Your data. Your control.

Data Controller

Trade Tolibov is operated by Rustam Tolibov, based in Samarkand, Uzbekistan. We build AI-powered trading tools — including the APEX-T Prompt Engine and AI execution products — for traders across the CIS region and globally. For any questions about this policy or your personal data, reach us at rustamtolibov230@gmail.com.

Information We Collect

We collect limited personal data across three contexts:

• Google Sign-In (APEX-T): your email address, Google account ID, and email verification status. We do not receive your Google password.
• Contact Forms (tradetolibov.com): your name, email address, the topic you selected, and the message you submitted.
• Browser Storage: your chosen interface language (English, Russian, or Uzbek) is saved in your browser's localStorage. This data never leaves your device and is not transmitted to our servers.

Information We Do Not Collect

We do not collect any of the following:

• Your Google password, Gmail contents, Google Drive files, Contacts, Calendar, or any Google service data beyond basic account identity.
• Trading account credentials, broker API keys, real-time portfolio positions, or financial balances.
• Payment card details. No subscription billing is currently active — paid plans are not yet live.
• Advertising identifiers, browser fingerprints, or cross-site tracking data.

How We Use Your Data

Your data is used only for the following purposes:

• Creating and managing your APEX-T account and controlling access by plan tier.
• Authenticating your identity on each login using short-lived JWT tokens.
• Responding to messages and inquiries submitted through our contact forms.
• Improving APEX-T features using aggregated, anonymized usage patterns.
• We do not use your data for advertising, third-party profiling, or sale to any external party.

AI and Automated Decision-Making

APEX-T provides AI-generated market context and structured decision-support prompts. All final trading decisions remain with you. When AI-powered execution is used, it operates strictly within the strategy parameters and risk limits you define — no automated system touches your brokerage account without your explicit opt-in and configuration. We are not a signal service and do not guarantee trading outcomes.

Storage and Security

Account and session data is stored on a self-hosted server located in the European Union. All traffic is encrypted in transit via HTTPS (TLS), managed by Caddy. Access tokens expire automatically and sessions can be revoked at any time by logging out. We apply standard access controls and keep our server software up to date.

Data Retention

Account records are kept for as long as your account is active. After an account deletion request, personal data is removed within 90 days. Contact form messages are retained for up to 12 months for correspondence purposes, then permanently deleted.

Third-Party Services

We use Google OAuth solely for user authentication. Google's own privacy policy governs how Google handles your data during the sign-in flow. We do not share your personal data with advertisers, analytics platforms, or data brokers. We do not use Google Analytics, Facebook Pixel, or any third-party tracking or advertising services.

Your Rights

You have the right to access, correct, export, or delete the personal data we hold about you, and to withdraw consent at any time. To exercise any of these rights, email rustamtolibov230@gmail.com with your request. We will respond within 30 days.

Cookies and Local Storage

We do not use tracking or advertising cookies. Your language preference (EN / RU / UZ) is stored in your browser's localStorage — a client-side mechanism that our servers cannot read. No session cookies are used beyond what is strictly necessary for authentication.

Children's Privacy

Trade Tolibov products are intended for adults (18 and over) with an interest in financial markets. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted personal data to us, contact us and we will delete it promptly.

Changes to This Policy

When we make material changes to this policy, we will update the date below and, where appropriate, notify registered users by email. Continued use of our services after changes take effect constitutes acceptance of the updated policy.