Privacy Policy.

1. Who this policy covers

This policy is from Ohey Inc, the company behind the RingMaster product. It covers oheyinc.com, the RingMaster website, and the read only connector described in section 11. Ohey Inc is based in the United States, and our service is offered to people in the United States. The data we hold is stored on servers in the United States.

Questions or requests go to contact@oheyinc.com.

2. The categories of personal data we collect

This is the full list of what we ask you for.

What we do not collect

We do not ask for and do not hold your Social Security number or any government identifier. We do not hold your brokerage or bank account numbers, your broker or bank login details, or your card details. We do not hold your exact account balance or the trades you actually place, and we have no connection to your broker.

3. Why we collect it: the purposes

We hold your information for four purposes, and no others:

• To give you the thing you asked for. You gave us an address and a password so we could open an account and let you read what we publish.
• To keep a record of an agreement. We keep what you agreed to, and when, to the standard the recordkeeping rules set, and we do not rewrite it.
• To run the connector. A grant and a key have to be stored, checked and written to a delivery record on every read. Section 11 sets out exactly what that means.
• To run a safe service. That covers security, fraud prevention, and keeping the site up.

You give us these details voluntarily. You can decline, and if you do, we simply cannot open an account for you. We do not use your data to train any model, ours or anybody else's.

4. Email

We send two kinds of email, and they are separate.

The account email verifies that the address you gave us at signup is yours. It is sent once and it is not optional: it is how we open your account.

The weekly piece is a different list. Nobody is added to it by opening an account. You join it by choice, on the homepage, with your own email address. We send a confirmation message first, and you are only added once you click the link in it. Every issue carries a one click link that removes you.

Some account and service messages are not marketing and may still be sent. A password reset you asked for, or a notice that these terms have changed, are examples.

5. The categories of recipients who see it

The list is short and we intend to keep it short.

• People at Ohey Inc who need it to run the service, and only them.
• Our hosting provider, which stores the data on our behalf under a contract that stops them using it for their own purposes.
• Our email delivery provider, Amazon Web Services (Amazon SES), which sends the account verification message and, for those who choose to join it, the weekly piece. It receives your email address for that purpose only.
• Our network and security provider, Cloudflare. Every visit to our websites, and the app's connection to our servers, passes through Cloudflare, which carries the traffic and blocks attacks. Its Turnstile check on the sign up and password reset forms looks at your browser and IP address to tell a person from a bot.
• Our payment processor, Stripe. Card details go directly to Stripe and never touch our servers, and we see only the subscription status Stripe reports back.
• A hosted model provider, OpenRouter, which may process a question you type into Ask. With it we send what the window you asked from shows: its name and the tickers and figures on it. We do not send your starred list, your plan or your account details.
• The AI client you connected yourself, if you use the connector. It receives what your plan already shows you, and nothing about your account beyond that. See section 11.
• Courts, law enforcement and any government office with authority over us, where the law requires it or where our records are properly demanded. Your file may be part of that.
• Professional advisers, such as our lawyers or auditors, under a duty of confidence, when they need it to advise us.

If Ohey Inc is ever sold or merged, your information may pass to the buyer as part of the business. We would tell you, and the buyer would be bound by this policy until you were told otherwise.

6. We never sell your data

We do not sell your personal information. We do not rent it, trade it, or share it for anyone else's advertising. We do not take money from anyone for access to you. There is no ad network, no data broker, and no third party analytics service on this site.

7. How long we keep it: the retention timelines

• Books and records: five years. We keep certain records for five years, with the first two years in an easily accessible place. That covers what you agreed to, what was published to you, the connector delivery record, and the communications that go with them. We hold ourselves to that standard whether or not a rule makes us.
• Your account details: while your account is open. If you close it, we delete what we can and keep only what the recordkeeping standard above requires.
• Connector grants and keys: while they are live, then in the record. A withdrawn key or a removed grant stops working at once. The row stays on your list with the date, so you can see what was withdrawn and when.
• A registered AI client: ninety days idle, then dropped. The name it registered under is copied onto your grant, so your Connected apps list can still tell you which app it is offering to remove.
• Technical server records: a short period. Long enough to investigate a security problem, and then discarded.

