Privacy Policy

WeServeAI LLC ("Company", "we", "us"), based in Alpharetta, Georgia, United States, operates APY Machine(the "Service"). This Privacy Policy describes how we collect, use, share, and protect personal information in connection with the Service. Contact details are in the Contact section below.

We collect the following categories of information:

• Account information. Name, email address, password credentials, and similar identifiers, collected when you create an account through our authentication provider.
• Workspace and usage data. Organization memberships, workspace activity, watchlists, saved filters, notes, portfolio entries you provide, preferences, and similar product activity necessary to provide the Service.
• Payment data. If you subscribe, payment is processed by our payment processor. We do not store full payment card numbers; we receive limited transaction information (e.g. last four digits, status, plan).
• Device and log data. IP address, browser type, operating system, referring URL, request timestamps, and similar information automatically collected from your device when you interact with the Service.
• Communications. Messages you send to us (for example, support inquiries).

The Service also processes public market data about securities and options contracts. This is not personal information about you.

We use the categories above for the following purposes:

• operating, providing, maintaining, and improving the Service;
• authenticating users and securing accounts and workspaces;
• processing subscriptions and payments;
• communicating with you about the Service (transactional messages, security notices, updates);
• detecting, preventing, and responding to fraud, abuse, or violations of our Terms;
• complying with legal obligations and enforcing our agreements;
• understanding how the Service is used at an aggregate level.

Where required by law (for example, under the EU/UK GDPR), we rely on the following legal bases: performance of a contract (to provide the Service you request); legitimate interests (to secure, improve, and support the Service); consent (where you give it, for example for optional features); and compliance with legal obligations.

We share personal information with vendors that process data on our behalf, subject to confidentiality and data-protection obligations. Categories include:

• authentication and identity management;
• payment processing;
• application hosting and content delivery;
• database hosting;
• email delivery for transactional messages;
• error monitoring and analytics necessary to operate and secure the Service;
• market data providers (these providers receive symbol lookups; they do not receive your account data).

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

We may disclose personal information when we believe in good faith that disclosure is required by law, legal process, or governmental request; to protect the safety, rights, or property of WeServeAI LLC, our users, or others; or in connection with a merger, acquisition, financing, or sale of assets (with notice where required by law).

The Service is operated from the United States of America. If you access the Service from outside the United States of America, your information will be transferred to, stored, and processed in the United States of America and potentially in other jurisdictions where our service providers operate. We take reasonable steps to ensure that transfers are conducted lawfully.

We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, enforce agreements, and meet legitimate business needs. Operational logs are typically retained for a shorter period and are then deleted or aggregated.

Depending on where you live, you may have rights regarding your personal information, such as:

• requesting access to or a copy of the information we hold about you;
• requesting correction of inaccurate information;
• requesting deletion of your information, subject to legal retention requirements;
• objecting to or restricting certain processing;
• withdrawing consent where processing is based on consent;
• requesting portability of information you provided.

You can exercise these rights by contacting us using the details below. We may need to verify your identity before responding. If you are an EU/UK or California resident, additional rights may apply under your local law.

We do not sell personal information and do not share it for cross-context behavioral advertising. California residents have the rights described in Section 9, plus the right to non-discrimination for exercising those rights. You can submit requests via the contact details below. We may use third-party tools to help verify requests.

The Service is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information to us, please contact us so that we can delete it.

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, and destruction. However, no system is fully secure, and we cannot guarantee absolute security of your information.

We use cookies and similar technologies that are necessary to operate the Service (for example, to keep you signed in and to remember your preferences). You can control cookies via your browser settings; certain features may not function correctly if cookies are disabled.

We may update this Privacy Policy from time to time. If we make material changes we will provide reasonable notice (for example, by updating the version date above or notifying you within the Service).

For questions about this Privacy Policy or to exercise your rights, contact WeServeAI LLC (Alpharetta, Georgia, United States) at privacy@apymachine.com.