Option Anatomy
P&L AttributionWhy your options P&L movedPosition ModelerBuild and stress a structure firstTrade JournalEvery closed trade, gradedRisk DashboardNet greeks, VaR and hedge bandsIV ChartsWhat volatility did to your bookOptimizerRank structures against your viewBroker connectionsWho we connect to, and how
Pricing
BlogAttribution, decay, volatilityStrategy glossary58 options structures explainedHelp CenterSetup and how-to guidesTutorialsWatch the app in actionFAQShort answers to common questions
AboutContact
Log in / Sign up
Legal

Privacy Policy

Last updated: October 15, 2026

1. Overview

This Privacy Policy explains how Convexity Group, operator of Option Anatomy, collects, uses, shares, retains, and protects personal information. It covers our website and app. The Terms of Service govern use of the Service. This notice does not replace a separate consent where one is required by law.

2. Privacy contact

For privacy questions, access or deletion requests, or a concern about our handling of information, contact the person responsible for privacy at Convexity Group: [email protected]. We may need to verify your identity before acting on an account request.

3. Information we collect

  • Account and security information: email address, a hashed password if you use password sign-in, Google sign-in identifiers and account information if you choose Google, verification and two-factor authentication records, trusted-device information, login activity, and security logs. We record the version and time of legal acceptance together with the request IP address and browser user-agent.
  • Brokerage information: authorized account identifiers, institutions, positions, quantities, costs, fills and transaction history, and balances where supplied by your connection. Brokerage passwords are handled by your broker or connection provider. We store the connection tokens and identifiers needed for authorized access; sensitive secrets are encrypted at rest.
  • Analytics and content: position snapshots, calculated values and history, paper-trade fills, journal notes and tags, saved templates and scenarios, preferences such as timezone and paper commissions, and alert rules.
  • Billing information: Stripe customer and subscription identifiers, subscription status, billing period, and payment-related metadata needed to manage your subscription. Stripe collects and processes payment details; we do not store full payment-card numbers.
  • Referral information: if you arrive through a partner's referral link or enter a referral code at signup, the partner's code, whether it came from a link or a typed code, and when the link was first used. For a referred account we also record the subscription payments, refunds and disputes needed to calculate the partner's commission, and we keep that record after the account is deleted for as long as it is needed for partner payments and accounting.
  • Communications and optional integrations: support messages, email delivery information, and a Telegram chat identifier and linkage information if you connect Telegram. Alert messages can include instrument, position, and risk information relevant to your rule.
  • Technical information: IP addresses, browser and device information, service requests, error reports, and operational logs. Market-data queries include instruments and requested dates; we do not send your account identity or brokerage portfolio to market-data providers for advertising.

4. Purposes of processing

We use this information to authenticate you, provide the features you request, synchronize authorized brokerage data, calculate and display analytics, process subscription status, check free-trial eligibility, credit and pay referral partners, deliver enabled alerts, provide support, protect accounts, troubleshoot and improve the Service, and meet legal obligations. Service messages include verification, security, billing, trial, and inactivity notices. We do not sell personal information or use your brokerage or trading data for advertising.

5. Providers and disclosures

  • SnapTrade and connected brokers provide the authorized account data. Direct Interactive Brokers Flex access uses the token and query identifiers you supply.
  • Stripe processes payments and manages subscriptions. It receives payment and billing information under its own privacy policy.
  • Hosting, content delivery, security, and backup providers store or transmit service data on our behalf.
  • Resend delivers account, billing, security, inactivity, and enabled alert emails, receiving the recipient address and message content. If you enable Telegram delivery, Telegram receives your chat identifier and alert content under its own policies.
  • Google processes optional Google sign-in, permitted website analytics, and embedded YouTube tutorials as described below.

Our support-view tools require a grant from you. You can grant access for 24 hours, seven days, or until you revoke it; support views are logged and you can revoke the grant. Authorized technical administration, incident response, and legally required access are handled separately under restricted operational access. A support grant is not a statement that the operator has no technical access to the underlying infrastructure.

We may disclose information where required by law, to address fraud or security threats, protect legal rights, or in a business transfer subject to applicable privacy protections. We limit disclosures to the purpose involved.

