VolNinja
Join the waitlist
Back to home

Privacy Policy

Last updated: June 5th, 2026

This Privacy Policy explains how OPTIONMIGHTY LTD ("VolNinja," "we," "us," or "our") collects, uses, and shares information when you use the VolNinja landing site, create a VolNinja account, subscribe, pair a device, run the VolNinja trading engine, and use the VolNinja web app and the cloud services that deliver it (together, the "Cloud Services"). It is incorporated by reference into our Terms of Service. If you do not agree with this policy, please do not use the Service.

1. How VolNinja handles your trading data

VolNinja runs at the broker boundary: the VolNinja trading engine runs on your own computer or your own cloud server and connects to your own brokerage account, while you view and control everything through the VolNinja web app, which we host. What this means for your data:

  • Your broker connection stays with you. Your brokerage credentials and the connection to your broker (for example, Interactive Brokers) live on your own machine. We never receive or store your brokerage credentials, we never take custody of your funds or securities, and we never place trades through any account of our own — every order is sent from your own machine to your own broker. (See the Terms of Service and Risk Disclosure.)
  • We relay your trading data so you can see it. Because you use the VolNinja web app, your trading data — such as positions, orders, fills, and profit and loss — is transmitted through our cloud to deliver it between your machine and your browser.
  • We store some of your data in our cloud to provide the Service. This includes your account and billing information, and may include features such as your templates, strategies, and performance history (which can include position and profit-and-loss data) where these are stored or synchronized through our cloud. Section 2 describes the categories of data we collect and store.
  • We do not sell your data or use it for advertising. We do not sell or "share" your personal information, and we do not run advertising or remarketing trackers against it.

The rest of this policy describes the information our Cloud Services and website collect, use, and store.

2. Information we collect

2.1 Account and identity information. When you sign up we collect your email address, a hashed password (we never store your password in plain text), and, if you enable it, multi-factor-authentication data and recovery codes. We also generate and store authentication and refresh tokens and session cookies.

2.2 Billing information. Paid subscriptions are processed by Stripe. We do not store your full card number; Stripe collects and processes payment details under its own privacy policy. We retain subscription status, plan, and billing metadata necessary to provide and account for the Service.

2.3 Device pairing and tunnel tokens. To connect your local installation to your account and enable secure remote access, we store device-pairing metadata and tunnel tokens (used to authenticate the outbound connection from your machine).

2.4 Trading and performance data. Your trading data (such as positions, orders, fills, and profit and loss) is generated on your own machine and is transmitted through our cloud so that the VolNinja web app can display it to you. We also store, or may store, certain trading-related data in our cloud to provide the Service — including your templates, strategies, and performance history, which can include position and profit-and-loss data. We do not receive or store your brokerage credentials, and we do not place trades through any account of our own (see Section 1).

2.5 Technical and usage information. When you visit the landing site or use the Cloud Services we may collect IP address, device and browser type, operating system, pages viewed, referring URLs, and similar log and analytics data, including via cookies and similar technologies (see Section 6).

2.6 Communications. If you contact support or sign up for updates, we collect the information you provide (such as your name, email, and message).

3. How we use information and communicate with you

We use the information we collect to: create and administer your account; authenticate you and secure the Service (including MFA and fraud prevention); process subscriptions and billing; operate the secure tunnel and device pairing; provide customer support; understand and improve the Service; communicate with you (see below); and comply with legal obligations and enforce our Terms.

Service (transactional) communications. We send you communications that are part of providing the Service — for example, account, security, and sign-in notices; billing and subscription messages; service, maintenance, and outage notifications; responses to your support requests; and notices of changes to our legal terms. Because these are necessary to operate the Service and your account, you cannot opt out of them while you have an account.

Product and marketing communications. When you create an account or sign up, we may also send you: product updates and release notes; product education and how-tos; our newsletter and market insights; invitations to user research and surveys; and offers and special discounts. Every such message includes an unsubscribe link, and you can change your choices at any time through your email preferences or your account settings. Opting out has no effect on the service communications above. Where applicable law requires your prior consent for some or all of these messages, we will rely on that consent. We honor unsubscribe requests promptly and otherwise handle marketing in line with applicable law (including the GDPR/UK GDPR, the U.S. CAN-SPAM Act, and Canada's CASL).

4. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we process personal information on the bases of: performance of our contract with you (providing the Service); our legitimate interests (security, fraud prevention, improving the Service, and sending existing users relevant communications about the Service they use, subject to your right to opt out at any time); your consent (for example, certain cookies, or marketing where the law requires prior consent); and compliance with legal obligations.

5. When and with whom we share information

We do not sell your personal information. We share it only:

  • with service providers / processors who help us run the Service (for example payments, hosting, email, logging, and analytics providers), under contracts that limit their use to providing services to us;
  • for legal reasons, if required by law, subpoena, or regulator, or to protect the rights, safety, or property of VolNinja, our users, or others; and
  • in a business transfer, in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

6. Cookies and tracking technologies

We use cookies and similar technologies (such as web beacons and pixels) for authentication, security, preferences, and analytics. Some cookies are strictly necessary to sign you in and keep you signed in. You can adjust your browser settings to refuse cookies, though parts of the Service may not function properly without them.

7. Data retention

We keep account and identity information for as long as your account is active and as needed to provide the Service, and afterward only as required for legitimate business or legal purposes (such as billing records, dispute resolution, and legal compliance). We delete or de-identify information when it is no longer needed. Trading and performance data we store in our cloud (such as templates, strategies, and performance history) is retained for as long as your account is active and as needed to provide the Service, and you can delete it as described in Section 10. Your brokerage credentials and your broker connection remain on your own machine, under your control, and are not retained by us.

8. How we keep information safe

We use technical and organizational measures designed to protect personal information, including encryption in transit (TLS), hashed passwords, optional multi-factor authentication, httpOnly session cookies, and a tunnel that is authenticated and encrypted. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Children's privacy

The Service is not directed to, and we do not knowingly collect personal information from, anyone under 18 (or the age of majority in your jurisdiction). If you believe a minor has provided us information, contact us and we will delete it.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, to object to certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of "sale" or "sharing" of personal information (we do not sell it) and not to be discriminated against for exercising those rights. To exercise any right, contact us at legal@volninja.com; we will verify and respond as required by applicable law.

Marketing preferences. You can opt out of our product and marketing communications at any time — use the unsubscribe link in any such message or update your account/email preferences (see Section 3). Where we rely on your consent to send marketing, you may withdraw that consent at any time, and where applicable law gives you the right to object to direct marketing, you may exercise it; in each case this will not affect the lawfulness of any processing carried out before you withdrew or objected, and you will still receive the service communications necessary to operate your account.

11. International data transfers

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers. By using the Service you understand your information may be transferred to countries with different data-protection laws than your own.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date reflects the latest version, and material changes will be communicated as required by law. Your continued use of the Service after an update constitutes acceptance.

13. Contact us

Questions, or to exercise your rights: legal@volninja.com · Support: support@volninja.com