DATA PRIVACY & SECURITY PROTOCOL
🕒 SYSTEM REVISION: 30 October 2026
Preamble & Scope
At Gap & Hold, accessible from https://gapandhold.com, user confidentiality and quantitative data protection are paramount. This Security Protocol outlines our non-custodial telemetry standards, how member credentials are handled, and our compliance with international data privacy frameworks.
Our systems never store banking credentials, credit card numbers, or broker account passwords. All algorithmic integrations rely strictly on scoped, read-restricted API endpoints.
Information We Collect
We collect limited datasets essential for system authentication, quota enforcement, and quantitative algorithm synchronization:
Account Authentication
Username, encrypted password hash (Argon2/bcrypt), and verified email address required for membership privileges and alert dispatching.
Billing & Subscriptions
Processed through Tier-1 PCI-DSS certified processors. Only tokenized customer reference IDs and invoice history are retained on our servers.
Security & Rate-Limiting
IP addresses, user-agent signatures, and timestamped API payloads logged automatically to thwart DDoS attacks and scraping.
Data Utilization
Collected telemetry is exclusively utilized to empower trading operations and terminal performance:
- Service Delivery: Generating real-time AI radar signals, gap computations, and portfolio leaderboards.
- Session State: Persisting your watchlist tickers, chart layouts, and custom terminal presets.
- Infrastructure Security: Detecting anomalous queries and enforcing fair API request limits per subscription tier.
- Direct Communication: Dispatching mission-critical system alerts, earnings catalyst updates, and security announcements.
Encryption Standard
All web, database, and telemetry interactions adhere to stringent military-grade cryptographic specifications:
- Transport Layer Security: Strict HTTPS / TLS 1.3 encryption with ECDSA certificates across all domains.
- Storage Encryption: AES-256 encryption at rest for database clusters and automated backup archives.
- Key Isolation: Environment keys and payment secrets are sandboxed in isolated secure key vaults.
Broker & API Feeds
To furnish live institutional market quotes, historical prices, and charting engines, we interface with vetted third-party data providers:
Interactive charts powered by TradingView or external financial APIs operate under their distinct privacy mandates. No personally identifiable member data is ever transmitted to financial exchanges.
Data Subject Rights (GDPR / CCPA)
In conformity with European General Data Protection Regulations (GDPR) and California Consumer Privacy Act (CCPA), you retain full sovereign control over your records:
Access & Extraction
Request a comprehensive structured machine-readable export of all records associated with your account.
Correction & Rectification
Update, correct, or refine inaccurate personal identity credentials directly via your member settings.
Right to Erasure (Purge)
Demand permanent, irreversible elimination of your profile, watchlist logs, and account identity from all active databases.
Restriction of Processing
Request temporary restriction of your analytics metrics processing under specific regulatory conditions.
Security & Data Protection Officer
To exercise your data protection privileges or request clarification regarding our quantitative data architecture, dispatch an inquiry directly to our security division: