Your data is protected in transit by SSL/TLS, and Cloudflare screens traffic at the edge. HSTS is set for one year, but not with includeSubDomains or preload.
A Content-Security-Policy limits where files may load from, though it still allows inline and eval script. We never sell personal information. This page explains the rest: what we store, how it is encrypted, and how long we keep it.
Your data security is our top priority. We implement industry-standard protections to keep your information safe.
Our entire infrastructure sits behind Cloudflare's security network.
Automatic detection and mitigation of distributed denial-of-service attacks at the network edge.
WAF rules protect against common vulnerabilities including SQL injection and cross-site scripting.
Content is served through Cloudflare's global edge network. The size of that network is Cloudflare's figure, not a measurement of ours.
Full SSL/TLS encryption for all connections. Certificate management handled automatically.
Cloudflare edge network, firewall rules, IP-based access controls, and rate limiting protect our infrastructure from attacks.
Role-based access, session management, secure authentication, and principle of least privilege for all system access.
Managed database backups and health monitoring. Production runs on a single reserved instance — there is no redundant system to fail over to, and saying otherwise would be the easiest claim here to disprove.
If you discover a security vulnerability, please report it responsibly. We take all reports seriously and will investigate promptly.
Security Email: sedat@stockexpertai.com
Use a strong, unique password with a mix of letters, numbers, and symbols.
Don't reuse passwords from other sites. Use a password manager to keep track.
We'll never ask for your password via email. Verify URLs before entering credentials.
Keep your browser and operating system updated with the latest security patches.
Stock Expert AI uses Cloudflare DDoS protection, Web Application Firewall (WAF), SSL/TLS encryption for all connections, HSTS enforcement, and Content Security Policy headers. Data at rest is encrypted using Neon PostgreSQL's built-in encryption.
No. Stock Expert AI never sells, rents, or trades personal information to third parties. We follow a privacy-first approach and collect only what is necessary to provide the service.
If you discover a security vulnerability, please report it responsibly by emailing sedat@stockexpertai.com. We review all reports promptly and take immediate action to address confirmed issues.
For more details on how we handle your information, please review our Privacy Policy and Disclaimer. Questions? Contact us.