Privacy Notice

Effective 14 July 2026

1. Data controller

Joshua Cook is the data controller for personal data collected through OptionHarvest. You can reach us at support@coveredcalls.lovable.app.

2. What we collect

• Account data: email address and password hash (or Google sign-in identifier).
• Product data: the tickers, positions, trade dates and notes you enter into the tracker.
• Subscription data: the Paddle subscription and customer IDs, status, and current billing period. We do not receive or store your full card number.
• Technical data: standard server logs (IP address, user agent, timestamps) generated when you use the Service.

3. How we use it

We use your data to provide and secure the Service, to authenticate you, to display your trades and prices back to you, to manage your subscription, and to communicate with you about the Service (account, billing and security).

4. Who we share it with

• Paddle.com Market Ltd — Merchant of Record. Handles the payment, invoicing and taxes. Receives your email, billing address and card details directly (we do not).
• Supabase — hosted database and authentication used to store your account and product data.
• Finnhub — market data provider used to display live ticker prices. Only ticker symbols are sent, not your account data.
• Google — if you choose to sign in with Google, your Google account identifier and email are shared with us for authentication.

We do not sell your personal data and do not share it with advertisers.

5. Retention

We keep your account data for as long as your account exists. If you delete your account, we delete your account and product data within 30 days, except where we are required to retain records for legal or accounting reasons (for example, transaction records held by Paddle).

6. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict processing, and to data portability. To exercise any of these rights email support@coveredcalls.lovable.app. You also have the right to lodge a complaint with your local data protection authority.

7. Security

Data is transmitted over HTTPS and stored with row-level security so that only your account can read your data. No system is 100% secure; please use a strong, unique password and enable two-factor authentication where available.

8. Changes

We may update this Notice from time to time. Material changes will be communicated by email or in-app notice.

See also our Terms & Conditions and Refund Policy.