Security you can explain to a sceptical stacker
StaxQ is built on a zero-knowledge vault model. Your holdings are encrypted on your device with AES-256-GCM before anything reaches our database — we store ciphertext only.
Client-side encryption
Holdings, purchase history, and notes are encrypted in your browser before sync. Plaintext never touches StaxQ servers.
Recovery Key
After signup you receive a Recovery Key. It is required to restore encrypted data if you reset your password — store it somewhere safe offline.
Row Level Security
Row Level Security on our encrypted database ensures each account can only read and write its own rows. Auth tokens gate every API request.
What we never see
- Plaintext holdings or purchase history
- Your vault decryption key
- Your Recovery Key
What you control
- Password + Recovery Key storage
- Delete account & all data — permanent purge
- Display currency independent of purchase currency
- AI Vault Analyst on/off — your choice in Menu settings
Pro photos & local upload screening
Pro lets you attach one item photo and one purchase receipt or invoice per holding. Those files are encrypted in your vault on your device before sync — same zero-knowledge model as the rest of your ledger.
When upload screening is enabled, the app may run an automated check on your device before an image is saved. Rejected images never enter your vault. StaxQ does not decrypt your vault on our servers to review attachments.
Feedback screenshots are different: optional images on bug reports or contact forms are stored separately for support — not inside your encrypted vault — and may be viewed by StaxQ staff when triaging your ticket.
Help — privacy & attachmentsAI Vault Analyst (Pro)
In the app, Pro users can ask questions about their stack in plain English. Parsing runs on your device — never your holdings, weights, purchase prices, or stack totals. All answers are calculated inside your browser from your unlocked vault.
Ask about gains and losses, weight, stack value, sales, filters, price alerts, spot or stack moves over time (today, this week, past month), and product counts — e.g. “how much did silver spot go down today?” or “how many kangaroos do I have?”
No third-party AI: intent parsing uses StaxQ's own on-device rules and model — not OpenAI or other external providers. Chat text is not sent to our servers by default. You can turn the assistant off in Menu → Pro & trading; when disabled, no parsing runs.
Full Vault Analyst privacy detailsInfrastructure
StaxQ runs on enterprise-grade cloud infrastructure (managed PostgreSQL, authentication, and encrypted storage). Our hosting provider maintains SOC 2 Type II and ISO 27001 certifications. StaxQ adds client-side encryption so that even database access does not expose your ledger contents.