Security you can explain to a sceptical stacker
StaxQ is built on a zero-knowledge vault model. Your holdings are encrypted on your device with AES-256-GCM before anything reaches our database — we store ciphertext only.
Client-side encryption
Holdings, purchase history, and notes are encrypted in your browser before sync. Plaintext never touches StaxQ servers.
Recovery Key
After signup you receive a Recovery Key. It is required to restore encrypted data if you reset your password — store it somewhere safe offline.
Row Level Security
Row Level Security on our encrypted database ensures each account can only read and write its own rows. Auth tokens gate every API request.
What we never see
- Plaintext holdings or purchase history
- Your vault decryption key
- Your Recovery Key
What you control
- Password + Recovery Key storage
- Delete account & all data — permanent purge
- Display currency independent of purchase currency
- AI Vault Analyst on/off — your choice in Menu settings
AI Vault Analyst (Pro)
In the app, Pro users can ask questions about their stack in plain English. Parsing runs on your device — never your holdings, weights, purchase prices, or stack totals. All answers are calculated inside your browser from your unlocked vault.
Ask about gains and losses, weight, stack value, sales, filters, price alerts, spot or stack moves over time (today, this week, past month), and product counts — e.g. “how much did silver spot go down today?” or “how many kangaroos do I have?”
No third-party AI: intent parsing uses StaxQ's own on-device rules and model — not OpenAI or other external providers. Chat text is not sent to our servers by default. You can turn the assistant off in Menu → Pro & trading; when disabled, no parsing runs.
Full Vault Analyst privacy detailsInfrastructure
StaxQ runs on enterprise-grade cloud infrastructure (managed PostgreSQL, authentication, and encrypted storage). Our hosting provider maintains SOC 2 Type II and ISO 27001 certifications. StaxQ adds client-side encryption so that even database access does not expose your ledger contents.