Privacy Policy · ObviousTrades

Last updated: August 21, 2026

ObviousTrades LLC ("we", "us") respects your privacy. This policy explains what we collect, how we use
it, who else receives it, and your choices. We are the controller of your personal information
in connection with the Service. Where you connect a brokerage, SnapTrade acts as a service
provider processing that data on our behalf, so this policy, not SnapTrade's, governs how your
information is handled in the Service.

1. INFORMATION WE COLLECT.
- Account data: the email address and password you use to register. Passwords are stored only as
a salted cryptographic hash; we never store your plaintext password. We also store your
settings, alert preferences, and the record and timestamp of agreements you accept, including
your acceptance of SnapTrade's End User Terms.
- Brokerage data (read-only): if you connect a brokerage account, we receive read-only position,
balance, order, and transaction data, and values your broker computes such as marks and option
greeks, through our third-party aggregator SnapTrade. We never receive your brokerage username
or password, and we cannot place trades or move funds.
- Usage data: pages viewed, features used, and actions taken in the application, associated with
your account identifier and email so we can support you and improve the product.
- Technical data: logs, timestamps, IP address, browser user agent, and error and performance
information needed to run and secure the service.
- Payment data: if you subscribe, our payment processor collects and holds your card details. We
never see or store your full card number.

2. HOW WE USE IT. To provide the Service: analysing the holdings you connect in order to produce
risk metrics, alerts, and informational commentary; authenticating you and securing your
account; supporting you; billing you if you subscribe; meeting our legal and contractual
obligations; and improving the product. We do NOT sell or share your personal information or
your brokerage data for money or for cross-context behavioural advertising, and we do not use
your data for advertising.

3. WHO ELSE RECEIVES YOUR DATA. Only the service providers that make the product work, each
under its own terms and only for the purpose stated:
- SnapTrade: read-only brokerage connectivity. Receives your connection and account data.
- Intrinio: market data provider. Receives the ticker symbols we request. It does not receive
your identity, your positions, or your account details.
- Anthropic: the artificial-intelligence service that generates risk commentary. Receives a
description of the positions and risk figures being narrated. It does not receive your name,
email, or broker credentials. We use Anthropic under its commercial terms, which state that
Anthropic may not train its models on customer content, treat that content as our confidential
information, and require it to be destroyed on request. We do not consent to any use of your
data for model training.
- PostHog: product analytics, associated with your account identifier and email.
- Sentry: error and performance monitoring. May incidentally receive technical context from a
failing request.
- Resend: delivery of transactional email.
- Stripe: payment processing, if you subscribe.
- Browser and device push: where you turn on push notifications, the alert is delivered
through the push service your browser or operating system uses (for example Google, Apple, or
Mozilla), addressed only to the devices you registered on your own account.
- DigitalOcean: cloud hosting and encrypted backups of the database.
Alerts and reports are addressed only to the account they belong to. We do not route one
customer's alerts to any shared or operator-controlled destination.
We may also disclose information if required by law, to enforce our terms, or to protect our
rights or the safety of others, and to a successor in the event of a merger or sale of the
business, in which case this policy continues to apply.

4. SECURITY. Traffic is encrypted in transit. Brokerage connection tokens are encrypted at rest.
We use access controls, session management, new-device verification, and audit logging, and we
keep encrypted offsite backups. Administrative access is restricted to a private network. No
method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If
a breach affecting your personal information occurs, we will notify you and any regulator as
required by law and, in respect of connected brokerage data, we are also required to notify
SnapTrade promptly.

5. DATA RETENTION AND DELETION. We keep your data while your account is active. When you close
your account or ask us to delete your data, we delete it except where retention is required by
law, needed to resolve disputes or enforce our agreements, or held in encrypted backups that
expire on their normal cycle. Separately, and as our aggregator requires, we will delete
brokerage data passed to us through SnapTrade on request from you or from SnapTrade. Records of
agreements you accepted, and security and audit logs, are retained as evidence of consent and
for security purposes.

6. YOUR RIGHTS AND CHOICES. You can access and update your account information, disconnect your
brokerage at any time, change or switch off alerts, and request a copy or deletion of your data.
Connecting a brokerage is entirely optional and the Service can be used without it. Depending on
where you live you may have additional rights, including under the California Consumer Privacy
Act as amended, to know what personal information we collect and how it is used, to request
deletion or correction, to request a portable copy, and not to be discriminated against for
exercising those rights. We do not sell personal information or share it for cross-context
behavioural advertising, so there is nothing to opt out of in that respect. To exercise any
right, contact us using section 10; we will verify your identity through your account before
acting.

7. COOKIES AND ANALYTICS. We use a session cookie to keep you logged in, and product analytics
to understand how the application is used. We do not use advertising cookies or third-party
advertising trackers. Your browser can block or delete cookies, though the Service will not keep
you logged in without the session cookie.

8. CHILDREN. The Service is not directed to anyone under 18 and we do not knowingly collect
personal information from children. If you believe a child has provided us information, contact
us and we will delete it.

9. WHERE YOUR DATA IS PROCESSED. The Service and its providers process data in the United
States. If you access the Service from outside the United States, you understand your
information will be processed there, under United States law.

10. CHANGES AND CONTACT. We may update this policy; material changes will be posted here with an
updated date. Questions, data-access, or deletion requests: support@obvioustrades.com, or the contact form
at obvioustrades.com/contact.

This policy is provided for transparency and is not legal advice.