Privacy Policy

1. Who we are

Apex Satoshi Holdings, Inc. is the controller for personal data submitted on apexsatoshi.com. Contact ir@apexsatoshi.com.

2. What we collect

Account and session: a signed, httpOnly session cookie after you sign in. Passwords are stored as scrypt hashes, never plaintext. Billing: a signed httpOnly apex-plan cookie with the plan you unlocked and recent order identifiers. Waitlist and display settings stay in your browser (localStorage keys apex-contact and apex-settings) unless you email the desk.

Payments: when live Stripe is enabled, Stripe collects card, wallet, and billing-address data on Stripe Checkout. We receive payment status, amount, currency, and a session identifier. We never store full card numbers on Apex Satoshi servers. Stripe’s privacy policy applies to data it processes as a processor / independent controller for the charge.

Logs: host, path, CSP violation reports, and error traces needed to operate and monitor the site. No marketing pixel ships by default.

3. Why we use it

To authenticate you, fulfill a subscription, unlock Pro surfaces, prevent abuse, and answer investor-relations or treasury-desk mail. Legal bases: contract (paid access), legitimate interests (security, product improvement), and consent where a browser storage prompt is required.

4. Retention and rights

Session and billing cookies expire after 30 days of inactivity or when you sign out / clear site data. Stripe retains charge records per its obligations. You may request access, correction, or deletion of account data by writing to ir@apexsatoshi.com. Do not send card PANs to that inbox.

5. International transfers

Stripe and our hosting provider may process data in the United States and other countries. We use them only to run checkout and serve the application.