cloudflare Workers Logs. The event contains a general WebApp route category, country and continent derived from normal network metadata, referring hostname, broad browser family, and broad device class. It is used to understand aggregate traffic and referrals and to operate, secure, and improve the WebApp.
The custom page-view event is not designed to include raw IP addresses, cookies, tracking identifiers, full referring URLs, stock symbols, watchlists, chart data, imported CSV contents, or browser fingerprints. Automatic Worker invocation-log persistence is disabled so raw request headers are not retained with these page-view events. Cloudflare still processes ordinary network information, including IP addresses, to deliver and protect the service under Cloudflare's own privacy policy.
Market-data and AI providers
When you request market or fundamental data, AptiStockX sends the selected symbols, date ranges, request parameters, and normal network metadata to the provider you selected. Those providers handle the request under their own terms and privacy policies.
AI requests run only when you select an AI action. Cloud chart-data sharing is disabled by default. If you enable it, AptiStockX may send the symbol, timeframe, visible range, recent OHLCV summary, indicator summaries, drawing summaries, and your prompt to your configured AI provider. It does not send screenshots, watchlists, chart files, local file paths, provider credentials, license payloads, telemetry IDs, or trading-account information as part of an AI request.
Trials, licenses, activation, and support
When you request a Pro Trial, buy Pro, manually request a license, activate a license, or contact support, AptiStock LLC may process:
- Your email address, including an encrypted recoverable copy, a one-way lookup hash, and a masked display form
- Customer, license, activation, and verification identifiers; issued license and activation-receipt records; license tier, status, dates, and activation limit
- Device identifier, device label, platform, app version, activation status and timestamps, country derived from network metadata where available, and device-fingerprint information used for activation and trial-abuse prevention
- Support and administrative audit records related to license delivery, restoration, activation, device management, refunds, and deletion requests
AptiStock LLC's license service runs on Cloudflare. Cloudflare processes ordinary network information, including IP addresses, when requests reach that service. The normal AptiStockX license database stores country where available; it is not designed to store raw IP addresses.
Purchases and payment records
Stripe and PayPal process payment-card, PayPal-account, and checkout information under their own privacy policies. AptiStock LLC does not receive or store full payment-card numbers. AptiStock LLC may retain payment provider, order, customer, capture or payment-intent identifiers; amount, currency, environment, status, refund or chargeback state; and encrypted, hashed, and masked checkout or payer email addresses.
How AptiStock LLC uses information
AptiStock LLC uses the information described in this policy only as reasonably needed to:
- Issue, deliver, activate, validate, restore, update, and support licenses and trials
- Process purchases, refunds, reversals, chargebacks, accounting records, and payment reconciliation
- Prevent fraud, repeated-trial abuse, unauthorized activation, and misuse of AptiStock services
- Respond to support, privacy, security, and deletion requests
- Operate, secure, diagnose, and improve AptiStockX and its supporting services
- Comply with applicable legal obligations and resolve disputes
AptiStock LLC does not use license, payment, support, or telemetry information for targeted advertising and does not sell personal information.
Application telemetry
Desktop editions keep additional usage telemetry off until you explicitly opt in. If enabled, those editions send a pseudonymous installation identifier, timestamp, app version, license tier, platform, and a small allowlist of feature events and properties. Current optional desktop events cover custom-indicator insertion, AI-assistant task type, and detached chart windows. Turning optional desktop telemetry off stops those uploads, clears queued optional events, and resets the optional desktop telemetry identifier.
The iPhone and iPad editions always send only app_start and app_exit lifecycle events for product analytics. Each event contains a random, app-generated installation identifier; a one-time random event identifier and event occurrence time used to prevent duplicate delivery; operating-system family and version; app version and build; server receipt time; and coarse country derived by Cloudflare from normal network metadata. The installation identifier is stored in the app's local preferences, is not an Apple Account, advertising, or hardware identifier, and may change when the app is removed or its local data is reset. The one-time event identifier is not reused for another event. The iPhone and iPad editions do not send screen views, taps, searches, symbols, watchlists, provider choices, purchases, AI activity, or other feature-usage events as telemetry in version 3.1.
Android 3.1 builds with lifecycle analytics require acceptance of the current in-app Terms and Privacy disclosure before creating an analytics identifier, recording events or sending analytics. After acceptance, only app_start and best-effort app_exit are recorded for foreground sessions; there is no analytics-disable switch or feature-event collection. Events contain a random installation UUID, a separate random event UUID, occurrence time, Android OS version/API level, app version and build. Cloudflare adds server receipt time and coarse country from normal network metadata; the app sends no country field and requests no location permission. The identifiers are not a Google Account, advertising ID, Android ID, serial number or hardware identifier.
