2apollo Networks

2apollo Networks ("Company," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, and protect your information when you use our website, applications, and services (collectively, the "Service").

By using the Service, you agree to the collection and use of your information in accordance with this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms of Service.

1. Information We Collect

We collect the following types of information:

1.1 Account Information

Email address
Account credentials (password, authentication tokens)
Account creation date
Profile information associated with your Google account (if using Google sign-in)

1.2 Brokerage & Exchange Credentials

When you connect third-party brokerage accounts or cryptocurrency exchanges (such as Kraken or Public.com) to the Service, we collect and store OAuth tokens, API keys, and related authentication credentials necessary to access your accounts on your behalf.

1.3 Financial Data

Portfolio holdings, positions, and balances
Transaction and trade history
Portfolio snapshots and performance data

1.4 Usage Data

Device and browser information
IP address
Pages visited and features used
Timestamps of activity

2. How We Store Your Data

2.1 Secure Firebase Infrastructure

All user data, including account credentials and financial information, is stored in a secure Google Firebase database infrastructure. Firebase provides enterprise-grade security features including encrypted data transmission (TLS/SSL), secure authentication, and robust access control mechanisms.

2.2 Custom Encryption for Sensitive Credentials

In addition to Firebase's built-in security, we apply an additional layer of custom encryption to all sensitive account credentials. Brokerage API keys, OAuth tokens, access tokens, refresh tokens, and exchange credentials are encrypted using our proprietary encryption layer before being stored in the database. This means that even in the unlikely event of a database breach, your raw credentials would not be accessible without the separate encryption keys, which are stored securely outside the database.

2.3 Access Controls

Sensitive credential data is stored in restricted Firestore collections that are not accessible from the client side. Only authorized server-side processes running on secure backend infrastructure can access encrypted credentials. No client-side code or user (including the account owner) can directly read raw credential data from the database.

3. Our Commitment to Security

We treat all client credentials and secure information with the highest degree of security and caution. Security is a core priority at 2apollo Networks, and we employ multiple layers of protection to safeguard your data:

Encryption at rest and in transit: All data is encrypted both when stored and when transmitted between systems
Custom encryption layer: Sensitive credentials receive an additional proprietary encryption layer beyond standard database encryption
Principle of least privilege: Access to sensitive data is strictly limited to only the backend processes that require it
Secure key management: Encryption keys are managed separately from the encrypted data using Google Cloud Secret Manager
Server-side only access: Credential data is only accessible through secure, authenticated server-side functions — never exposed to the client
Firestore security rules: Strict database security rules prevent unauthorized access at the database level
Regular security reviews: We regularly review and update our security practices to address emerging threats

4. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Execute trades and manage your portfolio on your behalf
Retrieve and display your portfolio data and performance metrics
Authenticate your identity and secure your account
Communicate with you about the Service, including updates and security alerts
Comply with legal obligations

5. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

Third-party service providers: We share necessary authentication credentials with connected brokerage platforms and exchanges solely to provide the Service functionality you have requested
Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request
Protection of rights: We may share information to protect the rights, property, or safety of 2apollo Networks, our users, or others

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you disconnect a brokerage account, the associated encrypted credentials are deleted from our systems. You may request deletion of your account and associated data by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information
Object to or restrict certain processing of your information
Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at support@2apollo.net.

8. Cookies & Tracking

We may use cookies and similar tracking technologies to maintain your session, remember your preferences, and improve the Service. You can control cookie settings through your browser preferences.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised "Last Updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@2apollo.net.