Privacy Policy

At MarkX AI Labs, we take privacy seriously. This Privacy Policy explains what information we collect when you use the MarkX AI Labs platform ("MKX-OS") — including our website, AI modules, contact channel, and the EDITH trading dashboard — and how we use, share, and protect it.

By using the services, you agree to the handling of information as described here. We have written this policy in plain language so it is easy to follow.

We collect information in three main ways: information you provide to us, account and trading-connection data for users who log in, and information collected automatically.

Contact Form Submissions

When you contact us, we collect the details you provide: first name, last name, email address, phone number, and your message. These submissions are stored in our PostgreSQL database (hosted on Neon). On a best-effort basis, we also record the IP address and browser user-agent associated with a submission to help prevent abuse.

Account & Trading Data

For users who log in (administrators and client users), we collect account information such as your name, email address, a securely hashed password (we use bcrypt — plaintext passwords are never stored), and session data. For client trading accounts, we store the connection details needed to reach your FreqTrade server — server IP and port, username, and an API password that is encrypted at rest using AES-256-GCM.

Automatically Collected Data

When you use the services, we automatically collect your IP address, browser and user-agent details, and usage and diagnostic data. Within authenticated areas, we keep an audit log of significant actions to help secure the platform and investigate issues.

We use the information we collect to:

• Respond to your inquiries and provide customer support.
• Provide, operate, secure, and improve the services.
• Authenticate users and maintain account sessions.
• Detect, prevent, and address abuse, fraud, and technical issues.

We do not sell your personal information, and we do not use it for third-party advertising.

The platform uses session-based login, which relies on strictly-necessary authentication and session cookies. These cookies are required for you to sign in and for the services to function securely.

We do not use third-party advertising or cross-site tracking cookies.

We do not sell your data. We share information only with the service providers that help us operate the platform, and only as needed for them to perform their function. These providers are:

Vercel

Application hosting and content delivery. Aggregate performance metrics may also be collected via Vercel.

Neon

PostgreSQL database hosting, where account and contact data are stored.

Arcjet

Security services — rate limiting, bot detection, and web application firewall.

Sentry

Error and diagnostic monitoring. It is configured to scrub sensitive fields, and session replay is disabled.

We may also disclose information where required to do so by law, or to protect the rights, safety, and security of our users, the public, or MarkX AI Labs.

We apply industry-standard safeguards to protect your information, including:

• HTTPS with HSTS and a strict Content-Security-Policy.
• bcrypt password hashing — plaintext passwords are never stored.
• AES-256-GCM encryption for stored trading credentials.
• A web application firewall, rate limiting, and bot protection.
• Role-based access control across authenticated areas.

Despite these measures, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

We keep personal information for as long as necessary to fulfil the purposes described in this policy — for example, to operate your account, respond to your inquiry, secure the platform, or meet legitimate operational needs. When information is no longer needed for these purposes, we delete or anonymize it.

You may request access to, correction of, or deletion of the personal information we hold about you by contacting us. We will respond to reasonable requests, subject to any operational or security obligations that require us to retain certain information.

To make a request, email markxailabs@gmail.com or use our contact page.

The services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

The platform and the service providers we rely on may process and store information in locations outside the country in which you reside. By using the services, you understand that your information may be transferred to and processed in such locations as part of operating the platform.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date shown at the top of this document, and the updated policy will apply from the moment it is posted. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or how your data is handled, contact us at markxailabs@gmail.com or through our contact page.