Android stores its installation ID and a bounded retry queue in private no-backup storage. The ID persists across relaunches, upgrades and clearing downloaded market data, but changes after uninstalling or clearing app storage. Retry uses the same event ID/time to prevent duplicates. The queue holds at most 100 events for up to seven days, delivered in batches of at most 50 with backoff/rate-limit handling. No background upload service, scheduled upload job or wake lock is added. A best-effort exit send can run briefly after backgrounding, but Android may terminate the process without a final callback, so exit delivery is not guaranteed. Clearing app storage does not automatically delete events previously received by the server; privacy requests can be sent to support@aptistock.com.
Application telemetry does not include stock symbols, watchlists, chart files or contents, screenshots, local file paths, provider credentials, license payloads, trading decisions, purchase records, or AI prompts. AptiStock LLC uses Cloudflare to receive and store the allowlisted events and PostHog to produce aggregate product analytics. Installation identifiers are pseudonymous and can link lifecycle events from one installation; they are not a guarantee of irreversible anonymization. The telemetry database is not designed to store raw IP addresses, although Cloudflare processes connection information to deliver and protect the service under its own policy. AptiStock LLC does not combine the installation identifier with Apple or Google Account information, advertising profiles, or third-party data and does not use it for cross-app tracking or targeted advertising. Android production diagnostics use Google Play Android vitals; no third-party crash SDK or AptiStock-operated automatic crash upload is included.
Android local data, cache controls and support
Android 3.1 keeps watchlists, settings, drawings, market-data caches and credentials on the device; cloud backup/device transfer are disabled. Provider credentials use Android Keystore-backed encryption in private no-backup storage and are sent only to the selected provider for the user's requested data. Settings can clear regenerable downloaded market-data cache without removing watchlists, drawings, settings, credentials, the bundled catalog, recently shared images or telemetry identity/queue. A loaded chart may remain in memory and later refreshes may cache data again. Uninstalling or clearing app storage removes local app data.
Help opens AptiStock HTTPS pages in the user's browser. Email support opens a mailto draft to support@aptistock.com with app/build in the subject, without automatically sending or attaching diagnostics, identifiers, watchlists or credentials. Explicit chart sharing opens Android's chooser with a temporary private-cache PNG containing the current chart and enabled subpanes, including visible drawing text and cursor annotations. AptiStock does not automatically upload the image; a selected recipient controls its copy under its own privacy policy.
Website, email, and service providers
The AptiStock website uses Google AdSense on the AptiStockX WebApp page, the About page, the main Help page, Documentation pages and the embedded Help Manual, the Blog index, and Blog articles. Google and its advertising partners may use cookies or similar technologies to serve, measure, and personalize ads according to their own policies and user settings. All other AptiStock pages are kept separate from AdSense placement. Payment pages and services operated by Stripe or PayPal may use their own cookies and process data under their own policies. AptiStock LLC uses service providers only as needed to operate the product, including:
- Cloudflare for website, license-service, database, and telemetry infrastructure
- PostHog for aggregate application telemetry analytics
- Resend for transactional license and trial email
- Stripe and PayPal for payment processing
- The market-data and AI providers you choose to configure and use
AptiStock LLC does not sell personal information or use it for targeted advertising.
Retention, security, and requests
AptiStock LLC retains license, payment, verification, and audit records for as long as reasonably needed for license delivery and enforcement, fraud and trial-abuse prevention, accounting, legal obligations, support, security, and dispute handling. Records associated with a perpetual Pro license may be retained for the life of that license and afterward where reasonably needed for those purposes. Unverified trial requests may be removed during administrative cleanup. Payment processors and other providers maintain records under their own retention policies.
AptiStock LLC uses encryption for recoverable email records and restricts backend administrative access. No storage or transmission system can be guaranteed completely secure.
To request access, correction, or deletion of information held by AptiStock LLC, email support@aptistock.com. AptiStock LLC verifies the requester's identity before disclosing, restoring, changing, or deleting personal information. Some records may be retained where reasonably needed for security, accounting, legal obligations, dispute handling, or license enforcement. Deleting records needed to validate or restore a license may make future activation or recovery impossible.
Children
AptiStockX and aptistock.com are not directed to children under 13, and AptiStock LLC does not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact support so the request can be reviewed.
Policy changes and contact
Material changes will be published on this page with a revised effective date. Privacy questions and requests may be sent to support@aptistock.com.