Privacy Policy

Last updated: October 18, 2026

This Privacy Policy describes how ApexTick ("we", "us", or "our") collects, uses, and protects your information when you use our website, API, MCP server, alerts, briefings, Excel Add-ins, and related services (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the minimum amount of information necessary to provide, secure, and bill for our API services.

A. Personal Data

When you register for an account, we may ask you to provide certain personally identifiable information, including:

• Email address
• First name and last name
• Billing address and payment information (processed securely by our payment provider, Stripe; we do not store your full credit card number).

B. API Usage and Diagnostic Data

To enforce rate limits, calculate metered billing overages, and ensure the security of our infrastructure, we automatically collect data regarding your use of the API. This includes:

• Your API Key identifier.
• The volume of requests made (API call counts).
• IP addresses from which the requests originate.
• Timestamps, request paths, and user-agent strings.

C. Service Configuration Data

When you set up alerts, watchlist digests, or White-Label Community Briefings, we store the configuration you provide so that we can deliver them. This includes:

• Webhook destination URLs: Slack and Discord webhook URLs, and the endpoints of generic webhooks that we sign with HMAC-SHA256, together with the signing secrets we generate for them.
• Messaging channel identifiers: the Telegram chats or channels you deliver to.
• Recipient email addresses: the addresses that receive your alert and digest emails, which may include addresses other than your account email.
• Alert and briefing settings: watchlist symbols, trigger conditions, schedules, and briefing branding (such as a brand name, accent color, or footer).
• Delivery history: a record of each fired alert and its delivery status, kept so that you can review it through the API.

Webhook URLs often work as credentials for the destination channel, so we treat them as confidential. Only configure email addresses and channels that you are authorized to send to.

2. How We Use Your Information

We use the collected data for the following purposes:

• To provide and maintain the Service: Including authenticating your API requests and routing market data.
• To deliver alerts and briefings: Sending the notifications, digests, and briefings you configure to the webhook URLs, channels, and email addresses you provided.
• For billing and accounting: To meter your API usage per UTC day and calculate the overages billed on your monthly invoice.
• To improve the Service: Analyzing usage patterns to optimize our infrastructure and reduce latency.
• To communicate with you: Sending transactional emails (e.g., invoice receipts, API key resets) and important service updates.
• For security: Detecting, preventing, and addressing technical issues, abuse, or violations of our Terms of Service.

3. Data Sharing and Disclosure

We respect your privacy and do not sell your personal data to third parties. We only share your information with trusted service providers who assist us in operating the Service, under strict confidentiality agreements:

• Payment Processors: We use Stripe to process payments securely.
• Infrastructure Providers: We use secure cloud hosting providers to run our API and databases.
• Email Delivery Providers: We use a transactional email provider to send account emails and the alert and digest emails you configure.

When you configure delivery to a third-party platform (such as Slack, Discord, Telegram, or your own webhook endpoint), we send the alert or briefing content to that platform at your direction. Its handling of that content is governed by the platform's own terms and privacy policy.

We may also disclose your information if required to do so by law or in response to valid requests by public authorities.

4. Data Security

The security of your data is our priority. We implement industry-standard security measures, including encryption in transit (HTTPS/TLS) and secure hashing of credentials. However, please remember that no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your Personal Data, we cannot guarantee its absolute security.

You are responsible for keeping your ApexTick API keys confidential. Treat your API key like a password.

5. Cookies and Tracking

We use cookies and similar tracking technologies on our website (apextick.com) to maintain your authenticated session and remember your preferences. You can instruct your browser to refuse all cookies, but doing so may prevent you from logging into the dashboard.

We also use cookie-less, privacy-preserving web analytics (Cloudflare Web Analytics) to measure aggregate pageviews and site performance, without setting tracking cookies or collecting personal identifiers.

6. Children's Privacy

Our Service is intended for professionals and businesses. We do not knowingly collect personally identifiable information from anyone under the age of 18.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

8. Contact Us

The Service is operated by OpenField Nexus LLC. If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@apextick.com.