Security
Your trades stay safe, and your money stays yours
The short version: read-only broker access, encrypted credentials, payments handled by Stripe, and records you can take with you any time. The longer version is below.
We can look, we can never touch
Every broker connection is read-only. optiontoolkit reads your fills, assignments and expiries to keep your records straight. There is no code path that places, changes or cancels an order, and no broker permission that would allow it. The app also never tells you what to trade; it checks your own written rules against your own entries.
Your broker password stays at your broker
Connections through SnapTrade happen on your broker's own sign-in page; your password never passes through our servers. For Interactive Brokers, you paste a read-only Flex token instead of a password, and we store that token encrypted (AES-256-GCM) so it is never readable at rest.
Cards are Stripe's job, not ours
Payments run entirely on Stripe. Your card number goes to Stripe and only to Stripe; our servers never see it. Cancelling takes two clicks on the Billing page and your plan runs to the end of what you paid for.
Sign-in without surprises
Sign in with Google, or with an email and password. Passwords are stored as bcrypt hashes, which means we could not read them if we wanted to.
Your records are yours
Every wheel, leg and journal entry exports to CSV in one click, with the derived numbers included. If you leave, you take a complete, spreadsheet-ready copy of your trading history with you.
One place to check the math
Every computed number, from cost basis to annualized return, comes from one shared, unit-tested module. If a figure ever looks off, each wheel's timeline shows exactly which legs produced it.