Privacy Policy

OptionsEdge ("we", "our", or "us") is an options trading journal. This policy explains, in plain language, what data we collect, why we collect it, which service providers touch it, and what rights you have over it.

OptionsEdge is operated by its founder. For anything in this policy, contact support@optionsedge.co. For the rules of using the service itself, see our Terms of Service. OptionsEdge is analytics software, not financial advice.

Account Information

When you create an account, we collect your email address and authentication credentials. If you sign in with Google, Google sends us your name, email address, and profile picture. We never see your Google password.

Trading Data You Upload

When you import broker CSV files, we store the trade history they contain: dates, symbols, quantities, prices, fees, and account identifiers from your broker statement. We use this data solely to provide the journal and analytics features to you. We never connect to your brokerage account and never hold trading credentials.

Payment Information

Paid subscriptions are processed by Stripe. Checkout happens on Stripe's hosted pages, so your card number goes directly to Stripe and never touches our servers. We store only your Stripe customer and subscription identifiers, your plan, and your subscription status.

Email and Marketing Attribution

If you request a free resource (such as the Strategy Scorecard or a strategy analysis report), we collect your email address and, where present, marketing attribution: UTM parameters, ad click identifiers (gclid, fbclid), the referring page, and the page you landed on. We use this to know which of our marketing actually works. It is never sold or shared for advertising.

Content You Write in the App

We store content you author while using the product: position notes, tags, and trade theses, playbook and setup descriptions, custom import template mappings, the broker name you enter on the waitlist form, and posts and votes on the feedback board. Feedback board posts and votes are visible to other signed-in users by design; everything else is private to your account.

Usage Analytics

We use PostHog to understand how the product is used: pages visited, features used, and errors encountered. See the Cookies and Tracking section below.

IP Addresses

Your IP address is processed transiently for security: rate limiting on public endpoints (held briefly in server memory, not stored in our database), bot protection via Cloudflare Turnstile on our email capture forms, and standard hosting logs at Vercel.

• To provide and maintain the service
• To analyze your trading performance and generate insights
• To communicate with you about your account or service updates
• To send marketing email you signed up for (see below)
• To measure which marketing channels bring in users
• To detect and prevent fraud, abuse, and automated spam

When you request a free resource, we send it to you and then a short educational email sequence about options trading and OptionsEdge. Every marketing email includes an unsubscribe link (plus one-click unsubscribe support where your email client offers it); the visible link leads to a confirmation page. Unsubscribing stops all our marketing emails to that address. We do not add paying customers or app users to marketing lists without a signup.

The resource delivery and the marketing sequence are sent through Resend. Account emails, such as signup confirmation and password reset, are sent through our authentication provider, Supabase Auth.

We share data with the following providers, each for a specific purpose:

• Supabase: database hosting and authentication
• Google: optional OAuth sign-in
• Stripe: payment processing and subscription billing
• Resend: email delivery (transactional and marketing)
• PostHog: product analytics (hosted in PostHog's US region)
• Vercel: application hosting and server logs
• Cloudflare Turnstile: bot protection on our email capture forms (scorecard, analyzer report, broker waitlist)

These providers may process data in the United States. Each has its own privacy policy and security measures. We share only the minimum data each needs to do its job, and we do not sell your data to anyone.

A few smaller external services: to price expired options, our servers query public market data sources (Yahoo Finance, FRED) with only ticker symbols and dates, never your identity. Some learn pages embed YouTube videos using YouTube's privacy-enhanced mode (youtube-nocookie.com), which does not set cookies until you play the video. Interface icons load from the Iconify CDN, which sees ordinary request metadata such as your IP address.

Your data is protected by:

• Encryption in transit (TLS/HTTPS) and at rest
• Row-level security ensuring your trading data is accessible only to you (the exception is the feedback board, where your posts and votes are visible to other signed-in users by design)
• Secure authentication via Supabase Auth
• Rate limiting and bot protection on public endpoints

We use essential cookies for authentication and session management (your Supabase sign-in session). These are required for the app to work.

PostHog analytics uses cookies and browser localStorage to distinguish visitors, remember the first page you landed on, and capture usage events and errors.

If you visit from the EU, the EEA, the UK or Switzerland, you will see a consent banner before any analytics runs. Analytics cookies and storage are only used after you choose Accept. If you choose Decline, we set only a small cookie that remembers your consent choice, alongside the essential login cookies described above.

We do not use advertising cookies and we do not sell or share your data with ad networks. You can block or clear analytics cookies and localStorage in your browser settings; the app will still work.

You can:

• Access: request a copy of the data we hold about you
• Export: download your trades and analytics from within the app at any time
• Correct: update or fix inaccurate information
• Delete: request deletion of your account and all associated data
• Unsubscribe: stop all our marketing emails via the link in any marketing email

To exercise these rights, email support@optionsedge.co from the address on your account so we can verify it is you.

We keep your data for as long as your account is active. When an account is deleted, your trading data, positions, imports, and settings are deleted with it; in rare administrative cases some records may require manual cleanup, which we perform as part of the deletion request.

If you subscribed to a free resource without creating an account, we retain your subscriber record (email address and signup metadata) until you ask us to delete it. Unsubscribing stops our emails immediately, but the record itself is kept, marked as opted out, so we do not email you again. Full deletion is available by emailing support@optionsedge.co.

Deletion requests are handled manually: we verify the request, delete your records from our database, and remove your data from our processors (analytics, email). We complete this within 30 days of verifying the request, except where we must retain records for legal, tax, or billing compliance (for example, Stripe payment records).

For users in the EU, UK, and similar jurisdictions, here is why we process each kind of data, in plain terms:

• Contract: account, trading data, and billing exist to deliver the service you signed up for
• Marketing email: sent because you requested the resource; each email lets you opt out, and we honor opt-outs immediately
• Legitimate interest: security, fraud prevention, and product analytics

The data controller is OptionsEdge, operated by its founder, reachable at support@optionsedge.co. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

For California residents: we do not sell personal information, and we do not share it for advertising. Email us and we will honor your access and deletion requests as described above.

We may update this privacy policy from time to time. We will post the new policy on this page and update the "Last updated" date. For material changes we will make reasonable efforts to notify active users.

Questions about this policy or our data practices:

support@optionsedge.co