Privacy Policy

This Privacy Policy explains what information Optimus ("we", "us") collects when you use our forex backtesting platform at theoptimus.org, how we use it, and the choices you have. We collect the minimum we need to run the service, and we do not sell your personal information.

We collect the following categories of information:

• Account information — when you sign in with Google, we receive your name, email address, and profile picture. We never see or store your Google password.
• Session records — each sign-in creates a session record that includes the IP address and browser (user agent) it was created from, so that you can review and end sessions and so that we can detect abuse.
• Backtesting data — the sessions, trades, notes, tags, and chart state you create while using the platform, including the pair, date range, balance, and timezone of each session.
• Billing information — if you subscribe to a paid plan, we store the plan, its status and renewal date, and the customer and subscription identifiers issued by the payment provider. We never receive or store your card number or PayPal credentials.
• Contact messages — if you use the contact form, we store the name, email address, and message you submit, linked to your account if you were signed in.
• Technical data — our web server keeps standard access logs (IP address, requested page, browser type, timestamp) for a short period for security and troubleshooting.

• To operate the platform: authenticate you, store your sessions and trades, and render your analytics.
• To manage your subscription: match payment-provider events to your account and apply the limits of your plan.
• To maintain and improve the product, diagnose problems, and prioritize features.
• To respond to messages you send us and to notify you in the app about important service changes.
• To protect the service against abuse, fraud, and unauthorized access.

We do not use your backtesting data to train models shared with other users, and we do not sell or rent personal information to third parties.

We use a session cookie to keep you signed in after Google authentication. It is required for the platform to function and is not used for cross-site advertising. Your browser's local storage may also hold lightweight preferences, such as your theme, your last selected backtesting session, and a flag that lets the page render the correct sign-in state immediately.

A second cookie records, on your first visit, which campaign link or referring site brought you here — a marketing source and nothing else, never used for advertising or shared with any third party. It is set once and expires after 30 days; if you sign up, that first-touch source is saved against your account so we know which channels actually bring in traders, and it is never overwritten by a later visit.

We measure aggregate usage with Umami, an open-source analytics tool that we host ourselves on the same server as the platform. It records which pages are visited, the country and city derived from your IP address, and your browser and device type. It sets no cookies and stores nothing in your browser. Your IP address is used only to derive that location and a visitor identifier — a hash that cannot be reversed and that changes every month — and is then discarded; it is never stored. None of this data leaves our server or is shared with any third party, and we do not run advertising trackers. When you are signed in, we link this usage data to your account by its internal identifier (never your email or name) so that we can understand how the platform is used and support you; visitors who are not signed in remain anonymous.

We rely on a small number of service providers to run Optimus:

• Google — for sign-in (OAuth). Google's own privacy policy governs the data it processes.
• Payment processors (currently PayPal; Stripe where enabled) — to process subscription payments. They receive the details needed to take payment and tell us whether a subscription is active; we receive only identifiers and status, never card numbers.
• Cloud hosting (Oracle Cloud Infrastructure) — to run our application and store our database.

Each provider only receives the data it needs to perform its function.

Your account and backtesting data are retained while your account is active. Deleting a backtesting session permanently removes that session and all of its trades. Deleting your account removes your sessions, trades, sign-in records, and subscription records; billing records that we are legally required to keep may be retained for the statutory period.

There is no self-service account deletion yet. To delete your account, or to receive a copy of the data we hold about you, send a request through the contact form at theoptimus.org/#contact from the email address on your account, and we will complete it within 30 days.

All traffic is encrypted in transit, customer sign-in is delegated to Google so we never handle your password, and your data is scoped to your account. See our Security page for a full description of our practices.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise these rights through the contact form; we will respond within the timeframe required by applicable law.

Optimus is not directed to children and may not be used by anyone under 18 years of age. We do not knowingly collect personal information from minors; if we learn that we have, we will delete it.

We may update this policy as the product evolves. If we make material changes, we will update the date at the top of this page and, where appropriate, notify you in the app. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

Questions about this policy or your data? Use the contact form at theoptimus.org/#contact and we will get back to you promptly.