Skip to content
Search /Start free
Legal

Privacy Policy

Last updated: Oct 29, 2026

This policy explains how [Legal entity name](“SharpeIQ”, “we”, “us”), organised under the laws of[Jurisdiction] and registered at[Registered address], handles personal data when you use SharpeIQ at www.sharpeiq.com. Contact: hello@sharpeiq.com orsupport@sharpeiq.com.

SharpeIQ is an options analytics product. It is not a broker and does not give investment advice. This policy covers personal data, not market data.

1. Data we collect

We collect only what the product needs to run:

  • Account. Email address, user id, and sign-in method (email, Google, or GitHub) via Supabase Auth. A profiles row stores your plan and last-seen time. When a free account is created, the campaign parameters described below may be copied onto that account’s sign-in metadata.
  • Billing. Paid plans are processed by Stripe. We receive subscription and customer identifiers needed to map your account to a plan. Card numbers are entered on Stripe Checkout, not on our servers.
  • Newsletter. If you subscribe on the site, we store your email and a short source tag (for example desk_home) in Supabase email_captures. You can unsubscribe with the signed link in the email, without logging in.
  • Campaigns. If the address you open containsutm_source, utm_medium, utm_campaign,utm_term, or utm_content, the browser keeps the first set it sees. That set is stored in a first-party cookie namedsiq_ft for about 90 days and copied to sessionStorage under the same name. A later visit with different parameters does not replace it. The homepage, research pages, and the app read the same cookie. The cookie does not contain your email. After a briefing signup, localStoragesiq_briefing stores a short hash of the address so the same browser does not send that event twice. After a new account is counted, localStorage siq_account_created stores that account id so the signup event is sent once.
  • Guest lookup meter. The public homepage allows one full ticker lookup without an account. The browser stores a randomsiq_guest id in localStorage and sends it asX-Guest-Id. If that header is missing, the API may fall back to the request IP solely to enforce the same limit. We store the subject and the ticker looked up, not a name.
  • Product use. Signed-in features such as a watchlist are stored so the dashboard can show them. Lookups you run while signed in are processed to return IV rank and related analytics.
  • Diagnostics. The logged-in app initialises Sentry for unhandled errors. Sentry is configured not to send default PII. Hosting logs on Vercel and Railway may include IP, user-agent, and URL.

2. Cookies and local storage

We use a small set of browser storage:

  • Supabase session token in localStorage (keeps you signed in);
  • siq_guest in localStorage (guest lookup limit);
  • theme preference (siq-theme) in localStorage;
  • an app sidebar open/closed cookie on the dashboard;
  • siq_ft (first campaign parameters, about 90 days) and the same value in sessionStorage;
  • siq_briefing and siq_account_created in localStorage, as described above;
  • Vercel Web Analytics on the public site (homepage and research) and on the logged-in app, which may set its own first-party analytics cookies or use a similar measurement script;
  • the LinkedIn Insight Tag, only when advertising measurement is configured. LinkedIn may set its own cookies to measure whether an ad was followed by a briefing signup or a free account. When that configuration is absent, the tag is not loaded.

The public research pages and this policy page do not require an account. You can block cookies in your browser; the guest lookup limit then falls back to IP as described above, and sign-in will not persist.

3. How we use data

  • to provide the Service, authenticate you, and remember your plan;
  • to charge, trial, change, or cancel a Stripe subscription;
  • to send the research newsletter you asked for, and honour unsubscribe;
  • to enforce guest and plan limits, and to keep the Service secure;
  • to fix errors (Sentry) and understand aggregate product usage (Vercel Analytics);
  • to see which campaigns are followed by a briefing email signup or a free account (Vercel Analytics, and LinkedIn when the Insight Tag is on).
  • to answer support mail you send to hello@ or support@sharpeiq.com.

We do not sell personal data. We do not use guest lookup tickers to build an advertising profile.

4. Processors

These companies process data on our behalf to run the product:

  • Supabase — authentication, profiles, newsletter list;
  • Stripe — checkout, invoices, billing portal, cancellation;
  • Google — optional OAuth sign-in;
  • Vercel — site hosting and Web Analytics on the public site and the app;
  • LinkedIn — Insight Tag for advertising measurement, when enabled;
  • Railway — API and serving database;
  • Sentry — client error reports from the app.

Market-data vendors supply prices and option statistics. They are not given your account email in the ordinary course of a lookup.

5. Retention

We keep account and plan records while the account is open, and billing records as Stripe retains them for tax and dispute handling. Newsletter rows stay until you unsubscribe (the address is then marked unsubscribed rather than silently deleted, so we can honour the opt-out). Guest lookup rows exist to enforce the one-ticker limit. Closed-account deletion requests go to support@sharpeiq.com.

6. Your rights

Depending on [Jurisdiction], you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. Emailhello@sharpeiq.com. You may also lodge a complaint with the supervisory authority in[Jurisdiction].

The Service is not directed at children under 16. We do not knowingly collect their data.

7. International transfers

Hosting and processors listed above may store data in the United States or other countries. If you use the Service from[Jurisdiction] or elsewhere, you understand that your data may be processed outside that place, subject to the safeguards those providers offer.

8. Changes

We will post updates on this page and change the “Last updated” date. Material changes to how we handle personal data will be surfaced in the product or by email to the address on your account where we can.

9. Contact

[Legal entity name]
[Registered address]
[Jurisdiction]
hello@sharpeiq.com ·support@sharpeiq.com