Privacy Policy

1. Information We Collect

StrikeFlow connects to your brokerage account via the Charles Schwab API using OAuth 2.0. Through this integration we access:

• Account numbers and balances
• Open orders, positions, and trade history
• Options and equity watchlist data
• Real-time and historical market price data

We also collect minimal data needed to operate the service, such as authentication tokens stored in encrypted session cookies, and subscription status if you opt in to a paid plan.

2. How We Use Your Information

We use the information collected solely to:

• Display your brokerage account data, positions, and trading history within the app
• Calculate break-even insights, P&L analysis, and What-If scenarios
• Cache market data temporarily on Azure infrastructure to improve performance
• Process subscription payments via Stripe (if applicable)
• Provide and improve the features of StrikeFlow

We do not use your financial data for advertising, profiling, or any purpose unrelated to operating the application.

3. Data Storage and Security

StrikeFlow is hosted on Microsoft Azure. We apply industry-standard security practices including:

• HTTPS encryption for all data in transit
• Azure Key Vault for secret and credential management
• Short-lived OAuth tokens that you can revoke at any time via your Schwab account settings
• Temporary Azure Blob Storage caching with no long-term persistence of brokerage data

While we take reasonable precautions, no system is completely secure. We encourage you to review and revoke third-party application access in your Schwab account if you stop using the service.

4. Third-Party Services

StrikeFlow integrates with the following third-party services. Each has its own privacy policy:

• Charles Schwab — brokerage data access via OAuth 2.0 (Schwab Privacy Notice)
• Stripe — payment processing for optional subscriptions (Stripe Privacy Policy)
• Microsoft Azure — cloud hosting and blob storage (Microsoft Privacy Statement)

We do not sell, rent, or share your personal or financial data with any other third parties.

5. Data Retention

We do not persistently store your brokerage account data beyond short-lived performance caches. Cached data expires automatically and is not shared. Authentication tokens are session-scoped and discarded when you log out.

6. Your Rights and Choices

You may at any time:

• Log out of StrikeFlow to invalidate your session token
• Revoke StrikeFlow's access to your Schwab account via Schwab's third-party app settings
• Contact us to request deletion of any data we may hold about you

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of StrikeFlow after changes are posted constitutes your acceptance of the updated policy.

8. Contact

If you have questions about this Privacy Policy or your data, please contact us at: MyResumator LLC.