Privacy Policy

This policy explains what The Iron Wheel collects, why, and what you can do about it. Team Iron Wheel is the controller of the personal data described below. Contact: info@ironwheel.app.

1. What we collect

• Account data from Google. When you sign in with Google we receive your Google account identifier, email address and display name. We do not receive or store your Google password, and we request no access to Gmail, Drive, Calendar or Contacts.
• Data you enter. Trades, campaigns, portfolios and settings - symbols, strikes, expirations, quantities, prices, commissions, dividends and dates - including anything you paste in through the broker import.
• Consent record. The date and version of the terms you accepted.
• Technical logs. Standard server logs from our hosting provider (IP address, timestamp, requested URL, user agent, error traces), used to operate and debug the Service.

2. What we do not collect

• No broker credentials, account numbers or API keys - the Service never connects to your broker.
• No payment card details.
• No advertising, cross-site tracking or third-party analytics cookies.
• We do not sell or rent personal data, and we do not share it for advertising.

3. Why we process it, and on what basis

• To provide the Service - storing your portfolio and computing your figures. Basis: performance of our contract with you.
• To keep it secure and working - authentication, abuse prevention, debugging, backups. Basis: our legitimate interest in a safe, functioning service.
• To meet legal obligations - where the law requires us to retain or disclose information. Basis: legal obligation.

4. Who processes data on our behalf

• Google Cloud Platform (App Engine, Datastore, Secret Manager) - hosting and storage of all account and trade data.
• Google Identity - sign-in.
• Open market data sources - the market data services we query for prices and option data, which may change over time. We send them ticker symbols and option contract identifiers only. Your identity, your positions and your quantities are never sent to them.

5. Where data is stored and transferred

The Service is operated from the European Union and hosted on Google Cloud infrastructure in the United States. If you are in the EEA or the UK, this means your data is transferred to the United States; those transfers rely on the safeguards our hosting provider offers, including standard contractual clauses.

6. How long we keep it

Account and trade data is kept for as long as your account exists. If you ask us to delete your account, we remove your account and its trade data from our live systems; residual copies may persist in encrypted backups for a limited period before being overwritten. Server logs are retained on our hosting provider's standard schedule.

7. Your rights

Depending on where you live - and under the GDPR and the CCPA in particular - you have the right to access your data, correct it, export a copy in a portable format, have it deleted, object to or restrict certain processing, and to lodge a complaint with your data protection authority (in Lithuania, the State Data Protection Inspectorate).

How to exercise them today: email info@ironwheel.app from the address you signed up with. These requests are currently handled manually and we aim to respond within 30 days. Self-serve export and account deletion are planned; until they ship, email is the route. You can already export a single campaign's trades to CSV from its page in the app.

We do not sell personal information, so there is nothing to opt out of on that front.

8. Cookies

We set one cookie: a session cookie that keeps you signed in. It is Secure, HttpOnly and SameSite=Lax, and it disappears when you sign out. There are no analytics, advertising or profiling cookies.

9. Security

Traffic is served over HTTPS. Authentication is delegated to Google. Data is stored per user and every request checks ownership before returning or modifying a record. Secrets are held in Google Secret Manager. No system is perfectly secure, and we cannot guarantee absolute security.

10. Children

The Service is not intended for anyone under 18 and we do not knowingly collect their data. If you believe a minor has an account, contact us and we will delete it.

11. Changes

We may update this policy. The “last updated” date above always reflects the current version; material changes will be signalled in the app.

12. Contact

Privacy questions and data requests: info@ironwheel.app.