Privacy Policy

1. Information we collect

Information you give us

• Account data — your name (if provided), email address, and password (stored hashed).
• Subscription data — the plan you choose and your billing status. Card payments are handled by Whop; we do not receive or store your card details.
• Communications — messages and feedback you send us, and your email preferences.
• Google sign-in — if you create an account or sign in with Google, Google sends us your email address, your Google account identifier, your given name and your profile picture. We use these to create and identify your account. We do not receive your Google password. Google’s own handling of the sign-in is covered by Google’s Privacy Policy.
• Watchlists and settings — the tickers you save and the preferences you set, stored against your account so the site can show them back to you.

Information collected automatically

• Usage data — pages and features you view, actions you take, and timestamps, which we use to operate and improve the Service.
• Searches — the queries you type into search boxes on the Service, when you searched, which section you searched in, how many results came back, and what you did with them.
• Interactions — what you open, read, follow, save, and post; the tickers and members you look at; and how long and how often you use the Service. We may draw inferences from this about what you are interested in.
• Device & log data — IP address, browser type and version, referring page, and similar technical information. We record your IP address in our server and application logs, together with the pages you request and the time of each request. We use cookies and similar technologies to measure traffic and understand how the Service is used.
• Cookies — small files used to keep you logged in and remember the settings you choose. See Section 4.
• Push notifications — if you turn on browser notifications, your browser gives us a subscription endpoint and its encryption keys. These identify the browser to your push provider (for example Apple or Google) so a message can be delivered; they do not tell us who you are beyond the account that enabled them. Turning notifications off in your browser, or in your account settings, revokes it.

2. How we use information

• provide, maintain, and secure the Service and your account;
• process subscriptions, payments, renewals, and receipts;
• send transactional messages (sign-in, password reset, billing, service notices);
• send product updates or research digests if you have opted in, and let you opt out at any time;
• understand usage, diagnose problems, and improve features;
• personalise the Service — the posts, members, tickers, search results and recommendations we show you, and the order we show them in;
• create aggregated, de-identified, or derived datasets from the information we hold, which we may use, publish, license, or otherwise make available for any lawful purpose;
• carry out research and develop new products and features;
• detect, prevent, and respond to fraud, abuse, and violations of our Terms;
• comply with legal obligations and enforce our agreements.

We do not sell or share personal information, and we do not use it for advertising.

3. Payments

Payments and subscription management are handled by Whop, Inc. Your card details are submitted directly to Whop and are subject to Whop’s Privacy Policy. We store what we need to manage your subscription (for example, a customer and subscription ID, plan, status, and renewal date).

4. Cookies & analytics

We use cookies — small files your browser stores — to keep you signed in, to protect forms against cross-site request forgery, and to remember settings you choose, such as your watchlist and display options. They are first-party cookies set by ApesAlpha.com.

Analytics. We currently measure traffic and feature usage with our own software running on our own servers. Our logs record the IP address, page, referring page and timestamp of each request, and we use cookies and similar technologies to measure traffic and understand how the Service is used. We use this to run the Service, diagnose faults, understand which features are used, and detect abuse.

Third-party content. Some pages load fonts, charts and styling libraries from public content delivery networks (for example Google Fonts, jsDelivr, jQuery and Bootstrap CDN), and checkout is handled by Whop. To serve those files, those providers necessarily see your IP address and the page that requested them, and their own privacy policies govern what they do with it.

You can block or delete cookies in your browser settings, but signing in will not work without them.

5. Email communications

We send transactional emails that are necessary to operate your account; these cannot be opted out of while your account is active. Any research digests, newsletters, or product announcements are optional — you can unsubscribe using the link in those emails or from your account settings.

6. How we share information

We share personal information as follows:

• Service providers that process data on our behalf under contract — for example, payment processing (Whop), cloud hosting, and email delivery.
• Legal and safety — when required by law, subpoena, or legal process, or to protect the rights, property, or safety of Apes Alpha, our users, or the public.
• Business transfer — in connection with a merger, acquisition, or sale of assets, in which case your information may be transferred as part of that transaction.

That is the whole list. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we have no advertising, measurement, or analytics partners — usage is measured by us, on our own servers.

7. Data retention

We keep account and subscription data for as long as your account is active and for a reasonable period afterward to meet legal, tax, accounting, and dispute-resolution requirements. You can request deletion as described below.

Aggregated, de-identified, or derived data that cannot reasonably identify you is not subject to those periods. We may keep it indefinitely and continue to use, publish, license, or otherwise make it available for any lawful purpose, including after your account is closed and after the underlying records have been deleted. Search and usage data is retained for up to 24 months in the identifiable form described below, and may be kept indefinitely once aggregated or de-identified.

Server and analytics logs, including the IP addresses described in Sections 1 and 4, are retained for up to 24 months and then deleted or de-identified. We keep them that long to measure traffic across a full year and the one before it, and to investigate abuse and security incidents. If you would like the log entries associated with your IP address or account removed sooner, contact us using the details below and we will do so unless we are required to keep them.

Retention, by category: account and subscription data for the life of the account plus up to seven years where tax and accounting rules require it; support messages for up to 24 months; server, search, and analytics logs for up to 24 months in identifiable form; push-notification subscriptions until you revoke them or they expire; marketing preferences including unsubscribes for as long as we send email, so that an opt-out is not lost.

8. Security

We use technical and organizational measures appropriate to the sensitivity of the data, such as encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update most information from your account settings, or contact us at ape@apesalpha.com and we will respond within the time required by applicable law. We will not discriminate against you for exercising these rights.

California residents

The categories below are the ones used by the California Consumer Privacy Act, as amended. In the last twelve months we have collected:

We do not sell personal information and do not share it for cross-context behavioural advertising, as those terms are defined by California law. We have not done so in the preceding twelve months. We disclose the categories above only to the service providers named in Section 6, for the purposes named beside them.

California residents may request the specific pieces of personal information we hold, request deletion or correction, and ask us to limit the use of any sensitive personal information we hold. You may make a request through an authorised agent. Contact us at the address in Section 14; we will verify the request against your account before acting on it.

Europe and the UK

Algorithm Services LLC is the data controller. Where the GDPR or UK GDPR applies, we rely on these lawful bases:

• Contract — creating and running your account, delivering the Service, taking payment, and sending the transactional emails that go with it.
• Legitimate interests — keeping the Service secure, preventing abuse, measuring how it is used, and improving it. Our interest is in running a service that works and is not abused; we use the minimum data that achieves it.
• Consent — optional marketing email, research digests and push notifications. You can withdraw consent at any time from your account settings or the unsubscribe link, without affecting anything processed before you withdrew it.
• Legal obligation — tax, accounting and responding to lawful requests.

You have the right of access, rectification, erasure, restriction, portability, and to object to processing carried out on the basis of legitimate interests. You also have the right to lodge a complaint with your national data-protection supervisory authority; in the UK that is the Information Commissioner’s Office. We would rather you contacted us first.

We are based in the United States, so your data is transferred there. Where that transfer is from the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum) with our processors, together with the technical measures described in Section 8.

10. Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. International users

The Service is operated from the United States. If you access it from elsewhere, your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country.

12. Third-party links

The Service may link to third-party websites and data sources. We are not responsible for their content or privacy practices; review their policies before providing information to them.

13. Changes to this Policy

We may update this Policy from time to time. We will change the “Last updated” date and, for material changes, provide additional notice where appropriate. Your continued use of the Service after the changes take effect means you accept the revised Policy.

14. Contact

Questions or requests about privacy: ape@apesalpha.com.