6. Cookies, browser storage, and tutorials

Essential browser storage keeps you signed in and remembers security choices, preferences, and session work. Clearing it can sign you out or reset locally stored settings. Google Analytics measures website usage and traffic sources; analytics storage is disabled by default for visitors in the European Economic Area, United Kingdom, Switzerland, and Quebec. We do not use advertising cookies for our own advertising targeting. If you arrive through a partner's referral link, we keep the partner's code in your browser for up to 90 days so the partner can be credited if you create an account; we do not keep it when your browser sends a Global Privacy Control or Do Not Track signal.

Tutorials use YouTube privacy-enhanced embeds. Loading a page with an active embedded player, or choosing to play an embedded video, can connect your browser to Google/YouTube and disclose your IP address and device information. Privacy-enhanced mode does not make these connections anonymous or eliminate all processing. External services operate under their own privacy policies.

7. Brokerage access and your choices

You choose which supported brokerage accounts to connect. Disconnecting stops future retrieval through that connection, but does not automatically erase previously imported positions, fills, or analytics. A Free plan may retain a read-only history after Pro syncing stops. Request deletion if you want stored account information removed. Revoking a connection directly with the broker or provider also ends its authorization.

8. Retention, inactivity, and deletion

We retain account information and history while needed to provide the Service, subject to storage limits and applicable legal requirements. Accounts without an active paid subscription or an operator-granted Pro exemption are eligible for deletion after 365 days without a login (or after creation if never used). We send warnings around days 335 and 350 and allow at least 14 days after the final warning before automated deletion. Logging in prevents deletion for inactivity. A subscription lapse alone does not delete your history.

Account deletion removes the account and associated user records from the active application database. We attempt to disconnect external brokerage links; you can also revoke them directly with the provider. Deletion does not instantly erase separately retained backups, operational logs, correspondence, or records that a payment provider keeps under its own policy. We may retain information required for legal obligations, fraud prevention, disputes, or enforcement for as long as necessary for those purposes.

To prevent repeat free trials, we match verified email addresses (including known aliases) and stable brokerage account identifiers. We also check email domains against a locally maintained list of temporary email services; your address is not sent to that list provider. We retain keyed hashes of these identifiers and the original trial end date for 365 days after that trial ends, including after account deletion. This limited record contains no raw email address, brokerage account number, card details or holdings. Links to your app account are deleted with the account. Repeated signup attempts do not extend retention.

Encrypted backups are retained separately for recovery. Routine offsite database backups normally expire on schedules of up to 401 days; recovery material and backup manifests can be retained for up to 431 days. Selected recovery-tested copies may be retained longer. Backups are access-restricted and are not used as active accounts. Contact us about deletion and backup retention if you need more information.

9. Security

Safeguards include HTTPS, encrypted sensitive connection secrets, hashed passwords, access controls, two-factor authentication options, per-user data isolation, and encrypted backups. No system is completely secure; we cannot guarantee absolute security.

10. Rights, consent, and complaints

Depending on applicable law, you may request access, correction, deletion, or an export of your personal information, withdraw consent, or object to or restrict certain processing. Contact [email protected]. We respond within the periods required by law and explain any lawful limitation. Withdrawing a permission may prevent the corresponding feature from working. You can disable optional alerts, unlink Telegram, disconnect brokers, revoke support access, and delete your account through the available controls. You may also complain to the privacy regulator with jurisdiction over your situation.

11. International processing and age limits

Convexity Group operates from Canada. Our providers and infrastructure may process or store information outside Quebec and Canada, where privacy laws and lawful government-access rules can differ. We apply safeguards required by applicable law for those transfers. The Service is intended for adults aged 18 or older; contact us if a child has provided personal information.

12. Changes to this Policy

We update the date when this Policy changes and provide notice of material updates through the app or other appropriate channels. We obtain separate consent where a new use or disclosure requires it by law. Accepting updated Terms does not override your optional integration choices or other privacy rights.

13. Contact

Contact Convexity Group at [email protected] for privacy requests or concerns.

Product
P&L AttributionPosition ModelerTrade JournalPricingGlossaryBroker connections
Resources
BlogTutorialsHelp centerFAQ
Company
AboutContactAffiliate program
Legal
Terms of ServicePrivacy PolicyRefund Policy

Options involve substantial risk and are not suitable for all investors.

Option Anatomy, a Convexity Group company© 2026 Convexity Group