Privacy Policy

1. Who We Are

echo options (“echo,” “we,” “our”) operates the platform at echooptions.io. This policy explains what data we collect, why, and how we handle it.

For any privacy-related questions, contact us at: elliot@echooptions.io

2. What We Collect

3. How We Use Your Data

We use your data to:

• Provide and maintain your account and subscription.
• Run backtests and generate analytics based on your inputs.
• Improve the platform, fix bugs, and develop new features.
• Send transactional emails (account confirmations, billing receipts, service updates).
• Prevent fraud and enforce our Terms of Service.

We do not sell your personal data. We do not use your strategy inputs or backtest configurations to train models or share them with other users, unless you explicitly choose to share them (e.g. via shareable backtest links).

4. Shareable Content

If you generate a shareable backtest link, the strategy configuration and results associated with that link become publicly accessible to anyone with the URL. Do not share links containing information you wish to keep private.

5. Third-Party Services

We use third-party services to operate echo. These providers process data on our behalf and are bound by their own privacy policies:

• Clerk — authentication and account management
• Stripe (or applicable payment processor) — subscription billing and payment processing
• Vercel — frontend hosting
• Railway — backend infrastructure
• Neon — database hosting
• Cloudflare — content delivery and object storage

We only share the minimum data necessary for each service to function. We do not share your strategy data or backtest results with any third party unless required by law.

6. Data Retention

We retain your account and usage data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Anonymised, aggregated data (e.g. platform-wide usage statistics) may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Withdraw consent where processing is based on consent.
• Object to processing based on legitimate interests.

To exercise any of these rights, email elliot@echooptions.io. We will respond within 30 days.

8. Cookies and Tracking

We use essential cookies required for authentication and session management. We do not use advertising or third-party tracking cookies.

If we introduce analytics tools in the future, we will update this policy and provide appropriate notice and controls.

9. Security

We take reasonable measures to protect your data, including encrypted connections (HTTPS), secure authentication via Clerk, and access controls on our infrastructure. However, no system is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Your data may be processed in countries outside your own, including the United States and the United Kingdom, where our infrastructure providers operate. Where required, we ensure appropriate safeguards are in place for such transfers.

11. Children

echo is not intended for anyone under 18. We do not knowingly collect data from minors. If we become aware that we have collected data from someone under 18, we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the platform or email. Continued use of echo after changes take effect constitutes acceptance of the updated policy.