Privacy Policy

Last updated: December 12, 2025

1. Introduction

ThetaGo is operated by LevelUp Holdings, LLC, a Wyoming limited liability company ("Company," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website at thetago.app ("the Service").

2. Information We Collect

Information You Provide

Account Information: When you create an account, we collect your email address and password (stored securely via Supabase with industry-standard encryption).
Google Sign-In: If you sign in with Google, we receive your email address and profile name from Google. We do not access your Google contacts, calendar, or other data.
Phone Number: If you sign up with your phone number, we collect it for login verification codes and optional trading alerts and updates. Your phone number is stored securely and is never sold or shared with third parties for marketing purposes.
Payment Information: If you subscribe to a paid plan, payment is processed by Stripe. We do not store your full credit card number. We receive only the last four digits, card type, and expiration date for display purposes.
Saved Picks: If you save covered call selections, we store the ticker, strike price, expiration date, premium, and related trade data you choose to save.
Newsletter Signup: If you subscribe to our newsletter, we collect your email address.
Feedback: If you submit feedback, we collect the information you provide.

Information Collected Automatically

Visitor ID: We generate an anonymous identifier stored in your browser's localStorage to track unique visitors without requiring login.
Usage Analytics: We use PostHog to understand how users interact with the Service. This includes pages visited, features used, button clicks, and general usage patterns.
Device Information: Browser type, operating system, device type, and screen resolution.
Log Data: Our servers automatically log requests, including IP addresses, timestamps, request paths, and response codes for security, debugging, and abuse prevention.
AI Processing: When you use AI-powered explanations, your request data (ticker, strike, strategy) is sent to our AI providers (Anthropic or OpenAI) to generate responses. We do not send personal information to AI providers.

3. How We Use Your Information

To provide, maintain, and improve the Service
To authenticate your account and enable saved picks functionality
To process payments and manage your subscription
To send you SMS for login codes, and optional trading alerts and updates (you can unsubscribe from alerts anytime)
To send you newsletters if you subscribed (you can unsubscribe anytime)
To analyze usage patterns and improve user experience
To detect, prevent, and address fraud, abuse, or technical issues
To respond to your feedback or support requests
To comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share data with:

Supabase: Our authentication and database provider, which stores your account and saved picks data securely.
Stripe: Our payment processor, which handles subscription billing and stores payment method details securely. See Stripe's Privacy Policy .
PostHog: Our analytics provider, which processes anonymized usage data to help us understand how the Service is used.
Twilio: Our SMS provider, which processes phone numbers to deliver SMS alerts if you opted in.
Resend: Our email provider, which processes email addresses to deliver transactional emails, alerts, and newsletters.
Anthropic / OpenAI: Our AI providers, which process anonymized trade data to generate explanations. No personal information is shared.
Render: Our hosting provider, where the Service infrastructure runs.
Legal Requirements: If required by law, subpoena, or court order, or to protect our rights, property, or safety.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

5. Data Retention

We retain your information for the following periods:

Account Data: Retained while your account is active, and deleted within 30 days of account deletion request.
Saved Picks: Retained while your account is active, deleted with account.
Payment Records: Transaction records retained for 7 years as required for tax and accounting purposes.
Analytics Data: Aggregated and anonymized data may be retained indefinitely for statistical analysis.
Log Data: Server logs are retained for up to 90 days for security and debugging.
Phone Numbers: Retained while you are subscribed to SMS alerts, deleted within 30 days of unsubscribing or account deletion.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (HTTPS/TLS) and at rest, secure authentication via Supabase, and access controls. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users via email within a reasonable timeframe, and no later than required by applicable law. We will also notify relevant regulatory authorities as required. The notification will describe the nature of the breach, the types of data involved, and the steps we are taking in response.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Delete your personal information
Export your data in a portable format
Withdraw consent for data processing
Object to certain processing activities

To exercise these rights, contact us via the feedback form . We will respond within 30 days.

9. Account Deletion

You may request deletion of your account and associated data by contacting us via the feedback form . We will process deletion requests within 30 days. Some data may be retained as required by law or for legitimate business purposes (e.g., tax records, fraud prevention).

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You can request what personal information we collect, use, disclose, and sell.
Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
Right to Correct: You can request correction of inaccurate personal information.
Right to Opt-Out: You can opt out of the "sale" of personal information. We do not sell your personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us via the feedback form. You may designate an authorized agent to make requests on your behalf.

11. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and service providers are located. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

12. Cookies and Tracking

We primarily use localStorage for session management and user preferences (e.g., selected strategy, recent tickers, visitor ID). PostHog uses cookies to track analytics across sessions. No advertising cookies are used.

Opting Out: You can opt out of analytics tracking by using browser extensions that block analytics scripts or using private/incognito browsing mode.

Note: Blocking cookies or localStorage may affect Service functionality.

13. Third-Party Links

The Service may contain links to third-party websites (e.g., Yahoo Finance, your broker, feedback forms). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies.

14. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will delete it promptly. If you believe we have collected information from a child, please contact us.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date. For material changes, we may also notify you via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

16. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Wyoming, United States, without regard to its conflict of law provisions.

17. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us via the feedback form .

ThetaGo · Terms · Privacy