To be straight with you: a record of what you agreed to, and when, is one we keep, and we will not delete it on request. It is the only proof either of us has of what was said. We will tell you plainly when that is the case, and everything else goes.

8. Security

Information travels to us over an encrypted connection. Access inside the company is limited to the people who need it. Passwords are stored in a hashed form, which means we cannot read yours.

The strongest protection is the one built into the design: we do not collect the sensitive things, so there is very little here to steal. No system is perfect, and we will not pretend otherwise. If a breach happens that affects you, we will tell you what we know and what we are doing about it.

9. Cookies

We use ONE cookie. It is a session cookie that keeps you logged in while you use the site. It carries no advertising identifier and it does not follow you to other websites. It ends when your session ends or when you log out.

We do not use advertising cookies, third party cookies, pixels, fingerprinting, session recording, or analytics trackers. Because the only cookie we set is strictly necessary to log you in, there is no cookie banner to click through.

10. The controls you have

Whatever state you live in, we offer all of the following to everyone:

• See it. Ask us for a copy of what we hold about you.
• Fix it. Tell us something is wrong and we will correct it.
• Delete it. Ask us to delete your information. We will, except for the record of what you agreed to and when, and we will tell you exactly what we kept.
• Take it with you. Ask for your information in a common, machine readable file.
• Disconnect an AI. Remove a connector grant or withdraw a key at any time, yourself, in Settings. See section 11.
• Close your account. At any time, for any reason, with no need to explain.
• Object. Tell us you are unhappy with how we are handling your information, and we will look into it and reply.

To use any of these, write to contact@oheyinc.com. We aim to reply within five business days and to finish the work within thirty days. We may need to check that the request really came from you. We will never charge you for a request, and we will never treat you worse for making one.

11. The connector, and what it records

The connector lets an AI client you choose read what your plan already shows you. Adding one is your decision, and everything below happens only if you add one. The Your AI page explains how to set it up and how to take it away.

What we record when you connect

• The name the client registered under. A client tells us what it calls itself. We show you that name on the screen where you press Allow, and on your Connected apps list.
• The grant. That is your standing yes to one client: when you gave it, what it may read, when it was last used, when the sign in window closes, and when you took it back.
• Tokens, as a hash. We store a one way hash of every access and refresh token, never the token itself. A header key is stored the same way, as a fingerprint plus the last four characters, so you can tell your keys apart on the list.
• A delivery record of what was served. Each read writes which tool answered, your account, the date, the published session, and a fingerprint over the exact figures that were sent. A read that repeats within a day writes one row rather than one per request.

What we do not record, and what we do not send

We do not record the questions you type into your AI. Those never reach us: your client asks us for published figures, not for an answer to a question. We send that client only what your plan already shows you on the desk. We never send it your email address, your password, or your payment details.

The client itself belongs to somebody else. What it does with a figure after we hand it over is governed by that company's own privacy policy, not by this one.

How long it is kept

The delivery record is part of the books and records described in section 7, so it is kept for five years. Grants and keys are kept while they are live and then stay on your list as a withdrawn row with its date. A client that has been idle for ninety days is dropped.

How to remove it

1. Open Settings in the desk, then Your AI.
2. Under Connected apps, press Remove beside the client. Every token under it stops working at once.
3. To retire a header key, press Withdraw beside it. It stops working immediately.
4. Closing your account removes every grant and every key at the same time.

12. Children

The service is for adults. It is not directed at anyone under 18, and we do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it.

13. Changes to this policy

If we change this policy we will post the new version here with a new edition date. If a change matters to you, and we have your email address, we will tell you. We will not make a change that widens how we use your information and apply it backwards without asking you first.

14. Contact and complaints

Write to contact@oheyinc.com. Tell us what happened, when, and what you would like us to do about it. We will acknowledge it within five business days and answer within thirty days.

If we cannot resolve a privacy complaint to your satisfaction, you can take it further. Your state's consumer protection office, usually part of the state attorney general's office, accepts complaints about a company like ours. Nothing in our terms stops you, and we will not treat you worse for doing it.