ATLAS Options Privacy Policy

Effective Date: 2026-05-02

Last Updated: 2026-05-02

Notice: This Privacy Policy is currently in DRAFT form pending legal review. While we have made every effort to draft this policy accurately, we recommend reviewing the final version once it has been approved by counsel. If you have questions about how we handle your data, please contact us at cs@atlasoptions.io.

1. Who We Are

ATLAS Options ("ATLAS," "we," "us," "our") is operated by Cornerstone Strategy LLC ("Company"), a limited liability company. Our platform provides options trading analytics, educational content, paper-trading tools, and AI-driven market analysis through our website at atlasoptions.io and related mobile applications.

Contact:

Email: cs@atlasoptions.io
Address: 732 Owens River Drive, Oxnard CA 93036
Privacy Inquiries: cs@atlasoptions.io

2. Information We Collect

2.1 Information You Provide

Account Information: email address, password (hashed), display name (optional)
Subscription Information: billing details processed by Stripe (we do not store credit card numbers)
Communication Preferences: email and SMS opt-ins, digest frequency settings
User-Generated Content: position notes, entry theses, watchlists, custom book names

2.2 Information Collected Automatically

Usage Data: pages visited, features used, time spent
Device Information: browser type, operating system, screen resolution, mobile device identifiers
IP Address: approximate geolocation, security logging
Cookies and Similar Technologies: as detailed in our Cookie Policy

2.3 Information from Third Parties

Stripe: subscription status and payment events (transactional metadata only)
OpenRouter / Anthropic: AI inference logs (no personal identifiers in our prompts)
Twitter (when integrated): account verification only

2.4 What We Do NOT Collect

Social Security numbers
Bank account numbers
Brokerage account credentials
Real trading data from external accounts
Sensitive personal information (race, religion, sexual orientation, health data, etc.)

3. How We Use Your Information

We use information to:

Provide the Service: authenticate users, deliver paper-trading features, generate AI analysis, send subscription notifications
Improve the Service: debug issues, measure feature adoption, optimize performance
Communicate with You: subscription updates, optional newsletters and Vega digest emails (you can opt out at any time)
Process Payments: through Stripe; we never see your card numbers
Ensure Security: detect fraud, prevent abuse, comply with legal obligations
Comply with Law: respond to lawful requests, prevent prohibited activity

We do NOT sell your personal information to third parties.

4.1 Service Providers

We share information with vendors who help us operate ATLAS:

Stripe — payment processing
DigitalOcean — infrastructure hosting (US-based)
OpenRouter / Anthropic — AI inference (anonymized prompts)
Resend — transactional email delivery
Twilio (when SMS launches) — SMS alerts
Cloudflare — DNS and DDoS protection
Google Analytics (anonymized) — usage analytics

These vendors are contractually obligated to use your data only to provide services to us.

4.2 Legal Requirements

We may disclose information when required by law, court order, subpoena, or legitimate government request. We will challenge overbroad requests when feasible.

4.3 Business Transfers

If ATLAS is acquired, merged, or sells substantial assets, your information may transfer to the successor entity, subject to this Privacy Policy.

4.4 Aggregated/De-Identified Data

We may share aggregated, anonymized data (e.g., "5,000 users opened bull put spreads in March") that cannot identify any individual.

5. Data Retention

Account Data: retained while your account is active, plus 30 days after deletion request
Position Data: retained until you delete or 7 years after account closure (financial record retention)
Subscription/Billing Data: 7 years (tax/compliance)
Logs: 90 days for security and debugging
Marketing Data: until you unsubscribe

6. Your Rights and Choices

6.1 California Residents (CCPA/CPRA)

You have the right to:

Know what personal information we collect
Request deletion of your information
Opt out of "sale" or "sharing" (we do not sell, but you may opt out of analytics)
Correct inaccurate information
Limit use of "sensitive personal information" (we do not collect this category)
Non-discrimination for exercising these rights

To exercise rights, email cs@atlasoptions.io with subject "CCPA Request."

6.2 EU/UK Residents (GDPR)

If you are in the EU/UK, you have the right to:

Access your data
Rectify inaccurate data
Erase your data (right to be forgotten)
Restrict processing
Object to processing
Data portability
Withdraw consent
Lodge a complaint with your supervisory authority

Our legal basis for processing is: contract performance (providing the Service) and legitimate interest (security, analytics).

6.3 All Users

You may at any time:

Update your account in /settings
Unsubscribe from marketing emails
Delete your account (settings → Danger Zone)
Request data export (cs@atlasoptions.io)

7. Children's Privacy

ATLAS is not directed at children under 18. We do not knowingly collect data from children under 13 (COPPA). If we become aware that a child has provided us with information, we will delete it promptly.

8. Security

We implement reasonable security measures:

TLS encryption for all data in transit
Hashed passwords (bcrypt or argon2)
Stripe handles all payment card data (we never see it)
Database access controls with audit logging
Regular security review of infrastructure

No system is perfectly secure. In the event of a breach affecting your data, we will notify you without unreasonable delay and as required by applicable law.

9. International Data Transfers

ATLAS is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US, which may have different privacy laws than your country.

10. Cookies and Tracking

See our Cookie Policy at /privacy#cookies for details on the cookies we use, their purposes, and how to control them.

11. Third-Party Links

ATLAS may link to third-party websites. We are not responsible for those sites' privacy practices. Review their policies before sharing information.

12. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via email and an in-app notice at least 30 days before taking effect. The "Last Updated" date reflects the most recent revision.

13. Contact Us

For privacy questions or requests:

Email: cs@atlasoptions.io
Mail: 732 Owens River Drive, Oxnard CA 93036

Version Note: This Privacy Policy is currently DRAFT 1.0 pending legal review. Revisions are expected before final publication.