Privacy Policy

Version: 2.3.0   |   Last Updated: April 9, 2026

Effective Date: April 9, 2026

Introduction

Frenzy Capital ("we," "us," or "our") operates a financial analytics platform that provides stock market data, options trading analytics, volatility tracking, and AI-powered market analysis tools. We are committed to protecting your privacy and being transparent about how we collect, use, and share your personal information.

This Privacy Policy explains what information we collect when you visit frenzycap.com or api.frenzycap.com, how we use that information, and your rights regarding your personal data.

Who We Are

Frenzy Capital is a financial analytics service provider located in the United States. We provide real-time and historical market data, technical analysis tools, options chain analytics, implied volatility rankings, and AI-generated market commentary powered by large language models.

You can contact us at: [email protected]

Information We Collect

1. Account Information

When you create an account, we collect the following information directly from you:

  • Email address (required) — used for account authentication, verification, and service notifications
  • First and last name (required)
  • Password (required) — stored only in hashed form using bcrypt with per-record salting; the plaintext password is never stored or logged
  • Postal address (required) — street address, city, state, and ZIP code; street address line 2 is optional
  • Phone number (optional)
  • Terms-of-service acceptance record — the version of our Terms you accepted and the timestamp of acceptance, retained as proof of consent
  • Email verification token — a transient single-use token generated during signup and used only to confirm account ownership
  • Account preferences — saved symbols, watchlists, and dashboard settings you configure within the platform

Fields marked required are necessary to create and secure your account; optional fields may be left blank.

2. Usage and Analytics Data

We automatically collect information about how you interact with our platform:

  • Page views and navigation - Which pages you visit and how you navigate the site
  • Search queries - Stock symbols and tickers you search for
  • Feature usage - Which tools and analytics you use (options chains, volatility trackers, etc.)
  • Session data - Login times, session duration, and interaction patterns
  • Device and browser information - Browser type, operating system, screen resolution, and device type
  • IP address and location - Your IP address and approximate geographic location
  • Referral source - How you found our site (search engines, direct visits, referral links)
  • Server access logs - Our web servers record standard HTTP access logs (IP address, timestamp, request path, user-agent, and referrer) for operational, security, and audit purposes under our legitimate interests

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and understand site usage:

  • Essential cookies - Required for login, authentication, and core functionality
  • Analytics cookies - Used by Google Analytics to track site usage and performance
  • Advertising cookies - Placed by Google AdSense to show relevant advertisements
  • Session storage - Temporary data stored locally for the duration of your session

Advertising & Cookies (Google AdSense)

We display ads served by Google AdSense and other third-party ad technology providers. These partners may use cookies, web beacons, or similar technologies to deliver, measure, and personalize ads.

  • Third‑party cookies – Google and its partners use cookies to serve ads based on your visits to this and/or other sites.
  • Personalized vs. non‑personalized ads – Where required by law (e.g., EEA/UK), we obtain your consent before using cookies for personalized advertising. You can withdraw or change your consent at any time via your browser settings or the controls described below.
  • DART cookie – Google’s advertising cookie(s) may enable interest‑based ads. You can opt out of personalized advertising in Google Ads Settings or at the DAA Consumer Choices page.
  • Ad Technology Providers – To learn how Google uses information from sites and apps, see Google’s partner sites policy.

You can control cookies through your browser settings, but disabling certain cookies may limit site functionality.

Consent Management Platform

We use a Consent Management Platform (CMP) integrated with Google Consent Mode v2 to record and honor your cookie preferences:

  • Default state — all non-essential cookies (analytics and advertising) are denied by default until you provide explicit consent through the cookie banner
  • Categories managed — Necessary (always on), Analytics, Advertising, and a Do Not Sell or Share flag for California residents
  • Consent storage — your choice is persisted in your browser's localStorage under the key cmpConsent so the banner does not re-appear on every visit
  • Changing your choice — you may re-open the cookie banner at any time from the privacy preferences link in the site footer and update or withdraw consent without affecting the lawfulness of prior processing

4. Financial Data You View

We log which stocks, options, and market data you view to improve our recommendations and analytics. This includes:

  • Stock symbols and tickers you search for or view
  • Options chains and volatility data you access
  • Charts and technical indicators you generate
  • AI market analysis requests you make

How We Use Your Information

We use the information we collect for the following purposes:

1. Providing and Improving Our Services

  • Operating and maintaining the Frenzy Capital platform
  • Authenticating your account and managing your sessions
  • Delivering real-time market data, options analytics, and volatility tracking
  • Generating AI-powered market analysis and insights
  • Personalizing your experience based on your preferences and usage patterns
  • Optimizing site performance and fixing technical issues

