Privacy Policy

Optvana ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Password (stored in hashed form — we never store plain-text passwords)
• Account preferences and settings

Brokerage Connection Data

When you connect a brokerage account (e.g., Charles Schwab, Alpaca), we access and store:

• Account identifiers and balances
• Open and closed positions
• Trade history and transaction records
• Order history
• OAuth tokens for API access (encrypted at rest)

We access this data solely through official brokerage APIs. We do not store your brokerage login credentials.

Usage Data

We automatically collect certain information when you use the Service:

• Pages visited and features used
• Tickers searched and watchlists created
• Browser type, device type, and operating system
• IP address and approximate geographic location
• Date and time of access

2. How We Use Your Information

We use collected information to:

• Provide the Service — display your positions, generate analytics, sync brokerage data, and power all platform features.
• Improve the product — understand usage patterns to prioritize features, fix bugs, and optimize performance.
• Communicate with you — send service-related notifications, respond to support requests, and provide account updates.
• Ensure security — detect and prevent unauthorized access, fraud, or abuse of the platform.

3. What We Do NOT Do

Specifically, we do not:

• Sell, rent, or trade your personal information to data brokers, advertisers, or any third party.
• Share your trading data, positions, or portfolio information with other users or external parties.
• Use your brokerage data for any purpose other than providing the Service to you.
• Provide your data to third parties for their marketing purposes.
• Engage in payment for order flow or share trading activity with market makers.

4. When We Share Information

We share your information only in the following limited circumstances:

• Brokerage APIs: To sync your account data, we communicate with your connected brokerage's API using your authorized credentials. This is strictly necessary to provide the Service.
• Legal requirements: If required by law, regulation, legal process, or governmental request.
• Safety: To protect the rights, property, or safety of Optvana, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with continued protection of your data under equivalent terms.

5. Data Security

We implement industry-standard security measures to protect your information:

• All data is transmitted over HTTPS/TLS encryption.
• Passwords are hashed using bcrypt with appropriate cost factors.
• Brokerage OAuth tokens are encrypted at rest.
• Access to production systems is restricted and logged.
• Regular security reviews and updates are performed.

While we take reasonable measures to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication: Session cookies to keep you logged in.
• Preferences: Remembering your display settings and preferences.
• Analytics: Understanding how the platform is used to improve the product.

We do not use advertising cookies or tracking pixels from third-party ad networks. You can configure your browser to reject cookies, but this may affect your ability to use the Service.

7. Third-Party Services

The Service integrates with third-party services that have their own privacy policies:

• Charles Schwab: Brokerage data sync via Schwab's official API. Subject to Schwab's privacy policy.
• Alpaca: Brokerage data sync via Alpaca's official API. Subject to Alpaca's privacy policy.
• Market data providers: Real-time and historical market data. No personal information is shared with these providers.

We recommend reviewing the privacy policies of any third-party services you connect to through Optvana.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account:

• Your profile information will be deleted within 30 days.
• Brokerage tokens will be immediately revoked and deleted.
• Usage logs may be retained in anonymized form for analytics purposes.
• We may retain certain data as required by law or for legitimate business purposes (e.g., fraud prevention).

9. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and associated data.
• Export: Request a machine-readable export of your data.
• Disconnect: Revoke brokerage connections at any time through your account settings.

To exercise any of these rights, contact us at support@optvana.com. We will respond to your request within 30 days.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or through the platform. The "Effective date" at the top of this page indicates when the policy was last updated. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: support@optvana.com
• Contact form: /contact