Privacy Policy

1. Introduction

projectoption, LLC ("Company," "we," "us," or "our"), a Delaware limited liability company, operates the projectoption website and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide

Account Information: When you create an account, we collect your email address and password.

Portfolio Data: When you use premium features like the Position Modeler, we store the hypothetical portfolio positions you create. This data represents theoretical modeling scenarios and may not reflect your actual brokerage positions.

Communications: If you contact us directly, we may receive additional information about you such as the contents of the message, any attachments, and any other information you choose to provide.

Feedback and Surveys: Additional personal data may be collected through customer support interactions, feedback you provide, and responses to surveys or questionnaires.

2.2 Information Collected Automatically

We automatically collect certain information when you visit, use, or navigate the Service:

Server Log Data: Our servers automatically record information when you access the Service, including IP address, browser type and version, operating system, platform type, device type, Internet service provider, referring/exit pages, date and time stamps, and pages visited.

Usage Information: We collect information about your activity on the Service, including actions you take (such as logging in, logging out, features you use, tools you access), time and date of access, and other similar usage information. We use this information to provide, improve, and maintain our services.

Analytics Data: We use Plausible Analytics, a privacy-focused analytics service, to collect aggregate usage information. Plausible does not use cookies, does not collect personal data, and does not track individual users across sites. All data collected by Plausible is aggregated and cannot be used to identify you personally. For more information, visit: https://plausible.io/privacy-focused-web-analytics

2.3 Information We Do Not Collect

We do not collect or store payment card information. All payment processing is handled by Stripe, and payment details are stored securely by Stripe in accordance with their privacy policy and PCI compliance standards.

We do not connect to or access your brokerage accounts. All portfolio data in projectoption represents hypothetical positions you manually create for modeling purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your account registration and manage your subscription
• Store and display your hypothetical portfolio positions
• Communicate with you about updates, security alerts, and support matters
• Send you promotional communications (with your consent or as permitted by law)
• Monitor and analyze aggregate usage patterns to improve the Service
• Detect, prevent, and address technical issues or security breaches
• Train and improve our services and quality control
• Comply with legal obligations

4. Promotional Communications

We may use your email address to send you updates about our products and services, including new features, educational content, exclusive offers, or promotions.

We will always treat your personal information with the utmost respect. We do not sell or share your personal information with other organizations for their marketing purposes.

You have the right to opt out of receiving promotional communications at any time by:

• Contacting us at business@projectoption.com
• Updating your preferences in your account settings
• Using the "unsubscribe" link included in our emails

Opting out of promotional communications will not affect transactional emails related to your account, such as password resets, subscription confirmations, or security alerts.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for collecting and using your personal information depends on the specific information and context:

• Contract Performance: Processing necessary to provide you with the Service you have requested
• Legitimate Interests: Processing necessary for our legitimate interests (such as improving the Service, fraud prevention, and sending promotional communications), where those interests are not overridden by your rights
• Consent: Where you have given us consent to process your information for specific purposes

6. Third-Party Services

We routinely share personal information with service providers we use to help deliver our services to you. We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect your personal information. We also impose contractual obligations on service providers to ensure they can only use your personal information to provide services to us and to you.

6.1 Stripe (Payment Processing)

We use Stripe to process subscription payments. When you subscribe to premium features, you provide payment information directly to Stripe through their Customer Portal. Stripe's use of your information is governed by their privacy policy: https://stripe.com/privacy

6.2 Cloud Infrastructure Services

We use third-party cloud service providers to host and manage our database infrastructure and authentication services. Your account information and portfolio data are stored securely using industry-standard cloud infrastructure with appropriate security measures.

6.3 Plausible Analytics

We use Plausible Analytics for privacy-friendly website analytics. Plausible does not use cookies, does not collect personal data, and is fully compliant with GDPR, CCPA, and PECR. Plausible's privacy policy: https://plausible.io/privacy

6.4 Massive (Market Data)

Market data displayed in the Service is provided by Massive (formerly Polygon.io). We share technical request data with Massive to retrieve market information, but we do not share your personal information with them.

6.5 Other Disclosures

We may also share personal information with external auditors, law enforcement agencies, and regulatory bodies to comply with our legal and regulatory obligations.

7. Business Transfers

If projectoption, LLC is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information. We will typically anonymize information where possible, but this may not always be feasible. Any recipient of the information will be bound by confidentiality obligations.

8. Cookies

We use only essential cookies that are strictly necessary for the Service to function properly. These cookies are used for session management and authentication purposes. We do not use any tracking cookies or advertising cookies.

Our analytics provider, Plausible, does not use cookies and does not track users across websites.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Thereafter, we will keep your personal information for as long as is necessary to:

• Respond to any questions, complaints, or claims made by you or on your behalf
• Show that we treated you fairly
• Keep records required by law
• Resolve disputes and enforce our agreements

If you request deletion of your account, we will delete your account information and portfolio data within 30 days, except for information we are required to retain for legal, accounting, or security purposes. When it is no longer necessary to retain your personal information, we will delete or anonymize it.

10. Data Security

We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorized way. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

11. Your Rights

11.1 General Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to: access the personal information we hold about you; request correction of inaccurate information; request deletion of your information; object to or restrict certain processing; and request portability of your information.

To exercise any of these rights, please contact us at business@projectoption.com. We will respond to your request within 30 days.

11.2 Rights for EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including: the right to withdraw consent at any time; the right to lodge a complaint with a supervisory authority; and the right to be informed about automated decision-making (note: we do not use automated decision-making that produces legal effects).

11.3 Rights for California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected the information, the purposes for collecting the information, and the categories of third parties with whom we share the information.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• No Sale of Personal Information: We do not sell your personal information as defined under the CCPA.

Please note that you may only make a CCPA-related data access or data portability disclosure request twice within a 12-month period.

11.4 Verification of Requests

To protect your privacy and security, we may verify your identity before responding to your request by asking you to provide information that matches information we have on file about you. If you designate an authorized agent to exercise these rights on your behalf, we will additionally require verification that the person is authorized to act on your behalf.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have data protection laws that are different from your country.

If you are located in the EEA or UK and your data is transferred outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

13. Children's Privacy

Our Service is not directed to children under the age of 13, and we do not knowingly collect or solicit personal information from children under 13. In the event we learn that we have inadvertently collected personal information from a child under 13, we will take reasonable steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us at business@projectoption.com.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We may additionally provide notice through the Service or by email that the policy has been updated. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the new Privacy Policy.

15. Contact Information

If you have any questions about this Privacy Policy or our data practices, or wish to exercise any of your rights as described in this Privacy Policy, please contact us at:

For GDPR-related inquiries, you may also contact your local data protection authority.