Privacy Policy

Account Information: Name, email address, and hashed password. If you register via a third-party provider, we receive only the profile information that provider shares (typically name and email).

Trading & Strategy Data: Strategy configurations, watchlists, alert rules, trade history, paper trades, backtest runs, journal entries, and agent configurations you create or generate within the Platform.

Broker API Credentials: If you connect a brokerage account (e.g., Alpaca), your API key and secret are stored using AES-256 encryption at rest. They are used solely to execute API calls on your behalf per your explicit instructions.

Payment Information: We use Stripe for payment processing. We store only your Stripe customer ID and subscription metadata. We never see, store, or process your full credit card number — Stripe handles all payment data.

Usage & Analytics Data: Pages visited, features used, button clicks, session duration, error events, and interaction patterns — collected to improve the Platform.

Device & Technical Data: IP address (anonymized after 30 days), browser type, operating system, device identifiers, and referral source — collected for security monitoring and analytics.

Communications: Emails and messages you send us via the contact form, support channels, or direct email are retained to provide support and improve service quality.

Referral Data: If you participate in our referral program, we store your referral code, referred users' emails (with their consent), and conversion status.

• Provide, operate, maintain, and improve the AutoOptions AI Platform
• Process subscription payments, send billing receipts and renewal notices
• Send service-related emails: trade alerts, strategy notifications, weekly reports (when enabled)
• Respond to your support inquiries and resolve technical issues
• Monitor for fraud, abuse, API key misuse, and security threats
• Analyze usage patterns to develop new features and optimize performance
• Comply with applicable laws, regulations, and legal process
• Enforce our Terms of Service

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

We do not use your strategy configurations, trade data, or broker credentials for our own proprietary trading.

We may use anonymized, aggregated, non-personally-identifiable data (e.g., "X% of users trade iron condors") for product research and marketing.

Stripe: Payment processing. Your card data is processed and stored exclusively by Stripe under PCI-DSS compliance. Governed by Stripe's Privacy Policy.

Alpaca Markets: If you connect a broker account, API calls are made to Alpaca's infrastructure using your credentials. Alpaca's own Privacy Policy governs their data handling. We only transmit the minimum data necessary to execute orders you authorize.

Polygon.io: Market data provider. Ticker symbol queries are sent to Polygon's API. No personally identifiable information (PII) is transmitted in these requests.

AI / LLM Providers: Market data, ticker symbols, and strategy parameters may be sent to AI model APIs (e.g., Google Gemini) to generate analysis. We do not send PII (name, email, account details) to these services. Prompts may include anonymized market context only.

Infrastructure Providers: We use cloud infrastructure providers for hosting and data storage. These providers are contractually bound to protect your data.

Legal Requirements: We may disclose your information to law enforcement, regulators, or courts when required by law, subpoena, or to protect our legal rights.

Business Transfers: If we are acquired, merge, or transfer assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

We retain your account and trading data for as long as your account is active or as needed to provide services.

Upon account deletion, we will delete your personal data within 30 days, except:

• Billing records retained for 7 years for tax and legal compliance
• Fraud or legal investigation records retained as required by law
• Anonymized, aggregated data with no PII may be retained indefinitely

Depending on your jurisdiction (including CCPA for California residents and GDPR for EU residents), you may have:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Correction: Request correction of inaccurate personal data
• Right to Deletion: Request deletion of your account and associated personal data (subject to legal retention requirements)
• Right to Data Portability: Request an export of your data in JSON or CSV format
• Right to Opt-Out: Opt out of marketing emails at any time via the unsubscribe link or Settings → Notifications
• Right to Restrict Processing: Request we limit processing of your data in certain circumstances
• Right to Object: Object to processing based on legitimate interests

To exercise any right: email privacy@freedomempoweringcapital.com. We will respond within 30 days. We may require identity verification before fulfilling requests.

We implement industry-standard technical and organizational security measures, including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for sensitive data at rest (broker credentials, API keys)
• Bcrypt hashing for passwords
• Role-based access controls limiting employee data access
• Regular security reviews and vulnerability assessments

No system is 100% secure. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.

You are responsible for keeping your account credentials confidential. Do not share your password or broker API keys with anyone.

We use cookies and similar technologies for:

• Essential/Authentication: Required to keep you logged in and maintain session state. Cannot be disabled without breaking core functionality.
• Preference Cookies: Store your theme, display settings, and UI preferences.
• Analytics Cookies: Help us understand usage patterns. Anonymized where possible.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent login.

AutoOptions AI is intended for users 18 years of age and older. We do not knowingly collect personal information from minors. If we discover we have inadvertently collected data from someone under 18, we will delete it promptly. If you believe a minor has provided us with personal information, contact privacy@freedomempoweringcapital.com.

California residents have specific rights under the California Consumer Privacy Act (CCPA). In the past 12 months, we have not sold personal information to third parties. You have the right to:

• Know what categories of personal information we collect and how it is used
• Request deletion of your personal information
• Opt-out of the "sale" of personal information (we do not sell, but you may opt-out of targeted advertising if applicable)
• Non-discrimination for exercising your privacy rights

The Platform is operated from the United States. If you access it from outside the U.S., your data will be transferred to and processed in the U.S. By using the Platform, you consent to this transfer. We rely on Standard Contractual Clauses or other appropriate transfer mechanisms for EEA/UK data transfers.

We may update this Privacy Policy periodically. Material changes will be communicated via email and a prominent in-app notice before taking effect. The "Last updated" date at the top of this page will be revised. Continued use after changes take effect constitutes acceptance.