1. Scope

This Privacy Policy applies to the Aurox Intelligence platform and describes the personal data the Platform collects, the purposes for which it is processed, how it is stored, and your rights in relation to it. It applies to all registered users and, where applicable, to visitors of the Platform.

2. Data we collect

When you register or use the Platform, we may collect and process the following categories of personal data:

• Account data: name, email address, hashed password, and account creation timestamp
• Session data: authentication tokens, session identifiers, and session activity timestamps
• Usage data: pages visited, features used, and interaction timestamps for operational and security purposes
• Simulation data: virtual portfolio configurations, simulated trades, and preferences stored against your account
• Technical data: IP address, browser type, and device information collected automatically for security and performance purposes

We do not collect real financial account details, payment card data, or brokerage credentials through this Platform.

3. Purposes and legal basis

We process personal data for the following purposes:

• Providing and operating the Platform, including authentication and session management
• Maintaining the security and integrity of the Platform
• Improving the Platform based on aggregated usage analytics
• Fulfilling legal and compliance obligations where applicable

Where required by applicable law, processing is based on your consent, the performance of a contract, or a legitimate interest pursued by the Platform operator that does not override your fundamental rights.

4. Data storage and retention

Personal data is stored in a managed PostgreSQL database. Account and session data is retained for as long as your account remains active, plus a reasonable period thereafter to comply with legal obligations or resolve disputes. Simulation and preference data may be deleted upon account deletion.

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

5. Third-party services

The Platform uses third-party market data providers (Polygon.io, Twelve Data, Tiingo, CoinGecko, Finnhub, EODHD) to source financial data. These providers are accessed on the server side; your personal data is not shared with them. Their data is used solely to populate market information displays on the Platform.

We do not sell or rent personal data to third parties.

6. Your rights

Depending on your location and applicable data protection law, you may have rights including: the right to access your personal data, the right to rectify inaccurate data, the right to request deletion of your data, and the right to object to certain processing activities. To exercise any of these rights, please contact the Platform operator using the contact details in the Legal Notice.

7. Cookies and local storage

The Platform uses authentication tokens stored in secure HTTP-only cookies to maintain your session. Minimal local storage may be used to preserve UI preferences such as theme and language selection. No cross-site tracking cookies or advertising cookies are used.

8. Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will provide notice through the Platform. Continued use of the Platform after such notice constitutes acceptance of the revised policy.