Exactly what CircleOptionLab stores about you, where it lives, and what it never collects.
noindex, so search engines will not list it. Do not rely on it.We hold an email address, a password hash, your plan, and whatever you choose to save inside the product. Analytics here counts screens, not people. We set no cookies. Nothing about you is sent to a third party. We never ask for your broker login.
Your email address, a password (stored only as a PBKDF2-HMAC-SHA256 hash with a per-user salt), your plan and its expiry date. Your password is never stored in a form we can read, and we cannot recover it for you.
Whatever you create in the product: saved strategies (name, symbol, expiry, legs and your notes) and journal entries (date, symbol, direction, quantity, entry and exit price, P&L, and any strategy or emotion tag you add). This is yours; we store it so it is there when you come back.
We record an event name, the screen it happened on, a coarse timestamp, and a per-day visitor hash computed as a truncated SHA-256 of IP, user agent, date and a server secret.
We do not record your IP address, your user agent, any query string, any user id, or anything you type. The visitor hash has the date inside it, so it cannot be linked across days, and there is no route back from it to a person. It answers "how many" and "which screens". It cannot answer "who", and it was built that way on purpose.
There is no third-party analytics service. Nothing about your use of the product leaves our server.
We set none. Your sign-in token is kept in your browser localStorage, not a cookie and is sent only to our own API. That is why you have never seen a cookie banner here — there is nothing to consent to.
We never ask for, receive or store your broker credentials, and there is no place in this product to enter them. Live market data reaches the product through a single read-only Kite Connect session held by us, not by linking your account. The product cannot place, modify or cancel an order on any account, including ours.
On a server we control, in India-facing infrastructure, encrypted in transit by TLS. Access is limited to the people who need it to run the service.
The database is backed up every night and that copy is stored in Microsoft OneDrive. A backup kept on the same machine as the data does not survive the event it exists for, so it has to leave the server — and where it goes is a fact about your data, which is why it is named here rather than described as "secure cloud storage".
Beyond that there is no analytics service, and nothing about you is shared for any commercial purpose.
We keep account data for TO BE CONFIRMED after an account closes, except where a longer period is required of us as a registered Research Analyst. Write to info@5circles.co to ask for a copy of your data, to correct it, or to have it deleted.
If this policy changes materially we will say so in the product rather than only here. The date at the foot of this page is when it last changed.