Privacy Policy

1. Overview and Information We Collect

Assistra ("OptionsMastery", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy details how we collect, process, secure, and disclose your data when you interact with OptionsMastery.ai (the "Site" or "Platform") and its brokerage execution services. We collect:

• User Profile Data: Email addresses, hashed authentication passwords, configuration choices, and custom trading preferences (such as auto-trade flags).
• Portfolio Upload Data: Tickers, stock share counts, option contracts, strikes, expirations, purchase dates, and cost-basis parameters parsed from portfolio CSV statement files uploaded voluntarily by users.
• Linked Brokerage Tokens: Read-only and trade-route tokens (`userSecret` and `userId`) returned by SnapTrade. We do NOT store your underlying brokerage credentials (e.g. login username/password).

2. Processing of Brokerage API Data

When you link a brokerage account via our integration partners (SnapTrade, Tradier, Alpaca):

• Verification Only: We query account balances and Option Buying Power to verify that your brokerage account contains sufficient cash or collateral to support the requested spreads and trades.
• Execution Tokens: We store the temporary authorization tokens securely encrypted at rest. These tokens are only transmitted to our API partners when you trigger a trade execution manually or have active automated strategies running.
• Disconnect Wipes: When you click "Disconnect Account," we completely purge all tokens, account IDs, and connection credentials for that broker from our active database.

3. How We Use and Share Information

We process your information strictly for the following purposes:

• To perform mathematical risk-audits and generate options strategy suggestions for your portfolio.
• To facilitate direct trade routing through your linked broker-dealers.
• To improve our AI-driven model scores, diagnostics, and technical analysis services.
• To comply with regulatory audit requirements and investigate potential fraud or platform abuse.

**AI Provider Disclaimers**: OptionsMastery utilizes AI models (such as Google Gemini API) to generate persona-based advisory responses. When you interact with the AI assistant, we redact personal identifying details and pass only generalized holdings variables (e.g. "AAPL Covered Call strategy") to protect your privacy. No personal financial accounts or brokerage tokens are ever shared with AI providers.

4. Data Security & Storage

We implement bank-grade administrative, technical, and physical security measures to safeguard user data:

• All communications between your browser, our servers, and third-party APIs are encrypted in transit using SSL/TLS protocols (HTTPS).
• Sensitive database columns, including oauth refresh keys and user secrets, are encrypted at rest.
• We limit backend access to user database rows to authorized administrative roles only, and audit all database actions.

5. CCPA and GDPR Rights

Depending on your jurisdiction (including California and the European Economic Area), you have the right to:

• Request access to the personal data we hold about you.
• Request rectification or correction of inaccurate personal data.
• Request complete erasure ("Right to be Forgotten") of your user profile, uploaded portfolios, and linked broker connections.
• Restrict or object to processing of your data.

To exercise any of these rights, please email us directly atprivacy@assistra.ai.

6. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be indicated by an updated "Last updated" timestamp at the top of this document. We encourage users to review this page periodically to stay informed about how we protect their personal information.