Privacy Policy

1. Information We Collect

When you onboard to the AXIS CAP Terminal, we securely collect identity markers facilitated by our OAuth providers (Google, X, LinkedIn) and your explicit inputs:

• Identity Data: Name, Email Address, and Avatar.
• Financial Metadata: Manual portfolio inputs, API configurations, and trading preferences.
• Telemetry Data: IP Address, browser type, and terminal interaction logs (strictly for security and brute-force mitigation).

2. Data Isolation & Security (Supabase)

All quantitative metrics, transactional arrays, and chat histories are routed directly to isolated PostgreSQL tables via Supabase. We employ Row-Level Security (RLS) meaning your portfolio is cryptographically walled off from all other actors on the terminal. We do not sell, rent, or lease your quantitative execution data to third-party institutions.

3. Artificial Intelligence (Gemini Integration)

Our terminal utilizes Google's Gemini LLM for quantitative thesis generation. Your structural portfolio data is never used to train Google's models. We sanitize all payloads sent to the `ai-analysis` endpoints, transmitting only absolute ticker metrics and mathematical formulas, explicitly stripped of PII.

4. User Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you possess the right to:

• Right to Erasure: You can irrevocably wipe your portfolio, transactions, and session history via the 'Danger Zone' in Settings.
• Right to Portability: You may request an export of your JSON/CSV database structures.