Last updated: July 3, 2026
Traders trust us with their research process, so the platform is built conservatively: identity from the server, entitlements from signed webhooks, ownership enforced by the database, and secrets that never leave the backend. Here is exactly how that works.
All traffic to and from StockTraderX.ai is encrypted with TLS. There is no unencrypted access path to the application or its APIs.
Checkout and billing run entirely on Stripe, a PCI DSS Level 1 certified processor. Your card number is entered on Stripe-hosted pages and is never transmitted to, processed by, or stored on our infrastructure. Subscription state reaches us only through cryptographically signed Stripe webhooks, verified on every delivery.
Your identity is established exclusively from your authenticated server session — never from anything the browser claims. Paid-tier entitlements are granted only by verified Stripe webhook events; there is no client-side path to a paid feature.
Every user-owned table in our Postgres database (watchlists, alerts, paper-trading accounts and orders) is protected by row-level security policies, so a session can only ever read or write its own rows — enforced by the database itself, beneath the application layer.
API keys for market data, AI analysis, payments, and database administration exist only as server-side environment variables. They are never shipped to the browser or embedded in client code.
A design rule across the product: we display verified data from our licensed sources (Finnhub market data, SEC EDGAR filings) or an explicit unavailable state — never estimated, placeholder, or fabricated numbers presented as real. AI-generated content is always labeled as such.
The service runs on Vercel (hosting), Supabase (authentication and Postgres database), Stripe (payments), Anthropic (AI analysis), and Finnhub (market data), processed in the United States. Each subprocessor is bound by its own security and privacy commitments.
You can request deletion of your account and associated data at any time by contacting support — see our Privacy Policy for the full data-rights process.
Found a security issue? Email support@stocktraderx.ai with details. We commit to acknowledging reports promptly and will not pursue action against good-faith research.
Questions about security, compliance, or procurement? Contact support@stocktraderx.ai — see also our Terms of Service and Privacy Policy.
© 2026 StockTraderX.ai · BME GROUP · All rights reserved