Privacy Policy
Version 2026-06-05
This policy explains what we collect, why, who we share it with, and the choices you have. In short: we collect what we need to run the service, we never sell your data, and we never connect to or trade in your brokerage account.
1. Who We Are and Scope
This Privacy Policy explains how ReTrader (“ReTrader,” “we,” “us”) collects, uses, shares, and protects information in connection with the ReTrader website and software service. It applies to visitors to our marketing site, people who join our waitlist, and registered users of the application.
2. Information You Provide
Account information: your email address, first name, ZIP code (used to set your time zone for reminders), and a password (stored only as a salted hash by our authentication provider — we never see your plaintext password). Waitlist information: if you join the waitlist, your first name, last name, and email. Trading and portfolio data you enter: your Net Liquidation Value snapshots, deposits/withdrawals, ETF allocations, positions and trades (tickers, strikes, expirations, contracts, premiums, fees, status), and related notes. Preferences: notification cadence, basket and tolerance settings, theme, and similar configuration. We do not collect brokerage credentials, and we never connect to or transact in your brokerage account.
3. Information Collected Automatically
When you use the service we collect limited technical data: IP address, browser/user-agent, device and session information, and basic usage and diagnostic logs. At signup we record your acceptance of our legal documents together with the timestamp, IP address, and user-agent for audit purposes. We use essential cookies to keep you signed in and store non-identifying preferences (such as theme) in your browser's local storage. We do not use advertising or cross-site tracking cookies.
4. How We Use Your Information
We use your information to: provide and operate the service, including generating rules-based recommendations and analytics from the data you enter; send the emails and (if you opt in) text messages you request, such as digests, drift alerts, stress alerts, and reminders; authenticate you and keep your account secure; respond to support requests; maintain audit and security logs; and comply with legal obligations. We do not sell your personal information, and we do not use your trading data to make trades or for advertising. If you opt in to SMS, message frequency varies with your account activity; message and data rates may apply; reply STOP to unsubscribe or HELP for help. The mobile information we collect for SMS (your phone number and your opt-in) is used solely to deliver those alerts and is never shared with third parties or affiliates for their marketing purposes.
5. How We Share Information; Service Providers
We share information only with vendors that help us run the service, under agreements that limit their use of it: Supabase (database, authentication, and storage of your account and trading data); Vercel (application hosting); Fly.io (the background worker that runs scheduled jobs); Resend (delivery of transactional and digest emails — receives your email address and message content); and, where applicable, Twilio (SMS delivery, if you opt in — receives your phone number), Stripe (payment processing, if you subscribe — Stripe handles your card data directly; we store only your subscription status, never card numbers), and an error-monitoring provider (limited diagnostic data). We may also disclose information if required by law or to protect our rights, users, or the public.
6. Market Data
To produce quotes, option chains, and volatility metrics, we request data from a third-party market-data provider using only ticker symbols and date ranges. We do not transmit your identity, account, or personal information to the market-data provider.
7. Data Retention
We retain your account and trading data for as long as your account is active so the service — including your performance history — works as intended. Note that turning off trading for a ticker does not delete its history. When you close your account or request deletion, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax, accounting, or security obligations.
8. Security
We protect your information using industry-standard measures, including encryption in transit (TLS), hashed password storage handled by our authentication provider, and database row-level security that isolates each user's data so you can only access your own records. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
9. Your Rights and Choices
You have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can exercise the most common rights directly from the Settings page in your account: change your name, change your email, change your password, download a CSV export of every trade you have logged, and permanently delete your account and all data keyed to it. You can also opt out of non-essential communications at any time by adjusting your notification preferences. For any right you cannot complete from within the application, contact us using the email below. We will verify your identity before acting on a request, and we will not discriminate against you for exercising these rights.
10. State Privacy Rights (California, Colorado, Connecticut, Utah, Virginia, and Others)
Residents of certain U.S. states have additional rights under state privacy laws including the California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Utah Consumer Privacy Act (UCPA), Virginia Consumer Data Protection Act (VCDPA), and similar laws in other states. These may include the right to know what personal information we collect, the right to access and obtain a copy, the right to correct inaccuracies, the right to request deletion, the right to opt out of the sale or sharing of personal information, and the right to limit the use of sensitive personal information. We do not sell or share personal information for cross-context behavioral advertising and do not use sensitive personal information for purposes that require an opt-out. You can exercise applicable rights as described in Section 9 above or by contacting us. If you authorize an agent to act on your behalf, we may require verification of the agent's authority and your identity.
11. Children
ReTrader is intended only for adults (18 years or older) and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn we have done so, we will delete it.
12. Data Location and Transfers
ReTrader is operated from the United States, and our service providers may process and store data in the United States and other locations. If you access the service from outside the United States, you understand that your information may be transferred to and processed in the United States, where data-protection laws may differ from those in your jurisdiction.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will revise the version indicator above and, for material changes, may require renewed acceptance or provide additional notice. Your continued use of the service after an update constitutes acceptance of the revised policy.
14. Contact
For privacy questions, to exercise your rights, or to designate an authorized agent, contact us at Greg@retrader.ai. We will respond within a reasonable time and as required by applicable law.
This Privacy Policy is provided for general informational purposes and is not legal advice.