Comprehensive Privacy Policy

SPIKE Options LLC ("SPIKE", "we", "us") enforces strict data privacy and security protocols for all platform users. This Comprehensive Privacy Policy outlines how we collect, handle, store, and protect user information across our infrastructure, including the Oculus AI builder and the SPIKE automated routing layer.

1. Collected Information Elements

To provision and maintain your algorithmic trading environment, we gather specific structural and personal data:

• Identity & Billing Data: Your name, email address, contact information, and encrypted payment card processing tokens (handled via secure third-party payment gateways).
• API & Brokerage Data: Our platform securely processes the encrypted API connection strings, secret keys, and access configurations necessary to forward automation instructions to your designated external brokerage profiles.
• Telemetry & Usage Data: We automatically log technical diagnostics such as your IP address, browser type, Oculus token utilization rates, and trade execution latency metrics.

2. Data Processing Boundaries

SPIKE utilizes your data strictly to maintain platform stability, deliver core automated routing capabilities, and process your subscription billing.

All quantitative logic and execution information flows remain securely isolated within your private user container.

3. Security and Encryption Protocols

We treat your brokerage API keys and active logic parameters as highly sensitive institutional data. SPIKE implements enterprise-grade security measures, including:

• Encryption at Rest & In Transit: All databases containing personal information and API access tokens are secured using AES-256 encryption. All data transmitted between your browser, SPIKE servers, and your brokerage is secured via TLS 1.3 cryptographic protocols.
• Zero-Trust Architecture: Internal access to production databases is strictly compartmentalized, heavily monitored, and restricted to essential infrastructure engineers.

4. Third-Party Data Sharing

We only share necessary fragments of your data with verified third-party vendors strictly for the purpose of operating our SaaS infrastructure. This includes:

• Cloud Service Providers: (e.g., AWS, GCP) to host the Oculus AI models and SPIKE execution servers.
• Payment Processors: (e.g., Stripe) to securely handle your monthly subscription fees and token top-ups.
• Legal Compliance: We may disclose user information if compelled by a legally binding subpoena, court order, or formal regulatory mandate from entities such as the SEC or FINRA.

5. Analytical Cookies and Tracking

Our web interfaces deploy standard analytics cookies and session tokens to monitor platform performance, authenticate your identity upon login, evaluate page latency metrics, and optimize your overall user interface experience.

These trackers do not monitor your activity outside of the SPIKE ecosystem. You retain the right to manage, block, or deactivate non-essential tracking permissions within your browser’s system preferences, though doing so may degrade certain visual or session-saving functionalities within the Oculus builder.

6. Data Retention and Deletion

SPIKE retains your personal information and API connection configurations only for as long as you maintain an active subscription. Upon account cancellation or termination, your API keys are immediately flushed from our active routing layers to sever your brokerage connection.

We retain basic billing records and limited telemetry data for a standard duration required by corporate tax laws and regulatory compliance obligations, after which the data is permanently purged.

7. User Access and Control Rights

You maintain ultimate control over your data within the SPIKE ecosystem. At any time, through your dashboard settings, you can:

• Update or correct your personal billing information.
• Revoke or delete your native brokerage API keys, instantly halting all automated capabilities.
• Request a complete export of your account data or request full account deletion by contacting our privacy compliance team via our support ticketing system.

8. Policy Modifications

SPIKE reserves the right to update or modify this Privacy Policy as our infrastructure evolves or legal requirements change. Substantive changes to data handling protocols will be communicated to all active users via email or a prominent notification within the SPIKE dashboard prior to the changes taking effect.