Privacy Policy (Política de Privacidad)
Last updated: September 2026 • Governed by Spanish Organic Law 3/2018 (LOPD-GDD) and EU Regulation 2016/679 (GDPR / RGPD)
• Operator: Benjamin Perraut
• Location: Madrid, Spain (España)
• Contact Email: benjamin.perraut@gmail.com
1. Nature of the Service & Non-Brokerage Statement
Opcio is a personal cash-secured-put tracker, not a broker, does not execute trades, not investment advice.
- No Trade Execution: Opcio never places, routes, or settles market orders.
- No Custody: Opcio does not hold, handle, or deposit user funds, bank accounts, or financial securities.
- No Financial Advice: All metrics, breakeven numbers, P&L calculations, and AI summaries are for informational logging only.
2. Data We Collect
- Account Identification: Email address and unique authentication ID via Firebase / Google Sign-In.
- Portfolio Records: Option trade inputs (tickers, strike prices, contract quantities, entry/expiration dates, premiums, realized P&L) entered manually or imported via CSV.
- Local Preferences: Interface theme preference (dark/light mode) stored locally in your browser's
localStorage.
3. Zero Trackers & Cookie Policy
Zero Analytics & Zero Marketing Cookies:
- Opcio does NOT use Google Analytics, Meta Pixel, Hotjar, or any third-party behavioral trackers.
- Opcio does NOT use tracking or advertising cookies.
- Opcio does NOT sell, broker, or monetize your personal or financial data.
4. Legal Basis (Art. 6 GDPR)
Processing is based on Article 6.1(b) GDPR (performance of a service requested by the user to maintain their personal CSP tracker) and Article 6.1(f) GDPR (legitimate interest in maintaining application security).
5. Sub-processors & Security
We use reputable, encrypted infrastructure providers:
- Google Cloud / Firebase: Encrypted authentication and isolated Firestore database storage. Strict security rules ensure only your authenticated account can read or write your positions.
- Google Gemini API: Server-side proxy for on-demand AI risk analysis when explicitly requested. Your data is not sold or used for public AI model training.
- Vercel: Web hosting and serverless execution with TLS/HTTPS transport encryption.
6. Data Retention & Deletion Rights
Data is stored only while your account remains active. You can delete individual trades or use the in-app "CLEAR ALL DATA" button to permanently purge all your trades. To delete your entire account, email benjamin.perraut@gmail.com.
7. Exercise of GDPR Rights (Derechos ARCO-POL)
You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. To exercise your rights, email benjamin.perraut@gmail.com.
You may also file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD), C/ Jorge Juan 6, 28001 Madrid (www.aepd.es).