Privacy Policy

GammaSwing · Effective August 16, 2026

This Privacy Policy explains how GammaSwing (“we,” “us,” or “our”) collects, uses, stores, shares, and protects information in connection with the GammaSwing platform (the “Service”). GammaSwing is operated by OneBit Capital LLC, a Florida limited liability company, which is the party responsible for the data described here. By using the Service, you agree to the practices described in this policy.

1. Information we collect

Account information you provide when you register, such as your email address and authentication credentials, along with preferences you choose (display name, theme, timezone).
Subscription information — your plan, its status, and renewal dates, plus the customer and subscription identifiers our payment processor gives us. Card numbers never reach GammaSwing.
Financial account data that you choose to import by connecting a brokerage. When you link an account, we receive investment transactions (buys and sells), holdings, security identifiers, and account identifiers for the accounts you connect.
Trade journal entries — notes, tags and review data you write yourself about your trades.
Usage data necessary to operate and secure the Service, such as basic request logs.

2. How we use your information

We use your information solely to provide and improve the Service — to import and display your trades, calculate performance and analytics (P&L, win rate), produce market analysis, bill your subscription, and maintain the security of your account. We do not sell your personal or financial information, and we do not use it for advertising. We do not use your data to train machine-learning models.

3. Connecting your brokerage accounts

Connecting a brokerage is optional and is never required to use the Service. Depending on the provider, a connection is made in one of two ways:

Through Plaid. We use Plaid Inc. (“Plaid”) to securely connect certain financial accounts. By linking an account, you grant us and Plaid the right to access, transmit, and use your financial data as needed to provide the Service. We never receive your bank or brokerage login credentials. Plaid’s collection and use of your information is governed by the Plaid End User Privacy Policy.
Directly with the broker. Where a broker offers its own connection (such as Charles Schwab’s OAuth authorization or an Interactive Brokers Flex report), you authorize the connection with that broker and we store the resulting access credential in encrypted form.

Every connection is read-only. We import transaction history and account data; we never place orders, move money, or initiate payments through a connected account. You can disconnect at any time, which deletes the stored credential or token.

4. How we share information

We share information only with service providers that help us operate the Service, under agreements that limit their use of your data:

Plaid — secure account connectivity and financial data.
Supabase — managed database and authentication.
Render — application hosting.
Stripe — subscription billing and payment processing. Stripe receives what it needs to bill you; we receive back your plan status and identifiers, never your card number.
Resend — delivery of transactional email, which receives your address for that purpose.
Market data providers — we send them the tickers and contracts being analysed. We do not send them your identity, and they receive no personal data about you.

We may also disclose information if required by law or to protect the rights, safety, or security of our users or the Service. We do not sell or rent your information to third parties.

5. Data storage and security

Data is encrypted in transit using TLS 1.2 or better and encrypted at rest by our database platform. Broker credentials and access tokens are encrypted before storage. Every table is protected by row-level security, so your data is scoped to your account and is not accessible to other users. Access to systems that store consumer data is restricted, uses unique accounts, and is protected by multi-factor authentication.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal data we will notify you and the relevant authority as the law requires.

6. Data retention and deletion

We retain your information only as long as needed to provide the Service. You are in control of your data:

You can disconnect a linked brokerage at any time, which deletes its stored access token.
You can request deletion of your account and associated data by contacting us (see below). Upon deletion, your data is removed and any connected Plaid items are revoked.
Billing records are kept for as long as tax and accounting law requires, which is longer than the account itself.

7. Your rights

Subject to applicable law, you may request to access, correct, or delete the personal information we hold about you. To exercise these rights, contact us using the details below.

8. Consent

We collect, process, and store your data based on the consent you provide when you register and when you link an account. You may withdraw consent at any time by disconnecting your accounts or requesting account deletion.

9. Children’s privacy

The Service is not directed to individuals under 18, and we do not knowingly collect information from them.

10. Governing law

This policy and any dispute arising from it are governed by the laws of the State of Florida and the United States, without regard to conflict-of-laws rules. If you are a consumer in a place whose law gives you rights that cannot be waived by contract, this section does not take those rights away from you.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by notifying you within the Service.

12. Contact us

For privacy questions or requests — including access, correction, or deletion of your data — contact us at contactus@gammaswing.com.