Privacy Policy — Arowana Profits

Information We Collect

We collect: (a) account information (email, and a name if you give one) when you register; (b) trades, watchlists, Want-to-Own tickers and risk limits that you enter or import — including the broker name and account label attached to imported trades; (c) your plan and billing status (plan, subscription state, renewal date and a Stripe customer reference — never your card number, which only Stripe holds); (d) usage data such as which tools you open, to find problems and decide what to build; (e) API keys you choose to add for Ticker Research (for example a Finnhub or Alpha Vantage key), stored in your account.

How We Use Your Information

We use it to run the features you signed up for: scanning your Want-to-Own list and holdings for option candidates, checking your open positions each evening, writing your daily brief, tracking your premium income and cost basis, and warning you when a trade would break the limits you set. We also use it to authenticate you, apply plan limits, provide support, and send account and product notices (not marketing spam).

Automated Processing of Your Positions

Each weekday evening, scheduled jobs read the trades, watchlists and limits in your account to produce your scan results, roll-coach choices and daily brief. This runs on our servers with elevated database access, because it works across all accounts at once. The premium income figures, cost-basis calculations, daily brief and pattern findings are computed arithmetically from your own data — no artificial intelligence model is involved and nothing is sent to an AI provider for those features.

Who Can See Your Data

Other users cannot see your data. Every table enforces row-level security, so an account can only read its own trades, watchlists, scan results and brief; there is no shared or public view of your positions. We should be equally clear about the limit of that: as the operator of the service we hold administrative access to the database and can view account data when troubleshooting, investigating abuse, or running the service. We do not browse account data out of curiosity, and we never sell or rent your personal data or trading history to anyone.

Data Storage

Your data is stored with Supabase (hosted PostgreSQL) with row-level security enabled and encryption at rest. Authentication is handled by Supabase Auth; we never store your password. Scheduled processing runs on n8n Cloud. The site itself is served as static files, and some preferences and drafts are held only in your own browser.

Third-Party Services

Supabase — database, authentication and server functions. Stripe — payments and subscriptions; card details go directly to Stripe and never reach our servers or database. n8n Cloud — scheduled processing of the scans and brief. Financial Modeling Prep and Alpaca — market and option data used to build scan results; we send them ticker symbols only, never your identity, holdings or account details. Finnhub and Alpha Vantage — used only in Ticker Research, and only if you add your own key, in which case those requests carry your key and the ticker you asked about. Anthropic — used only when you send a message to the AI Coach chat; that message and relevant context are processed by Anthropic under their terms. The rest of the product does not call an AI provider.

Cookies and Local Storage

We use browser storage for your session, your plan (cached from the server), tab and display preferences, and some tool state. We do not use third-party tracking cookies, advertising pixels, or cross-site trackers, and we do not run an advertising network.

Your Rights

You can access your data in the product, export your journal and watchlists to CSV, correct your information on the Account page, cancel or change your subscription through the Stripe billing portal, and request deletion of your account and its data. To request deletion, contact us from the email address on your account.

Data Retention

We keep your account data while your account is active. If you delete your account, your personal data and trading records are removed within 30 days, except where we must keep payment and tax records to meet legal obligations. Scan results, coach output and briefs are short-lived by design: they are deleted automatically after 10 to 30 days, since they are rebuilt each evening.

Security

Access to the database is protected by row-level security, sign-in is handled by Supabase Auth, and payment credentials never touch our systems. No service can promise perfect security, and we will tell affected users promptly if we become aware of a breach involving their data.

Children's Privacy

The Platform is not intended for anyone under 18, and we do not knowingly collect data from minors.

Contact

For privacy questions or data requests, email support@arowanaprofits.com from the address on your account, or use the contact details on the Account page. Arowana Profits is operated by Exodon Profits LLC.

Changes to This Policy

We may update this Privacy Policy. Material changes will be announced by email or a prominent notice in the product, and the date below will change.