Legal

Privacy Policy

Effective Date: June 19, 2026  |  Last Updated: June 19, 2026  |  Version 1.0

Tasty Bot Tastic, LLC ("Tasty Bot Tastic," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. By using our platform, you agree to this policy.
Contents
  1. Information We Collect
  2. How We Collect Information
  3. How We Use Your Information
  4. Information We Do Not Collect
  5. Third-Party Service Providers
  6. We Do Not Sell Your Data
  7. Data Retention
  8. Data Security
  9. Cookies and Tracking
  10. Your Rights and Choices
  11. Children's Privacy
  12. International Users
  13. Links to Third-Party Sites
  14. Changes to This Policy
  15. Contact Us

1. Information We Collect

A. Account Information

When you create an account, we collect:

  • Email address
  • Password (stored in hashed form via our authentication provider — we never see your plaintext password)
  • Account creation date and timestamp
  • IP address at time of registration

B. Brokerage Connection Information

To connect our platform to your tastytrade® account, you provide authentication credentials. We store these credentials in encrypted form solely to facilitate automated order execution on your behalf. We do not share your tastytrade credentials with any third party other than tastytrade, Inc. itself during authentication.

C. Trading and Bot Activity Data

We store data generated by your use of the platform, including:

  • Bot configurations (strategy selections, parameters, on/off state)
  • Paper and live trade history (entries, exits, P&L, timestamps)
  • Open positions and order records
  • Account balance history (paper trading simulation only)

D. Usage and Technical Data

We may automatically collect:

  • Log data (page visits, feature usage, error events)
  • Device type, browser, and operating system
  • IP address and general geographic region (country/state level)
  • Session duration and navigation patterns

E. Payment Information

Subscription payments are processed by Stripe, Inc. We do not store credit card numbers, CVV codes, or full payment card data on our servers. Stripe provides us with a tokenized reference and basic billing details (last 4 digits, expiration date, billing zip code) for account management purposes. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

2. How We Collect Information

We collect information in the following ways:

Directly from you

When you sign up, connect your brokerage account, configure bots, or contact us.

Automatically through the platform

As you use the service, the platform logs bot activity, trade executions, and session events.

From third-party providers

Our authentication provider (Supabase) and payment processor (Stripe) pass us account and billing metadata as described above.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account
  • Authenticate you and secure your session
  • Connect to your tastytrade® account and execute automated orders on your behalf
  • Store and display your bot configurations, trade history, and performance data
  • Process subscription payments and manage billing
  • Send transactional emails (account confirmation, password reset, billing receipts)
  • Send service announcements and material updates to these Terms or this Policy
  • Diagnose bugs, investigate errors, and improve the platform
  • Comply with legal obligations

We do not use your trading activity, strategy configurations, or P&L data for any purpose other than operating your account.

4. Information We Do Not Collect

To be explicit about what we do not do:

  • We do not collect your Social Security number, tax identification number, or government-issued ID
  • We do not collect biometric data of any kind
  • We do not access the cash or assets held in your tastytrade® brokerage account — only order execution via the API
  • We do not track you across other websites or apps (no cross-site advertising cookies)
  • We do not collect data from minors under 18 — our service is not directed to anyone under 18

5. Third-Party Service Providers

We work with a small number of third-party providers to operate the platform. Each provider receives only the data necessary to perform their specific function:

Provider Purpose Data Shared
Supabase Authentication & user management Email address, hashed password, session tokens
Stripe, Inc. Subscription billing & payment processing Email address, billing details, subscription status
tastytrade, Inc. Brokerage order routing Your tastytrade credentials (encrypted, for API authentication only)

We do not share your data with any other third parties except as required by law.

6. We Do Not Sell Your Data

We do not sell, rent, lease, or trade your personal information to any third party, for any purpose, ever.

Your trading data, strategy configurations, performance history, and personal information are yours. We use them only to operate your account and improve the service you pay for.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Specifically:

  • Account data — retained while your account is open; deleted within 30 days of a confirmed account deletion request
  • Trade history and bot data — retained for the duration of your subscription plus 90 days after cancellation, to allow for final record review
  • Billing records — retained for 7 years as required by applicable tax and financial recordkeeping laws
  • Log and technical data — retained for up to 12 months, then purged
  • Brokerage credentials — deleted immediately upon account disconnection or account deletion

8. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

  • HTTPS/TLS encryption for all data in transit
  • Encrypted storage of brokerage credentials at rest
  • Password hashing via industry-standard algorithms (managed by Supabase)
  • Access controls limiting who on our team can view user data
  • Regular review of third-party provider security practices

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you use the platform at your own risk. If you believe your account has been compromised, contact us immediately at [email protected].

9. Cookies and Tracking

We use a minimal set of cookies strictly necessary to operate the service:

Session Cookies

Used to maintain your authenticated session. These expire when you sign out or close your browser. Required for the service to function.

Authentication Tokens (localStorage)

Supabase stores a session token in your browser's local storage to keep you signed in across page refreshes. This token is used only to verify your identity with our servers.

We do not use advertising cookies, analytics cookies, or third-party tracking pixels. We do not use Google Analytics or similar services.

10. Your Rights and Choices

You have the following rights regarding your personal data:

Access

You may request a copy of the personal data we hold about you at any time.

Correction

You may update your email address or other account details through your account settings or by contacting us.

Deletion

You may request deletion of your account and associated data. We will process deletion requests within 30 days, subject to our data retention obligations described in Section 7.

Portability

You may request an export of your trade history and bot configuration data in a machine-readable format (CSV or JSON).

Opt-Out of Marketing

You may unsubscribe from non-transactional emails at any time via the unsubscribe link in any marketing email. You cannot opt out of transactional emails (billing receipts, security notices, account confirmations) while your account is active.

To exercise any of these rights, email us at [email protected] with the subject line "Privacy Request." We will respond within 30 days.

11. Children's Privacy

Our service is intended solely for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user under 18 has provided us with personal data, we will delete that information immediately and terminate the account. If you believe we may have information from or about a minor, please contact us at [email protected].

12. International Users

Tasty Bot Tastic is operated from the United States and is primarily intended for U.S.-based users. If you access our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

By using our service from outside the U.S., you consent to the transfer of your data to the United States in accordance with this Privacy Policy.

13. Links to Third-Party Sites

Our platform and website may contain links to third-party websites, including tastytrade, Inc. These sites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the privacy policy of any third-party site you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-platform notification at least 14 days before the change takes effect. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of the platform after the effective date of any update constitutes your acceptance of the revised policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Tasty Bot Tastic, LLC

Email: [email protected]

We will respond to all privacy-related inquiries within 30 days.

© Tasty Bot Tastic, LLC. All rights reserved.

Terms of Service · Home