Privacy Policy

1. Introduction

Ohey Inc. ("Ohey," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our financial education and analytics platform (the "Platform").

This policy complies with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

2. Information We Collect

2.1 Information You Provide

Account Registration:

• Name, email address, phone number
• Billing information (credit card details processed by Stripe - we do NOT store card numbers)
• Trading experience level and investment objectives (optional survey)

User-Generated Content:

• Trading notes, watchlists, and custom alerts you create
• Feedback, support tickets, and communications with our team

2.2 Information Collected Automatically

Usage Data:

• IP address, browser type, operating system, device identifiers
• Pages viewed, features used, time spent on Platform
• Referral source (how you found Ohey)
• Login timestamps and session duration

Cookies & Tracking Technologies:

• Essential Cookies: Authentication, security, session management
• Analytics Cookies: Google Analytics for usage statistics (anonymized IP)
• Preference Cookies: Theme selection, dashboard layout, chart settings

You can disable non-essential cookies via your browser settings or our Cookie Preferences panel.

2.3 Information from Third Parties

• Payment Processors: Stripe provides transaction status (no card details)
• Market Data Providers: Polygon.io, Yahoo Finance (no personal data shared)
• Email Service: SendGrid for account notifications

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Core Services

• Provide access to trading signals, volatility analytics, and educational content
• Authenticate your account and maintain security
• Process subscription payments and manage billing
• Deliver email notifications for alerts, signals, and account updates

3.2 Platform Improvement

• Analyze usage patterns to improve features and user experience
• Train machine learning models (using aggregated, anonymized data)
• Debug technical issues and optimize performance

3.3 Communication

• Send transactional emails (password resets, billing receipts)
• Provide customer support and respond to inquiries
• Send educational newsletters and platform updates (you can opt out)

3.4 Legal Compliance

• Comply with SEC recordkeeping requirements for investment advisers
• Respond to subpoenas, court orders, or legal processes
• Prevent fraud, money laundering, or illegal activity

4. Information Sharing & Disclosure

4.1 We Do NOT Sell Your Personal Information

✓ Ohey does NOT sell, rent, or trade your personal data to third parties for marketing purposes.

4.2 Service Providers

We share data with trusted service providers who help us operate the Platform:

• Cloud Hosting: AWS, Linode (data storage and servers)
• Payment Processing: Stripe (credit card payments)
• Email Delivery: SendGrid (transactional and marketing emails)
• Analytics: Google Analytics (anonymized usage data)

All service providers are bound by confidentiality agreements and process data only for specified purposes.

4.3 Legal Obligations

We may disclose your information if required by:

• SEC or state securities regulators during audits or investigations
• Law enforcement agencies with valid subpoenas or warrants
• Court orders or legal proceedings

4.4 Business Transfers

If Ohey is acquired or merged with another company, your information may be transferred to the new entity. You will be notified via email of any ownership changes.

5. Data Security

We implement industry-standard security measures:

5.1 Technical Safeguards

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Authentication: JWT tokens with short expiration times
• Access Controls: Role-based permissions and multi-factor authentication
• Monitoring: Real-time intrusion detection and audit logs

5.2 Organizational Safeguards

• Employee background checks and confidentiality agreements
• Principle of least privilege (employees access only necessary data)
• Regular security audits and penetration testing

Important: No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for keeping your password confidential.

6. Data Retention

We retain your information as follows:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Personal data deleted within 30 days of cancellation (unless required by law to retain longer)
• Regulatory Requirements: SEC rules require retention of investment advice records for 6 years from account closure
• Backup Copies: May persist in encrypted backups for up to 90 days

7. Your Privacy Rights

7.1 All Users

• Access: Request a copy of your personal data
• Correction: Update inaccurate information via Account Settings
• Deletion: Request account deletion (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing emails (click "Unsubscribe" link)
• Data Portability: Export your data in JSON format

7.2 California Residents (CCPA/CPRA Rights)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request detailed disclosure of data collected, sources, purposes, and third parties
• Right to Delete: Request deletion of personal information (with exceptions)
• Right to Opt-Out: We do NOT sell your data, so no opt-out is needed
• Right to Non-Discrimination: We will NOT deny service or charge different prices for exercising your rights
• Right to Correct: Request correction of inaccurate data
• Right to Limit Use of Sensitive Information: Contact us to restrict processing of sensitive data

To Exercise Your Rights: Email [email protected] with "CCPA Request" in the subject line. We will verify your identity and respond within 45 days.

7.3 Other States

Residents of Virginia, Colorado, Connecticut, and other states with privacy laws have similar rights. Contact us at [email protected] to exercise your rights.

8. Cookies & Tracking Technologies

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control cookies via:

• Cookie Preferences Panel: Available in Account Settings
• Browser Settings: Disable cookies in Chrome, Firefox, Safari, or Edge
• Do Not Track: We honor DNT signals for analytics cookies

Note: Disabling essential cookies may prevent you from logging in or using certain features.

9. Children's Privacy

The Platform is NOT intended for users under 18 years of age. We do NOT knowingly collect information from children. If you are a parent and believe your child has provided us with personal data, contact us immediately at [email protected].

10. International Users

Ohey is based in the United States. If you access the Platform from outside the U.S., your data will be transferred to and processed in the U.S., which may have different privacy laws than your country. By using the Platform, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Effective Date." Material changes will be communicated via email. Continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact Us

Questions about this Privacy Policy or your data? Contact us:

Email: [email protected]
Subject Line: "Privacy Inquiry" or "CCPA Request"

We will respond to privacy inquiries within 10 business days (45 days for CCPA requests).