Privacy Policy

• Account details: your name and email address.
• Authentication: if you sign in with Google, we receive your basic Google profile (name, email, profile picture) via our authentication provider. If you register with email/password, your password is stored only as a secure one-way hash (bcrypt) — we never store it in plain text.
• Content you create: watchlists, saved strategy analyses, roll and scanner analyses, portfolio positions you enter or import, and messages you submit through the contact form.
• Brokerage connections (optional): if you connect a brokerage (e.g., Tastytrade, Schwab, Public) or import a CSV, we process the position/account data required for the feature. Access tokens are stored encrypted.

• Session data: a session token (stored in a cookie and in our database) to keep you signed in.
• Operational logs and basic request telemetry (including AI request telemetry) used to run, secure and debug the service.
• Approximate IP address and user-agent when you submit the contact form, used for spam prevention and abuse protection.
• Local storage in your browser (e.g., your acknowledgement of the legal disclaimer).

• To create and maintain your account and keep you signed in.
• To provide the analysis, scanner, portfolio and AI-assisted research features you request.
• To process subscriptions, trials, renewals and billing through our payment processor.
• To operate, secure, troubleshoot and improve the platform.
• To respond to contact-form messages you send us.

To operate the platform we transmit certain information to the following categories of providers. We share only what is necessary for each function:

• Authentication provider — to verify Google sign-in sessions.
• Payment processor (Stripe) — to create customers, process subscription payments, trials and renewals, and manage the billing portal. Card details are handled by Stripe, not stored on our servers.
• AI providers (e.g., OpenAI, Anthropic, Google) — the inputs required to generate analysis (such as the tickers, positions or questions involved in a request) are sent to the selected AI provider to produce a response.
• Market-data sources — used to retrieve quotes, options and related market information.
• Brokerages you choose to connect — only when you initiate and authorize a connection or import.
• Infrastructure/hosting providers — to host and run the application.

We use reasonable technical measures appropriate to the service, including hashed passwords (bcrypt), encrypted storage of brokerage access tokens, and session-based authentication. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We do not claim end-to-end encryption of all data.

The following reflects the platform’s current, verified capabilities:

• Account & content: retained while your account is active.
• Brokerage connections: you can disconnect a connected brokerage at any time. Disconnecting deletes the stored access tokens for that brokerage from our database (verified for the supported brokerage integrations).
• Subscriptions: you can cancel at any time via the Stripe billing portal. Billing and transaction records are retained as needed for accounting, tax and legal-compliance purposes.
• AI requests: content you submit for AI analysis is transmitted to third-party AI providers; retention of that data is governed by those providers’ own policies and is not controlled by us.

• You can update your profile information from your account.
• You can cancel your subscription at any time through the Stripe billing portal.
• You can disconnect a brokerage integration you previously connected.
• You can request access to or deletion of your personal data by contacting us through the contact form.

Depending on where you live, you may have additional rights under applicable privacy laws. To exercise any such rights, contact us through the contact form.

We use a session cookie to keep you authenticated and browser local storage for preferences such as your disclaimer acknowledgement. We do not use third-party advertising cookies.

The platform is intended for adults and is not directed to children. We do not knowingly collect personal information from children.

If you access the platform from outside the provider’s hosting region, your information may be processed in other jurisdictions, where data-protection laws may differ from those in your home jurisdiction.

We may update this Policy from time to time. Material changes will be reflected by updating the “Last Updated” date above.

Questions or privacy requests? Use our contact form. This service is operated by Option Wizard. Our mailing address is: