Ooln, Inc. (“Ooln,” “we,” “us,” or “our”) is committed to protecting your privacy. This policy explains what information we collect, why we use it, when we disclose it, and the choices available to you.
1. Scope
This Privacy Policy applies to wendy.trade and related pages (the “Website”), Wendy’s hosted market-analysis tools and Model Context Protocol service (“Wendy MCP”), and Wendy Workbench when it becomes available (together, the “Services”).
The Website currently presents product information, demonstrations, and optional email signup forms. It does not connect to a brokerage account, access funds, or submit orders. Wendy MCP provides market-analysis calculations and does not execute trades. The forthcoming Workbench is a separate authenticated product that may connect to supported brokerages and transmit orders only after user review and confirmation.
2. How Wendy works
Website and signup forms
The Website explains Wendy’s products and may let you request launch updates, join the Workbench waitlist, or express interest in a product session. If a signup form is not connected to an approved endpoint, the page says so and does not save the email address.
Wendy MCP
Wendy MCP accepts structured requests for deterministic market calculations such as market regime, technical indicators, support and resistance, price action, expected range, gamma exposure, and strike comparisons. Its production calculation path does not use a large language model, provide personalized investment advice, or execute trades.
Wendy Workbench
Workbench is being developed as an authenticated workspace for researching, planning, managing, and reviewing trades. It may process conversations, market research, trading plans, journals, preferences, connected-broker information, and user-confirmed order instructions. Wendy does not take custody of funds or receive discretion to trade without the user’s authorization.
3. Information we collect
Information you provide on the Website
- Email address when you submit a launch-update or waitlist form.
- Whether you opt in to be contacted about a one-to-one product session.
- Campaign parameters in the page address, such as UTM source, medium, campaign, content, and term, when submitted with a form.
- Messages or other information you send directly to us.
We do not use these Website experiences to collect phone numbers for SMS or automated voice marketing.
Technical and usage information
Our hosting, security, and network providers may process IP address, browser and device information, requested URLs, referring pages, timestamps, and diagnostic or security logs. We may also receive product-event data if we connect the Website’s built-in event interface to an analytics provider in the future.
Wendy MCP information
When Wendy MCP is made available to you, we process authentication and tenant identifiers, the selected tool, structured parameters such as ticker and timeframe, request and response data, timestamps, service status, and usage measurements. Operational audit records are designed to exclude customer messages, response bodies, and free-text arguments. Opaque customer identifiers are hashed before they are used in those audit records.
Workbench account and workspace information
- Identity, contact, authentication, session, profile, and communication-preference information.
- Conversations, prompts, trading plans, journal entries, workspace actions, preferences, and feedback.
- Market, instrument, research, and chart context needed to respond to your requests.
- Subscription status and payment-related identifiers. Payment providers process payment-card details; we do not need to store full card numbers.
Connected-broker information
If you choose to connect a supported brokerage through our brokerage technology provider, we process the connection credentials issued for that integration, a masked account directory, institution and account identifiers, balances, holdings, positions, order previews, orders, execution status, and confirmations as needed to provide the features you request.
Workbench is designed to read balances, holdings, and positions live instead of copying the full portfolio into Ooln’s database. A position you explicitly add to a Wendy trade, along with associated account, institution, plan, order, and lifecycle records, may be stored as durable workspace history. We do not receive your brokerage password.
4. How we use information
We use information to:
- Operate, secure, troubleshoot, and improve the Services.
- Authenticate users and authorized agent clients, enforce permissions, quotas, and rate limits, and prevent abuse.
- Provide requested calculations, research, workspace features, broker connections, order previews, user-authorized order transmission, status updates, and trade review.
- Maintain conversation, plan, journal, position, and order history where the product calls for a durable record.
- Send requested product updates and service communications, and manage communication preferences.
- Measure reliability and performance, investigate data-quality issues, and develop new features.
- Comply with law, enforce our agreements, and protect Ooln, our users, and others.
5. AI and automated processing
Workbench may send prompts and relevant, bounded workspace context to model and research providers so Wendy can produce conversational responses and assist with planning and review. We may also use monitoring providers to evaluate service quality and reliability. Those providers process data for us under their applicable contracts and security terms.
Wendy MCP’s deterministic market-calculation path does not use a large language model. Whether an external AI agent stores or uses a Wendy MCP request or response is controlled by that agent’s provider and is subject to its own privacy terms. Review those terms before connecting Wendy to an external agent.
We may use aggregated or de-identified information to evaluate and improve the Services. We do not use broker credentials or full payment-card information to train AI models.
7. Cookies and analytics
The current Website does not have a third-party analytics provider configured and does not set advertising cookies. It emits limited in-browser product events—such as opening a signup dialog, selecting a market-tool example, or completing a signup—that do not include an email address. Unless an analytics integration is configured, those events remain in the browser.
Our hosting and network providers may still create standard request logs. Authenticated Services may use cookies or similar storage that are necessary for sign-in, security, preferences, and session continuity. If we introduce non-essential cookies or advertising technology, we will update this policy and provide any controls required by law.
8. Retention and security
We retain information for as long as reasonably necessary to provide the Services, maintain account and trade records, honor communication choices, resolve disputes, meet security and audit requirements, and comply with law. Retention depends on the type of record and the service involved. For example, signup records may remain until you unsubscribe or request deletion, while order and transaction-related records may need to be kept longer.
Deleting a draft does not necessarily delete related messages, broker orders, security logs, backups, or records we must preserve. When data is no longer needed, we delete or de-identify it in accordance with our procedures and legal obligations.
We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, access controls, scoped service identities, credential separation, request validation, and monitoring. No system is completely secure, and we cannot guarantee absolute security.
9. Your rights and choices
Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information; object to or restrict certain processing; or appeal a decision about your request. You may unsubscribe from marketing email through the message instructions or by contacting us. Service and security messages may still be sent when necessary.
Eligible California residents may have rights under the CCPA/CPRA, including access, correction, deletion, and non-discrimination. Eligible residents of the EEA, United Kingdom, and Switzerland may also have rights under applicable data-protection law and may lodge a complaint with a supervisory authority. Ooln does not sell personal information or share it for cross-context behavioral advertising.
To make a request, email privacy@ooln.com. We may need to verify your identity and authority before completing it.
10. International use and children
Ooln is based in the United States. Information may be processed in the United States and other jurisdictions where our providers operate. Where required, we use appropriate safeguards for international transfers.
The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us so we can address it.
11. Changes and contact
We may update this policy as the Services develop. We will change the “Last updated” date and provide additional notice when required by law. Material product features may also present more specific privacy disclosures at the point of use.
Ooln, Inc.Privacy Officer
privacy@ooln.com
13500 Lyndhurst St.
Austin, TX 78717