Privacy Policy

Introduction

Welcome to Optioneer.io ("we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

By using Optioneer, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use our service.

1. Information We Collect

1.1. Information You Provide

• Account Information: Email address, password (encrypted), and optional profile information (name, avatar)
• Portfolio Data: Options positions you manually enter (ticker symbols, strike prices, dates, quantities, entry/exit prices)
• Contact Information: Name and email when you contact us via our contact form
• Subscription Information: Web payments are processed by Stripe, iOS subscriptions by Apple, and Android subscriptions by Google Play. RevenueCat processes store subscription status for cross-platform access. We do not store complete card details.
• Broker Sync Authorization: If you choose Broker Sync, you authorize read-only access through SnapTrade's secure connection portal. Optioneer does not ask you to enter broker credentials in its own interface.

1.2. Information Automatically Collected

• Usage and Funnel Data: Pages visited, features used, trial and subscription funnel steps, and feedback you choose to submit. Optional public-site analytics are collected through Google Analytics and DataFast when analytics consent is enabled.
• Signup Attribution: Approximate device type, web or app signup surface, operating system, browser, app version and build, initial landing page, signup page, and selected billing plan. When analytics consent is enabled, this can also include the initial referrer and UTM campaign parameters.
• Device Information: Normalized browser and operating-system information. Optioneer does not use signup attribution to fingerprint you or make authorization decisions.
• Cookies: Essential cookies for authentication and optional analytics cookies (see Cookie Policy below)

1.3. Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your email, name, and profile picture from Google
• Market Data: We fetch publicly available options market data (prices, Greeks) from third-party APIs (this data is not personal information)
• Brokerage Data: When you authorize Broker Sync, we receive supported brokerage and account metadata, holdings, balances, connection status, and available activity data through SnapTrade.

2. How We Use Your Information

We use your information for the following purposes:

• Provide the Service: Track and analyze your options portfolio, calculate P&L, fetch market data, and synchronize authorized brokerage data
• Authentication: Secure login and session management via Supabase Auth
• Communication: Respond to your support requests or feedback via email
• Analytics: Understand how users interact with Optioneer to improve features and UX
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with legal obligations (e.g., GDPR, CCPA)

3. How We Share Your Information

We do not sell your personal information. We only share data with trusted third-party service providers:

Legal Disclosures: We may disclose your information if required by law (e.g., court order, subpoena) or to protect our rights and safety.

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Data encrypted in transit (HTTPS/TLS) and at rest (database encryption)
• Password Security: Passwords hashed using bcrypt (we never store plaintext passwords)
• Access Control: Strict authentication (JWT tokens) and authorization checks
• Regular Audits: Security monitoring via Sentry error tracking

However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Your Privacy Rights

Depending on your location, you may have the following rights:

GDPR Rights (EU/EEA)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your account and data
• Data Portability: Export your data in CSV format when export access is available — your data is yours
• Objection: Object to processing for direct marketing or analytics
• Withdrawal of Consent: Revoke consent for data processing at any time

CCPA Rights (California)

• Know: What personal information we collect and how we use it
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of the "sale" of personal information (we do not sell data)
• Non-Discrimination: We will not discriminate against you for exercising your rights

How to Exercise Your Rights: Email us at support@optioneer.io with your request. We will respond within 30 days.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account:

• Your account and portfolio data are permanently deleted within 30 days
• Some data may be retained for legal or security purposes (e.g., fraud prevention logs)
• Anonymized analytics data may be retained indefinitely
• Account-linked signup attribution and funnel records are retained with your account or as needed for legitimate business, billing, security, and reporting purposes
• Limited pseudonymous billing and transaction records may be retained where needed for tax, fraud prevention, dispute handling, subscription recovery, or legal compliance. Deleting Optioneer does not cancel an Apple or Google Play subscription.

7. Cookies Policy

We use the following types of cookies:

You can manage your cookie preferences at any time using the "Cookie Settings" link in the footer. Essential cookies are required for the service to function.

8. Children's Privacy

Optioneer is not intended for users under 18 years old. We do not knowingly collect data from children. If we discover that a child has provided personal information, we will delete it immediately.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your own (e.g., USA for hosting). We ensure that appropriate safeguards are in place (e.g., standard contractual clauses, GDPR compliance).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of Optioneer after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

• Email: support@optioneer.io
• Twitter/X: @InvestJourneyX