This policy explains what ThetaIQ ("we", "us") collects when you use thetaiq.net and the ThetaIQ app (thetaiq.net), why, and the control you have. Questions: jay@thetaiq.net.
1. What we collect
- Account information — email address, name, and a hashed password (or your Google sign-in identity). Optional profile details like a community display name and social profile links you choose to add.
- Billing information — handled by Stripe. We store your plan, subscription status, and billing name; we never see or store card numbers.
- Portfolio data you enter — trades, positions, wheels, spreads, watchlists, alerts, and notes you log in the app.
- Brokerage data (optional, via SnapTrade) — if you connect a broker, we receive read-only data from SnapTrade: your connected account list, positions, and option holdings. We never receive your brokerage username or password. OAuth access tokens are stored encrypted (AES-256-GCM) and used only to sync your positions into the app.
- Usage data — a session cookie to keep you signed in, and basic technical logs (browser, pages visited) used to operate and debug the Service.
- Ad campaign identifiers — if you arrive from one of our ads (for example, inside ChatGPT), we store the click's campaign parameters (utm_source/medium/campaign, campaign/ad IDs, and the ad platform's click reference) to measure whether the ad led to a signup or subscription. See section 8.
2. How we use it
- Provide the Service: tracking, analytics, screeners, broker sync, alerts.
- Operate community features — only if you opt in (see section 4).
- Send service emails (receipts, security, product updates you opt into).
- Provide support, prevent abuse, and comply with law.
3. Who we share it with
We do not sell your personal data. We share it only with the providers needed to run the Service: SnapTrade (broker connections, when you initiate one), Stripe (payments), our hosting/database providers, and email delivery services — each under their own privacy terms — plus law enforcement where legally required.
4. Community visibility
Community features are opt-in. If you join, other signed-in members can see your chosen display name (or account name), trading statistics, posts, and any social profile links you add in Settings. You can change your display name, edit social links, or leave community sharing at any time. Never share information you aren't comfortable making visible to other members.
5. Retention and deletion
We keep your data while your account is active. You can reset your tracked data or delete your account entirely from Settings — deletion removes your positions, posts, connections, and profile from active systems, and residual copies age out of backups within about 30 days. We may keep minimal records where required (e.g., billing history for tax purposes).
6. Security
Passwords are hashed, traffic is encrypted in transit (TLS), and broker access tokens are encrypted at rest. Broker connections are read-only by design. No system is perfectly secure; if we ever learn of a breach affecting your data, we'll notify you.
7. Your choices and rights
- Access, correct, or delete your data from Settings at any time.
- Disconnect your broker from Settings → Broker sync, from SnapTrade, or at your brokerage — revocation takes effect immediately.
- Opt out of non-essential emails via the unsubscribe link; service and security emails still apply.
- Email us for anything else: jay@thetaiq.net.
8. Advertising measurement
We advertise the Service and measure whether those ads work. When you arrive from an ad, our sites run the ad platform's measurement pixel (currently OpenAI's Ads Measurement Pixel), which reports page activity and conversion events — such as account registration, checkout start, or subscription creation — back to the platform so we can attribute them to the ad you clicked. Subscription confirmations are reported server-to-server after our payment provider verifies them.
- What we send — campaign identifiers (UTM parameters, ad/campaign IDs, the platform's click reference), the event that occurred, and, for a paid subscription, the plan name and price. If you are signed in, the pixel may match events using a SHA-256-hashed email or account ID — the hashed value only, never the raw one.
- What we never send — your trades, positions, portfolio balances, watchlists, brokerage connections, or any other financial data you store in ThetaIQ. Advertising partners receive attribution and conversion data only.
9. Children
The Service is for users 18 and older. We don't knowingly collect data from minors.
10. Changes to this policy
We'll post updates here and revise the date above. Material changes will be flagged in the app before they take effect.
ThetaIQ