Last updated: April 12, 2026

Privacy Policy

1. Introduction

Navy, a product of Ravariant Labs Inc. ("Navy," "we," "us," or "our"), is committed to protecting your privacy. This policy describes how we collect, use, and protect information when you use navy.sh and related services (the "Services").

Navy automates options collar strategies on high-yield stocks through Alpaca Securities LLC, a FINRA-registered broker-dealer. USDC collateral is locked in a smart contract and routed to the Navy omnibus account at Alpaca Securities. Navy never takes custody of your funds.

2. Data We Collect

  • Account Information. Email, name, entity type, password (hashed), and account preferences.
  • Identity Verification Data. Through our KYC provider (Persona or equivalent): government-issued ID, selfie, date of birth, and residential address. Required by law.
  • Accreditation Data (Pro only). Documentation proving accredited investor status under SEC Rule 506(c): CPA letters, tax returns, brokerage statements, or professional license (FINRA CRD).
  • Alpaca Integration Data. For Automate, limited API access scope (trading only) to your Alpaca account. We cannot withdraw funds to external accounts.
  • Transaction and Position Data. Trades executed on your behalf, position history, and strategy configuration.
  • Device and Usage Information. Browser type, IP address, session state, and interaction patterns.
  • Direct Communications. Emails or messages you send to our support.

3. How We Use Data

  • Service Provision. To execute your chosen options strategy, monitor positions, and distribute yield.
  • Regulatory Compliance. KYC/AML screening, accreditation verification, sanctions screening, and reporting as required by applicable law.
  • Security and Fraud Prevention. Detecting unauthorized access, fraudulent transactions, and malicious activity.
  • Product Improvement. Analyzing anonymized usage trends to improve the platform.

4. Data Sharing

Navy does not sell your personal information. We share data only when necessary:

  • Alpaca. For trade execution, we share trading instructions and identity verification data with Alpaca. Alpaca is FINRA regulated and bound by its own privacy policy.
  • KYC Provider (Persona). Identity verification data is processed by our KYC provider, a SOC 2 Type II certified company.
  • Regulators. When required by applicable law, regulation, or legal process.
  • Service Vendors. Hosting, security, and analytics providers under strict confidentiality agreements.

5. Cookies and Similar Technologies

  • Strictly Necessary. Essential for operation: session management, security, authentication state.
  • Functional. Preferences such as tier selection and interface configuration.
  • Analytics. Anonymized data about how you use the Services.

6. Age Restriction

The Services are not intended for individuals under 18. We do not knowingly collect information from minors. Contact legal@navy.sh if you believe a minor has provided us with personal information.

7. Data Retention

We retain personal information as long as necessary to provide the Services and comply with regulatory requirements (typically 7 years post-account closure for transaction records, as required by broker-dealer regulations). Analytics data is retained in anonymized form.

8. International Transfers

Your information may be transferred to countries other than where you reside. We implement appropriate safeguards for cross-border transfers. By using the Services, you consent to these transfers.

9. Your Rights

Depending on your jurisdiction (GDPR, CCPA, etc.), you may have rights including access, correction, deletion, and opt-out of certain processing. To exercise these rights, contactlegal@navy.sh. Note that some data must be retained for regulatory compliance regardless of deletion requests.

10. Security

We implement industry-standard safeguards including TLS 1.3 encryption, access controls, and security monitoring. Identity documents are processed by SOC 2 certified providers. No transmission method is 100% secure, you are responsible for maintaining the security of your account credentials.

11. Changes

We may update this Privacy Policy at any time. We will update the "Last updated" date when changes are made and notify you of material changes via email or in-app notice.

12. Contact

Ravariant Labs Inc.
Delaware, USA
Email: legal@navy.sh