Privacy Policy & Notice at Collection
Effective July 12, 2026 · version 2026-07-12-community-v1
Information collected
Apertux collects account and identity data; authentication, device, and security records; watchlists and manual portfolio entries; email preferences; consent records; AI usage metadata; product analytics; support and privacy communications; and information you submit in Plaza. Plaza data includes public profile names, posts, comments, sources, disclosures, follows, reactions, bookmarks, blocks, reports, appeals, and context notes.
Public and private community data
Profile display names, published posts, comments, sources, disclosures, reaction counts, and visible context notes are public and may be viewed, copied, linked, or indexed by others. Drafts, bookmarks, blocks, raw reports, moderation evidence, AI assessments, internal safety notes, and appeal records are restricted to authorized systems and personnel, although information may be shared when needed to investigate, protect users, enforce policies, or comply with law. Do not post confidential or sensitive personal information.
Purposes and minimization
Data is used to operate accounts; deliver research, market, portfolio, watchlist, alert, email, and community features; personalize requested feeds; secure the service; detect fraud and manipulation; coach and moderate community content; process reports and appeals; comply with law; measure performance; and improve reliability. Apertux limits collection to data reasonably needed for these purposes and does not use income, debt, age, goals, or risk tolerance to select investments.
AI processing and human review
Apertux sends the content needed for requested explanations, the Plaza drafting assistant, Draft Coach, and safety review to configured AI providers. The drafting assistant may organize a member's words into editable fields but does not publish, verify sources, or make the member's decisions. Automated systems may classify risk, identify text spans, recommend an action, or suggest clearer language. Authorized administrators make final enforcement decisions. AI can be wrong. Portfolio credentials and unnecessary personal data are excluded, and customer portfolio data may not be used for model training by Apertux.
Processors and disclosures
The free beta uses Microsoft Azure for hosting and AI, Supabase for accounts and storage, Polygon.io for market data, Resend for email, PostHog US Cloud for limited analytics, Better Stack for monitoring, and Help Scout for support. Stripe and SnapTrade are configured but disabled for customer use. Data may also be disclosed to professional advisers, transaction counterparties, and government or safety authorities when reasonably necessary. Apertux does not sell personal data or use it for targeted advertising.
Analytics and sensitive data
Apertux excludes access tokens, passwords, full portfolio quantities, raw report text, private messages, and sensitive form values from product analytics. First-party and PostHog events may record page paths, feature interactions, device context, coarse network-derived location, account identifiers, and error metadata. Apertux does not intentionally collect precise geolocation, biometric identifiers, health data, or data from children.
Retention, deletion, and public copies
Account and feature data is retained while needed to provide the service. Verified deletion requests remove or deidentify data from active customer systems, subject to limited retention for security, moderation history, consent evidence, disputes, fraud prevention, copyright matters, backups, and law. Deleted public content may remain in quotations, replies, screenshots, search caches, or copies controlled by others. Moderation, report, and appeal records may be retained after account deletion when reasonably necessary to protect the community and document decisions.
Texas and US privacy rights
Subject to applicable law, users may request access, correction, deletion, portability, consent withdrawal, and an appeal of a denied privacy request. Apertux will not discriminate for exercising a privacy right. Requests may be submitted without creating a new account through the Privacy Request page or privacy@apertux.com. Identity verification and authorized-agent procedures may apply. If an appeal is denied, eligible Texas residents may contact the Texas Attorney General.
Security and incidents
Apertux uses administrative, technical, and organizational safeguards described in the Security Overview, including access controls, server-owned privileged operations, audit records, and monitoring. No system is perfectly secure and no certification is claimed. Apertux maintains incident response and applicable breach-notification procedures.
Children, changes, and contact
The service is intended for adults 18 and older. Material privacy changes will be posted and notified where required, with versioned acceptance when appropriate. Contact privacy@apertux.com for privacy matters, legal@apertux.com for legal questions, and support@apertux.com for account help.