Privacy Policy

1. Introduction

Avenix Data ("we", "us", "our") operates the web application at avenixdata.com (the "Service"). The Service provides an end-of-day stock screener with tiered access to market data, short interest, dilution tracking, and on-demand research reports.

2. Information We Collect

What we collect

• Account data: Your email address and a hashed password (PBKDF2-HMAC-SHA256 with random salt). We never store passwords in plaintext.
• Authentication tokens: A random session token stored in your browser's localStorage, used to authenticate API requests.
• Tier information: Your subscription tier (free, general, pro) to determine feature access.

What we DO NOT collect

3. How We Use Your Information

• Authenticate your account — verify your email and password on login
• Display your subscription tier — determine which features you can access
• Generate on-demand reports — process ticker symbols you request through our report pipeline

That's it. No other use. We do not use your data for marketing, advertising, or profiling.

4. Where Data Is Stored

• User credentials: SQLite database on our VPS (DigitalOcean, NYC region)
• Market data: Cached from the Marketstack API (public end-of-day price data — not personal data)
• Session tokens: Your browser's localStorage (not cookies, not server-side tracking)
• No data is stored or processed by third parties

5. Data Sharing

• We do not sell, rent, share, or transmit your data to any third party
• We do not use third-party analytics or advertising networks
• The Marketstack API receives only ticker symbols you look up — not your identity
• SEC EDGAR and FINRA receive only ticker symbols for public market data — no user data

6. Data Retention

• Account data: Retained until you request deletion
• Session tokens: Expire after 30 days of inactivity
• Cached market data: Rotates per TTL (1–24 hours) — not personal data
• Activity logs: Request logs retained 7 days, activity events 30 days (for owner analytics only — not shared)

7. Your Rights

• Access: Request a copy of your account data at any time
• Deletion: Request account deletion at any time (email [email protected])
• No automated profiling: We do not profile users or make automated decisions about you
• No marketing emails: We do not send marketing communications

8. GDPR Compliance (EU Users)

• Legal basis: Legitimate interest (Article 6(1)(f)) — authentication for service delivery
• Right to access (Article 15), rectification (Article 16), erasure (Article 17)
• Right to data portability (Article 20)
• Right to object (Article 21)
• No automated decision-making (Article 22) — we do not profile or automate decisions
• Users have the right to lodge complaints with their local supervisory authority (DPA)

9. CCPA Compliance (California Users)

• We do not "sell" personal information as defined by CCPA
• We do not "share" personal information for cross-context behavioral advertising
• Right to know: Request what personal data we have (email + hashed password)
• Right to delete: Request deletion at any time
• Right to opt-out: Not applicable (no sale or sharing of data)
• Right to non-discrimination: No service difference based on privacy rights exercised

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Security

• Passwords hashed with PBKDF2-HMAC-SHA256 (never stored in plaintext)
• HTTPS enforced via Cloudflare (TLS 1.2+)
• No third-party scripts that could introduce vulnerabilities
• This application is open source — security is verifiable by code inspection

12. Changes to This Policy

• We will update the "Last updated" date at the top of this page when changes are made
• Material changes will be announced on the application dashboard
• Continued use of the Service after changes constitutes acceptance of the updated policy

13. Open Source Verification

This application's code is publicly available:

• Repository: github.com/proxy420ah-create/ATS-Screener
• You can verify every claim in this policy by reading the source code
• No hidden tracking, no obfuscated code, no minified analytics

14. Contact

• General inquiries: [email protected]
• Technical support: [email protected]
• Feature suggestions: [email protected]
• Privacy/data requests: [email protected]
• Response time: within 30 days