Encrypted transport
The public website and hosted application use HTTPS to protect data in transit between supported browsers and the service.
Security
Practical controls, shared responsibility.
EVEQ uses layered application and infrastructure practices to protect the service. Customers must also secure their devices, accounts, and third-party credentials.
Last updated: July 23, 2026
How the hosted service is protected
Credential protection
Connection credentials are protected using application-level encryption and access controls rather than displayed as ordinary account data.
Account-scoped access
Application access is designed around authenticated accounts and account-scoped resources, with administrative controls for provisioning and restriction.
Operational records
Relevant service and account activity may be recorded to support security monitoring, troubleshooting, and investigation.
Security controls reduce risk but cannot eliminate it. This page does not claim a third-party certification or guarantee that an incident cannot occur.
Customer security responsibilities
- Use a unique, strong EVEQ password and protect the email account used for recovery.
- Secure every device and browser that can access the account.
- Do not share passwords, session links, one-time codes, API secrets, or private keys.
- Use a separate, restricted API credential for each supported third-party connection where possible.
- Grant only the permissions required for the feature and keep withdrawal permission disabled where supported.
- Review account activity and revoke a connection immediately when access is no longer needed or compromise is suspected.
- Test strategy and automation changes in a non-live environment before considering a live account.
Third-party providers
Connected brokers, exchanges, data vendors, AI providers, cloud services, email systems, and payment providers operate their own security programs and terms. Their controls, availability, and incidents are outside EVERPEAK INC’s direct control. Use each provider’s security settings and contact it directly for an urgent issue involving its account or assets.
Payments and support communications
Use only the checkout path presented by EVEQ. Do not email or message a full card number, bank password, seed phrase, private key, or trading API secret. EVERPEAK INC support will not ask a customer to transfer trading capital to activate support or recover an account.
Report a suspected security issue
Email Serve@npsayu.com with a concise description, affected page or account, approximate time, and reproducible steps if safe. Do not include secrets or exploit another user’s data.
If a connected third-party account may be at immediate risk, first use that provider’s controls to disable or revoke the connection. Then change affected credentials and notify EVEQ support.
Privacy and data requests
Our Privacy Notice describes the categories of information processed, purposes, disclosures, retention, and customer choices. Privacy and security questions may also be sent to the support contact above.