Privacy Policy

This Privacy Policy explains how CodeVaultEx LLC, a New Jersey limited liability company ("CodeVaultEx", "we", "us") collects, uses, and protects information when you use codevaultex.com and our services (the "Service"). By using the Service you agree to this Policy.

1. Information we collect

• Account information — email address, username, and (optionally) phone number you provide when registering.
• Authentication data — login credentials managed by our authentication provider, and two-factor authentication settings if you enable them. If you sign in with Google, we receive your basic Google profile (name, email).
• Payment information — handled by Stripe. We do not store your full card number. We retain billing metadata such as subscription status and the Stripe customer/subscription identifiers.
• Trading-account credentials — if you choose to connect a trading account, we collect the credentials needed to place or verify trades on the venue you select. Depending on the venue this may include exchange API keys and secrets, API passphrases, broker account IDs (e.g., OANDA, Tradier), uploaded RSA / private-key files (e.g., Kalshi), and IBKR Flex query tokens. These credentials are encrypted at rest, transmitted over encrypted connections, and used only to place or verify the trades you authorize. We request trade-only scopes and never request withdrawal-enabled keys, and we never take custody of your funds.
• Usage & trading data — bot performance, orders, trades, reviews, and similar activity generated through the Service.
• Technical data — IP address, browser type, and similar information collected automatically, plus local storage used to keep you signed in.

2. How we use information

• To provide, operate, and improve the Service;
• To process subscriptions and pay out creators;
• To authenticate you and secure your account;
• To run bots you subscribe to or publish, and to display verified performance;
• To send transactional email (confirmations, password resets, receipts);
• To comply with legal obligations and prevent fraud or abuse.

3. Service providers

We share information only with providers that help us run the Service, under their respective privacy terms:

• Stripe — payments, subscriptions, and creator payouts.
• Supabase — database, authentication, and storage.
• Cloudflare — website hosting and content delivery.
• Resend — transactional email delivery.
• Google — optional sign-in.

We do not sell your personal information.

4. Security

We use industry-standard measures including encryption in transit, encryption of sensitive credentials at rest, row-level access controls, and isolated execution environments for bot code. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data retention

We retain account and transaction information for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. You may request deletion of your account (see Section 6).

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. To make a request, contact us at the email below. We will respond within a reasonable time.

7. Cookies & local storage

We use only the storage necessary to keep you signed in and to operate the Service. We do not use third-party advertising cookies.

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children.

9. Changes

We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date.

10. Contact

Questions about this Policy: support@codevaultex.com.

11. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to access or delete it, to correct inaccuracies, and to not be discriminated against for exercising these rights. The categories of personal information we collect are described in Section 1.

Do Not Sell or Share My Personal Information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Because we do not sell or share personal information, no opt-out is required to stop those activities; if this ever changes, we will provide a clear "Do Not Sell or Share My Personal Information" mechanism here. To exercise any California right, contact us at support@codevaultex.com. You may use an authorized agent, and we will verify requests before acting on them.

12. European/UK users (GDPR) & international transfers

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following lawful bases: performance of a contract (to provide the Service you request, including placing or verifying trades), legitimate interests (to operate, secure, and improve the Service and prevent fraud), consent (where we ask for it, such as optional features), and legal obligation (tax, accounting, sanctions, and AML compliance). You have the rights to access, correct, delete, restrict, or object to processing, and to data portability; you may also lodge a complaint with your local supervisory authority.

International transfers. We are based in the United States and use service providers that process data in the U.S. and elsewhere. Our processors include Stripe (payments), Cloudflare (hosting/CDN), and Supabase (database, authentication, and storage), among those listed in Section 3. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.