Privacy Notice

This draft describes OptionLab's actual data handling as of Phase 9. It is not final legal text and has not been reviewed by counsel. It must not be treated as binding until the product owner explicitly approves a final version, per LAUNCH_CHECKLIST.md section 11.

What we collect

At sign-up: name, email address, and password (never stored in plain text — handled entirely by Neon Auth). While using the product: the strategies, scenarios, watchlists, and manual quotes you create. We do not collect brokerage credentials, bank details, or any payment information, because none of those are needed by anything the product does.

What we don't do

There is no third-party analytics, advertising, or tracking script on this site — none is currently integrated anywhere in the codebase. We do not sell or share your data with third parties.

Cookies

A single session cookie, issued by Neon Auth, keeps you signed in. It is not used for tracking or advertising.

Who can see your data

Only you. Every strategy, scenario, and watchlist is scoped to your account by database-enforced row-level security (RLS) — this is verified by automated cross-user isolation tests on every change to the codebase, not just asserted in this document. Server-side administrative actions (such as role changes) are logged to an append-only audit table that customers cannot read or write.

Retention and deletion

Your data is retained for as long as your account exists. Deleting your account removes your profile, strategies, scenarios, and watchlists (this cascades automatically at the database level). Self-service account deletion and data export are not yet built — until they are, request either one by contacting the product owner directly. This is a known gap tracked for resolution before public launch (LAUNCH_CHECKLIST.md section 11).

Changes

This document will be replaced with reviewed, final terms before any public launch.