Privacy Policy
Effective Date: July 23, 2026
This Policy describes the processing of personal data in the Gamma Force Trading service under Brazil's Lei Geral de Proteção de Dados (LGPD). Acceptance of the Terms records agreement with the service contract. Acknowledgement of this Policy records that the notice was made available. Neither record is consent for future marketing or other non-essential processing.
1. Controller and privacy contact
Legal controller name: [REQUIRED BEFORE PUBLICATION: legal name / corporate name of the controller].
CNPJ: [REQUIRED BEFORE PUBLICATION: controller CNPJ].
Registered address: [REQUIRED BEFORE PUBLICATION: full business address].
Data Protection Officer / Encarregado channel: [REQUIRED BEFORE PUBLICATION: name or role, privacy email address, and alternative contact channel].
Until the required contact channel is published, authenticated account holders may submit an access, correction, deletion/anonymization, portability, sharing-information, or objection/revocation request in Profile → Privacy Rights. This is an operational channel and does not replace the required public Encarregado contact.
2. Data, purpose, legal basis, recipients, and retention
| Purpose | Data categories | Legal basis | Recipients and retention |
|---|---|---|---|
| Account, authentication, dashboard access, billing, and support | Name, document number, email, phone, country, password hash, account state, support content, and local billing summary. | Performance of the contract. | Gamma Force Trading systems; Stripe for payments; support and hosting operators described below. Kept while the account or contract is active and afterwards only under a documented retention criterion. |
| Fraud prevention, security, session and connection limits, and security logs | Account identifier, random session/token binding, client category, timestamps, and, when relevant to a security event, IP address and user-agent information. | Legitimate interest, limited to protecting accounts and the Service. | Authorized security/operations personnel and the hosting/edge operators. Active session state is removed on logout or invalidation; other log periods follow the retention matrix and require documented review. |
| Fiscal, regulatory, accounting, and legal obligations | Local billing records, payment status, invoices or transaction references where retained, and account data necessary for the obligation. | Legal or regulatory obligation. | Authorized finance/legal personnel and Stripe. The applicable retention period must be confirmed by the controller's legal and accounting owners before automated deletion. |
The Service does not currently enable visitor analytics or marketing. If either is introduced, it must first have a documented purpose and legal basis, clear transparency, and a separate, granular, revocable opt-in record with purpose, version, timestamp, and source. It must never be bundled with Terms, this Policy, account access, billing, or security.
3. Operators and international transfers evidenced by the project
| Operator / system | Function and data category | Location / transfer safeguard evidenced here |
|---|---|---|
| Stripe | Hosted Checkout, Billing, payment and subscription processing; account contact data and payment/billing identifiers required for the transaction. Card data is handled by Stripe, not stored by this application. | The repository does not establish Stripe's processing location or store an executed transfer instrument. The controller must verify the applicable location and document the LGPD Art. 33 safeguard before the transfer. |
| Cloudflare | Production edge/proxy and firewall tooling; technical request traffic and security-related network data necessary to protect the public service. | The repository documents Cloudflare edge tooling but not the selected data location or transfer instrument. The controller must verify and document the applicable safeguard before production use. |
| IONOS VPS | Documented production VPS hosting; application databases, runtime files, and application logs stored by the Service. | The repository documents IONOS VPS operations but not the contracted region or transfer instrument. The controller must verify and document both before publishing a final transfer statement. |
| SMTP service on the application host | Transactional account and support email; recipient email address and message content. | Configuration defaults to localhost SMTP. No external email relay provider, location, or transfer safeguard is identified in the repository; any configured relay must be added to this Policy and the retention matrix before use. |
| Application databases and logs | SQLite account, ticket, billing, and administrative data; operational logs. | Self-operated application storage on the documented hosting environment. No SaaS observability or external object-storage provider is identified in the current codebase. |
We do not sell personal data or use it for advertising. We disclose data when legally required or necessary to protect rights, safety, or the Service, subject to applicable law.
4. Security and session controls
Session and connection controls use the minimum account-scoped data needed to authenticate access, apply the individual-account rule, invalidate tokens, and investigate abuse. They do not use device fingerprinting, external IP geolocation, precise location, or cross-site identifiers.
5. Cookies
Necessary first-party cookies. The application currently uses only the cookies needed to deliver and secure the Service:
session: a signed cookie that maintains authentication state, CSRF state, flash messages, account/session replacement controls, and related security state.remember_token: issued only when a user selects the remember-me option; it restores that user's authenticated session securely.language: stores the language explicitly selected by the user so that the requested interface language is retained.
The application does not currently enable visitor analytics or marketing cookies, and therefore does not provide a visitor-analytics consent or preference panel.
This statement covers cookies set by this application only. Stripe Hosted Checkout or Billing, Cloudflare security/challenge controls, and any captcha, chat, or other third-party service if activated may set their own cookies. Those provider cookies have not been independently verified in a production browser for every applicable flow; the controller must verify and classify them, update this notice, and obtain opt-in where required before making a contrary claim or activating a non-essential category.
6. Your LGPD rights and account deletion
You may request confirmation of processing, access, correction, anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data, portability, information about sharing, and objection to processing that does not comply with the LGPD. Authenticated users can submit a request and download a structured JSON export in Profile → Privacy Rights. The export excludes passwords and hashes, session and API tokens, secrets, internal Stripe identifiers, security/admin logs, and data about other users. The Service may send a minimal status email when a request is received or updated; it does not send personal-data exports by email attachment.
The Service currently has no consent-based processing to revoke. If such processing is introduced, Gamma Force Trading will reassess the purpose and legal basis and provide the applicable consent and revocation controls before activation.