2. Analytics and Research

  • Understanding how users interact with our platform
  • Identifying popular features and areas for improvement
  • Analyzing market data trends and user behavior patterns
  • Training and improving our AI market analysis models

3. Communication

  • Responding to your questions, feedback, and support requests
  • Sending important service updates and security notifications
  • Notifying you of significant platform changes or new features

4. Security and Compliance

  • Protecting against fraud, abuse, and security threats
  • Monitoring for suspicious activity and unauthorized access
  • Complying with legal obligations and regulatory requirements
  • Enforcing our Terms and Conditions

Legal Bases for Processing (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data under the following legal bases: (i) contract (to provide the services you request), (ii) legitimate interests (to secure and improve our services, prevent fraud, and understand usage), and (iii) consent (for non‑essential cookies and personalized advertising where required). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Third-Party Services and Data Sharing

We use several third-party services that may collect and process your data:

1. Google Analytics

We use Google Analytics to understand site traffic and user behavior. Google Analytics collects information such as page views, session duration, geographic location, device type, and referral sources. This data is anonymized and aggregated.

Learn more: Google Privacy Policy

Opt out: Google Analytics Opt-out Browser Add-on

2. Google AdSense

We use Google AdSense to display advertisements on our site. Google AdSense uses cookies to show ads based on your prior visits to our website and other websites on the internet. These ads help us keep the platform free for users.

How AdSense Works:

  • Google uses cookies to track your browsing activity across websites
  • This information is used to show you personalized advertisements
  • Ad partners may collect information about your device, location, and interests
  • You can opt out of personalized advertising at any time

Control Your Ad Experience:

Learn more: How Google uses data when you use our partners' sites or apps

Publisher Policies: We adhere to Google Publisher Policies and require users not to engage in invalid click activity, ad scraping, or interference with ad serving.

3. Google reCAPTCHA

We use Google reCAPTCHA to protect our registration, login, contact, password reset, and email verification forms from automated abuse. When you load a page that uses reCAPTCHA, Google collects information about your interaction with the page (including IP address, mouse movement, device characteristics, and browser behavior) to generate a risk score that tells us whether the request is likely from a human or a bot.

Use of reCAPTCHA is subject to the Google Privacy Policy and Google Terms of Service.

4. Cloudflare

Our site is delivered through Cloudflare, a reverse proxy and content delivery network. This means every request you make to frenzycap.com first passes through Cloudflare's global edge network before reaching our origin servers. As part of providing this service, Cloudflare:

  • Receives your IP address, request URL, user-agent, and other HTTP headers in order to route and cache the response
  • Sets bot-management cookies such as __cf_bm and, in some challenge scenarios, cf_clearance, to distinguish legitimate visitors from automated abuse
  • Caches static assets (HTML, CSS, JavaScript, images) at the edge to improve performance and resilience

Cloudflare acts as a data processor on our behalf. Learn more in the Cloudflare Privacy Policy.

5. Third-Party Content Delivery Networks

To keep page loads fast and reduce bandwidth costs, we load common front-end libraries from public CDNs rather than self-hosting them. When your browser fetches an asset from one of these CDNs, the CDN operator receives standard HTTP request metadata (IP address, user-agent, and referrer) solely to serve the requested file; they do not receive any of your account information.

We note specifically that Google Fonts is loaded from Google-operated domains (fonts.googleapis.com and fonts.gstatic.com) and has been the subject of regulatory guidance in the European Union. If you prefer not to load assets from third-party CDNs, browser extensions such as uBlock Origin or LocalCDN can block or redirect these requests, though doing so may affect site appearance.

6. Market Data Providers

We obtain financial data from third-party providers. When you view market data on our platform, your requests may be logged by these providers in accordance with their privacy policies.

7. Database Services

We use industry-standard databases to store user accounts, preferences, and application data. All data is encrypted at rest and in transit, and processed in accordance with industry-standard security practices.

8. AI Analysis Services

Our AI-powered market analysis uses locally hosted AI models. Market data and news articles are processed through these models to generate insights. No personal user data is sent to external AI services.

We Do Not Sell Your Data

Frenzy Capital does not sell, rent, or trade your personal information to third parties for their marketing purposes. Your email address, account information, and usage data remain confidential and are only used as described in this policy.

Data Storage and Security

Where We Store Your Data

Your data is stored on secure servers located in the United States. We use redundant database infrastructure with regular backups to ensure data availability and integrity.

