Privacy Policy

1. Introduction

ThetaGo ("we", "our", or "the Service") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website at thetago.app.

2. Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your email address and password (stored securely via Supabase with industry-standard encryption).
• Saved Picks: If you save covered call recommendations, we store the ticker, strike price, expiration date, premium, and related trade data you choose to save.
• Newsletter Signup: If you subscribe to our newsletter, we collect your email address.
• Feedback: If you submit feedback, we collect the information you provide.

Information Collected Automatically

• Usage Analytics: We use PostHog to understand how users interact with the Service. This includes pages visited, features used, button clicks, and general usage patterns.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Log Data: Our servers automatically log requests, including IP addresses, timestamps, request paths, and response codes for security, debugging, and abuse prevention.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To authenticate your account and enable saved picks functionality
• To send you newsletters if you subscribed (you can unsubscribe anytime)
• To analyze usage patterns and improve user experience
• To detect, prevent, and address fraud, abuse, or technical issues
• To respond to your feedback or support requests
• To comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share data with:

• Supabase: Our authentication and database provider, which stores your account and saved picks data securely.
• PostHog: Our analytics provider, which processes anonymized usage data to help us understand how the Service is used.
• Service Providers: Third parties who assist in operating the Service (e.g., hosting, email delivery), bound by confidentiality agreements.
• Legal Requirements: If required by law, subpoena, or court order, or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred.

5. Data Retention

We retain your information for the following periods:

• Account information: Until you delete your account
• Saved picks: Until you delete them or your account
• Analytics data: 12 months
• Server logs: 30 days
• Newsletter subscriptions: Until you unsubscribe

You can delete your saved picks at any time. To delete your account entirely, please contact us via the feedback form.

6. Data Security

We implement reasonable technical and organizational security measures to protect your information, including:

• Encrypted connections (HTTPS/TLS) for all data transmission
• Secure password hashing (never stored in plain text)
• Access controls and authentication for internal systems
• Regular security reviews

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you via email within 72 hours of becoming aware of the breach, as required by applicable law. We will also notify relevant regulatory authorities as required.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Request portability of your data
• Opt out of marketing communications
• Object to or restrict certain data processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us via the feedback form . We will respond within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request what personal information we collect, use, disclose, and sell.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You can opt out of the "sale" of personal information. We do not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us via the feedback form. You may designate an authorized agent to make requests on your behalf.

10. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and service providers (Supabase, PostHog) are located. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

11. Cookies and Tracking

We use localStorage (not cookies) to maintain your session and preferences. PostHog may use cookies or similar technologies for analytics.

Opting Out: You can opt out of analytics tracking by:

• Enabling "Do Not Track" in your browser
• Using browser extensions that block analytics scripts
• Using private/incognito browsing mode

Note: Blocking cookies or localStorage may affect Service functionality.

12. Third-Party Links

The Service may contain links to third-party websites (e.g., Yahoo Finance, your broker, feedback forms). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies.

13. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will delete it promptly. If you believe we have collected information from a child, please contact us.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date. For material changes, we may also notify you via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us via the feedback form .