Deleting an account deactivates access immediately and revokes active access tokens. It does not automatically erase records that may be retained under a legal, regulatory, contractual, security, or defense-of-rights obligation. The controller will apply anonymization or deletion only after the documented applicable retention period. To prevent repeated use of the free trial after deletion, the Service may, under legitimate interest and only when this control is enabled, retain a secret-keyed HMAC of the prior account email for 90 days. It does not use raw CPF or email, IP address, location, device fingerprinting, or visitor tracking for this check. An affected authenticated user may request human review of the automated trial decision in Profile → Privacy Rights.
7. Policy changes and contact
A new Policy version is published with its effective date. Existing accounts are not retroactively recorded as having acknowledged a new version. When a new acknowledgement or contractual acceptance is necessary, the Service must present an explicit, auditable decision before restricting dashboard access.
For privacy questions and rights requests, use Profile → Privacy Rights while authenticated, or the Encarregado contact listed in Section 1 once the controller publishes it.
8. Children's privacy
Our Service is not directed to children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.
Terms of Service
Gamma Force Trading
Effective Date: July 23, 2026
These Terms of Service ("Terms") govern your access to and use of the GEX analytics platform (the "Service") operated by Gamma Force Trading ("we," "us," or "our"). The Service provides institutional-grade options analytics, allowing users to visualize Gamma Exposure in real time across SPX, NDX, QQQ, and SPY and to identify critical support and resistance levels, institutional flow, and potential market turning points.
By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, you must not use the Service.
1. Eligibility
You must be at least 18 years old to use the Service. The Service is available worldwide with no country restrictions. By using the Service, you represent and warrant that you meet these eligibility requirements.
2. Account Registration and Security
To access certain features of the Service, you must create an account. You agree to provide accurate and complete information during registration and to keep it updated.
- Your account credentials (username/email and password) are personal and may not be shared with any other person.
- You are fully responsible for all activity that occurs under your account.
- You must notify us immediately of any unauthorized use of your account.
- We may enforce concurrent dashboard session and connection limits by client category: one active desktop HTTP session and up to two active mobile HTTP sessions. A new desktop session may replace the previous desktop session; its tokens can be invalidated and its dashboard connection disconnected. Tabs in the same session remain subject to the connection limit (up to eight desktop sockets or two mobile sockets).
3. Free Trial
Eligible new users receive one 15-day free trial. During the trial period, you have full access to the Service at no cost. Unless you cancel before the trial ends, your subscription will automatically convert to a paid monthly plan. A prior free trial may make a new account ineligible through the email-only, 90-day anti-abuse control described in the Privacy Policy; this does not block account creation or a paid subscription, and authenticated users may request human review.
4. Subscriptions and Payments
- The Service is offered on a monthly subscription basis.
- Current pricing is available on our pricing page.
- Payments are processed securely through our payment provider, Stripe.
- Subscriptions renew automatically each month unless you cancel.
- You may cancel your subscription at any time through your account settings. Cancellation takes effect at the end of the current billing period.
- We offer a 7-day money-back guarantee from the date of your first paid subscription. To request a refund, contact our support team.
5. Intellectual Property
All content, analyses, graphs, data, Gamma Exposure visualizations, and other materials provided through the Service are owned exclusively by Gamma Force Trading and are protected by copyright and other intellectual property laws.
You are granted a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your personal, non-commercial trading purposes only during your subscription period.
You may not:
- Save, download, export, copy, or store any analyses, graphs, or data.
- Share, distribute, or repass any content from the Service to others.
- Use any part of the Service for commercial purposes.
- Scrape, crawl, reverse engineer, decompile, or attempt to extract the underlying data or technology.
- Redistribute, resell, or provide access to the Service, or any portion of it, to any third party.
6. Prohibited Conduct
You agree to use the Service only for lawful purposes and in a manner consistent with good conduct in financial markets. You may not:
- Resell or attempt to resell access to the Service.
- Use the Service in any way that violates these Terms or applicable laws.
- Attempt to interfere with the proper functioning of the Service.
7. Important Disclaimers - Investment Information
THE SERVICE IS PROVIDED FOR INFORMATIONAL AND EDUCATIONAL PURPOSES ONLY.
- The Service is not investment advice, financial advice, or a recommendation to buy, sell, or hold any securities or financial instruments.
- We do not guarantee any profits, results, or specific market outcomes.
- Past performance is not indicative of future results.
- All market data, including Gamma Exposure information, may contain delays, inaccuracies, or errors.
- You assume all risk of any loss or financial consequence resulting from your use of the Service or any trading decisions you make.
You are solely responsible for your own investment decisions and should consult with a qualified financial advisor before making any trades.
8. Limitation of Liability
To the maximum extent permitted by law, our total liability to you for any claim arising out of or related to these Terms or the Service shall not exceed the total amount you actually paid us in the twelve (12) months immediately preceding the claim.
We will not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or trading losses, even if we have been advised of the possibility of such damages.
9. Indemnification
You agree to indemnify and hold us harmless from any claims, losses, or damages arising from your violation of these Terms, your use of the Service, or any trading activity you conduct based on information obtained from the Service.
10. Termination
We may suspend or terminate your account at any time, with or without notice, for any reason, including breach of these Terms. Upon termination, your right to use the Service ceases immediately, and you remain responsible for any outstanding payments.
11. Changes to These Terms
We may update these Terms from time to time and publish a new effective date. Existing accounts are not retroactively recorded as accepting a new version. When a new acceptance is required, the Service will present an explicit, auditable decision before restricting dashboard access.
12. Contact Us
If you have any questions about these Terms, please contact us:
Gamma Force Trading
Support: Submit a ticket through our platform's helpdesk