Security Measures

  • Encryption - All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS)
  • Password protection - Passwords are hashed using bcrypt with strong salting
  • Access controls - Database access is restricted to authorized personnel only
  • Monitoring - We monitor for suspicious activity and security threats
  • Regular updates - We keep our software and dependencies up to date with security patches
  • Breach notification - In the event of a personal data breach that creates a material risk to your rights, we will notify affected users and applicable regulators within the timeframes required by law

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain data for legal or regulatory purposes.

Usage logs and analytics data may be retained in anonymized form for research and improvement purposes.

Your Privacy Rights

You have the following rights regarding your personal data:

1. Access and Portability

You can request a copy of the personal data we hold about you. We will provide this in a structured, machine-readable format (JSON or CSV).

2. Correction

You can update your account information at any time through your account settings. If you need assistance, contact us at [email protected].

3. Deletion

You can request deletion of your account and personal data. We will honor this request within 30 days, subject to legal retention requirements.

4. Opt-Out of Marketing

We currently do not send marketing emails. If we introduce marketing communications in the future, you will have the option to opt out.

5. Cookie Controls

You can control cookies through your browser settings. Note that disabling cookies may limit certain site features.

6. Opt‑Out of Personalized Advertising

You can opt out of personalized ads from Google via Google Ads Settings and more broadly through the DAA Consumer Choices page (or DAAC in Canada and YourOnlineChoices in the EU).

7. Right to Correct

You have the right to request that we correct inaccurate personal information we hold about you (California Civil Code §1798.106 for California residents; GDPR Article 16 for EEA/UK residents). You can update most account fields yourself from your account settings page, or email [email protected] for assistance.

8. Right to Limit Use of Sensitive Personal Information

Under the California Privacy Rights Act (§1798.121), California residents have the right to limit the use and disclosure of sensitive personal information. We treat your account login credentials (email address combined with your password) as sensitive personal information and use them only to authenticate the account holder — never for profiling, targeted advertising, or inferring characteristics about you. Because we do not use sensitive personal information for any secondary purpose, no additional opt-out is required, but you may confirm this by contacting us.

Verifying Your Identity Before We Respond

To protect your account from unauthorized access, we may ask you to verify your identity (for example, by confirming account ownership from your registered email address) before fulfilling an access, correction, deletion, or opt-out request. We will not use information you provide for verification for any other purpose, and we will not share it with third parties.

California Residents (CPRA)

California residents have the right to opt out of the “sale” or “sharing” of personal information for cross‑context behavioral advertising. If we use such technologies, you may exercise your rights by emailing [email protected] with the subject “Do Not Sell or Share My Personal Information”. We will honor your request as required by law.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information held by us
  • Right to correct inaccurate personal information (see §7 above)
  • Right to limit the use and disclosure of sensitive personal information (see §8 above)
  • Right to opt-out of the sale or sharing of personal information (we do not sell or share your data for cross-context behavioral advertising outside the scope described under §California Residents (CPRA) above)
  • Right to non-discrimination for exercising your privacy rights

Categories of personal information we collect (CCPA §1798.140). In the twelve months preceding the effective date above, we have collected or may collect the following statutory categories of personal information:

  • Identifiers — name, email address, postal address, phone number, IP address, account identifiers
  • Customer records information (Cal. Civ. Code §1798.80(e)) — name, address, phone number, and account credentials collected at registration
  • Commercial information — saved symbols, watchlists, dashboard settings, and product-feature usage history
  • Internet or other electronic network activity — pages viewed, search queries, clickstream data, referrer URLs, session duration, and interactions with our tools
  • Geolocation data — approximate location derived from IP address only; we do not collect precise (GPS-level) geolocation
  • Sensitive personal information — account login credentials (email combined with password hash); used only to authenticate the account holder (see §8)
  • Inferences — none; we do not profile users or draw behavioral inferences for advertising or decision-making

To exercise these rights, email [email protected] with "CCPA Request" in the subject line.

European Residents (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and data portability. You also have the right to lodge a complaint with your local data protection authority.

Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Because there is no industry standard for DNT, we do not currently respond to DNT signals. However, you can use browser privacy settings and ad-blocking extensions to control tracking.

Children's Privacy

Frenzy Capital is not intended for users under the age of 18, and our services are not directed to children. We do not knowingly collect personal information from children. We do not knowingly enable interest‑based advertising to users under 18. If you believe a child has provided us with personal data, please contact us immediately at [email protected].

International Data Transfers

If you access Frenzy Capital from outside the United States, your data will be transferred to and processed in the United States. By using our services, you consent to this transfer. We take appropriate safeguards to protect your data in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will update the "Last Updated" date at the top of this page and may notify you via email or a site notification.

We encourage you to review this Privacy Policy periodically. Continued use of Frenzy Capital after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.