Overview
This Privacy Policy explains how OptiTraders (“we,” “us,” or “our”) collects, uses, and shares information about you when you access our analytics dashboards, automation workflows, APIs, and related services (collectively, the “Services”). We comply with the California Consumer Privacy Act (CCPA), the EU and UK General Data Protection Regulation (GDPR), and other applicable privacy laws.
We only process personal data where we have a lawful basis, such as consent, contractual necessity, or legitimate interest supported by documented assessments. We never sell personal data. You may opt out of data sharing by submitting a request via the Privacy Request Center or by visiting our Do Not Sell page.
Data We Collect
We collect the minimum amount of data necessary to operate the Services safely and effectively:
- Account data including name, email, password hash (never the plain password), and time zone.
- Brokerage connections such as brokerage provider, encrypted access tokens, and account identifiers. We rely on the open-source robin_stocks toolkit to facilitate Robinhood access; this integration is not endorsed by Robinhood Markets, Inc. and may be withdrawn or limited at any time. We do not store your brokerage credentials after establishing secure tokenized access.
- Usage signals covering event logs, feature adoption metrics, predicted trade outcomes, and device characteristics collected with your consent.
- Communications including support requests, product feedback, and community interactions.
How We Use Personal Data
We process personal data to:
- Authenticate accounts and keep your workspace secure.
- Deliver dashboards, automation, and notifications tailored to your settings.
- Provide customer support, training, and compliance notifications.
- Monitor platform performance, detect fraud, and improve product reliability.
- Conduct data science that powers risk scoring and trade simulations, using anonymized or aggregated data whenever possible.
We do not use personal data for automated decision making that produces legal or similarly significant effects without appropriate human oversight.
Sharing and Disclosure
We share personal data with trusted subprocessors under strict contracts aligned with SOC 2 Type II controls. Categories include:
- Secure infrastructure hosting and monitoring providers.
- Customer support tools used by authorized OptiTraders team members.
- Analytics platforms configured with IP masking and preference enforcement.
- Payment processors for billing and fraud prevention, when applicable.
We may disclose information when required by law, to protect the rights and safety of our users, or in connection with a merger or acquisition (with prior notice where legally permitted).
Data Retention
We retain personal data only for as long as necessary to meet the purposes outlined in this policy or to comply with legal obligations. Standard retention periods include:
- Account information: retained until you close your account.
- Brokerage data: deleted within 30 days of revoking access.
- Feature usage analytics: retained up to 12 months, aggregated thereafter.
- Support conversations: retained for 24 months to help resolve ongoing issues.
International Transfers
We store data in the United States. When transferring personal data out of the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses and conduct transfer impact assessments. We maintain SOC 2 aligned security controls, including encryption in transit and at rest, least-privilege access reviews, and continuous monitoring.
Your Privacy Rights
Depending on your location, you may have the right to access, correct, delete, restrict, port, or object to the processing of your personal data. You may also withdraw consent at any time where consent is the legal basis for processing. Submit a request via our privacy portal or email rahul@optitraders.com. Residents of California can opt out of data sharing for cross-context behavioral advertising by visiting the Do Not Sell page.
Children's Privacy
The Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us so we can delete it promptly.
Changes to This Policy
We will update this Privacy Policy when necessary to reflect changes in technology, regulation, or our Services. If we make material changes, we will notify you via email or in-product alerts at least 30 days before the new terms take effect.
Contact Us
Questions or concerns about this Privacy Policy? Contact our Privacy Office at rahul@optitraders.com