Privacy Policy
1. Who handles your information
“Platform,” “AIO,” or “AIOption” means the service team operating this product and support@aioption.org. A subscription order, invoice, or separately signed agreement may identify the relevant legal entity for commercial or institutional use. If that document identifies a different contracting entity, the formal commercial agreement controls for that relationship.
The current contact for privacy and data-rights requests is support@aioption.org. A formal commercial agreement may further identify the personal-information processor, controller, or representative; that agreement or supplemental notice will apply together with this Policy.
2. Information we process
The Platform processes information that is relevant and reasonably necessary for its features. Depending on your use, the following categories may apply.
- Account and verification information: email, user identifier, account status, verification code and status; passwords are stored as one-way derived values, not plaintext.
- Preferences: display name, phone, company, risk profile, default paper capital, symbol, timeframe, language, sound, and notification settings.
- Simulation activity: paper drafts, option legs, strategy, quantity, reference price, risk line, target, notes, data state, simulated P&L, and timestamps.
- Security and technical information: hashed session identifiers, request time, errors, and hashed email or network identifiers used to prevent abuse; legal-acceptance records may include version, language, time, and hashed request/device characteristics.
- Device-local information: theme, language, selected symbol, price-alert rules, sound preferences, and some UI state may be stored only in the current browser's local storage.
3. Purposes and legal bases
We use information to create and verify accounts, maintain sessions, provide preferences and simulation, send registration codes, answer requests, secure the service, prevent abuse, troubleshoot, comply with law, and improve reliability.
Depending on applicable law, processing may rely on consent, necessity to enter or perform a service contract with you, legal obligations, and lawful interests in protecting systems and users. If purpose, method, or categories materially change, we will provide notice or obtain consent as required.
4. Cookies, sessions, and local storage
After sign-in, the Platform uses a necessary session cookie to recognize and protect the session. It is configured with HttpOnly and SameSite=Lax and uses Secure on HTTPS deployments. Browser local storage may also hold UI and alert preferences that need not be sent to the server.
Clearing cookies or local storage may sign you out, reset theme preferences, or remove alerts on that device. Price alerts are currently not a cross-device cloud-sync service.
5. Providers, sharing, and disclosure
Hosting, email verification, market-data, security, or infrastructure providers may process information necessary to deliver the service. They are expected to process it only for agreed purposes and under applicable law. Market-data requests generally contain symbol, timeframe, expiry, and similar parameters—not your password.
We do not operate a business model based on selling personal information. We do not disclose it except with authorization, to deliver the service, in a reorganization, to protect security or rights, or in response to lawful government or judicial process. Separate consent, opt-out, or other mechanisms will be provided where required.
6. International transfers and storage location
U.S. market data, email, or hosting may involve infrastructure outside your country or region. Before formal commercial operation, the Platform will supplement this notice based on actual deployment, legal entity, storage location, recipients, and applicable law, and will complete any required separate consent, assessment, certification, or contractual safeguard.
7. Retention
We retain information only as reasonably necessary for the stated purposes, account operation, disputes, security, or legal duties. Periods vary: verification challenges, failed logins, and expired sessions are generally cleared sooner, while account, acceptance, and paper-trade records may remain for the account lifecycle or a legally required period.
When retention is no longer necessary, information is deleted, anonymized, or securely isolated. Backups and audit records may expire on a limited cycle. A formal commercial agreement or mandatory law may specify more precise periods.
8. Information security
The Platform uses safeguards appropriate to the current service, including access controls, password derivation, session hashing, request-origin checks, rate limits, and least privilege. Use a unique strong password, protect your email and devices, and sign in only through a trusted HTTPS address. No safeguard eliminates every risk; notifiable incidents will be communicated as required by law.
9. Your data rights
Subject to applicable law, you may contact support@aioption.org to request access, a copy, correction, completion, deletion, explanation of processing rules, withdrawal of consent, restriction or objection, or account closure. We may verify identity to prevent impersonation.
Withdrawal does not affect processing lawfully completed before withdrawal or processing necessary under another lawful basis. A request may be limited where retention is legally required, protects others, resolves disputes, or maintains security; the applicable reason will be explained.
10. Minors
The Platform is intended for adults capable of using financial research tools and does not knowingly seek account information from minors. Contact us if you believe a minor provided information without valid authorization.
11. Updates, complaints, and contact
This Policy is version 2026.07.20, effective 2026-07-20. Material changes will be communicated through the page, account notice, or available contact information, and renewed consent will be obtained when required. Send questions, complaints, or rights requests to support@aioption.org.