thetaghost
Pre-launch · Vol. 01

The rulesyou set,enforced by thewatcher you pay for.

Thetaghost watches your account read-only and tells you when you’re about to break the rules you set— 21 DTE, 50% PT, ex-dividend assignment, earnings surprises. We catch the phantom legs your bot missed. Rolls thread automatically. Every position carries the voice journal you recorded when you opened it.

Join the waitlistHow it watches
  • read-only IBKR
  • AES-256-GCM per-user keys
  • TOTP mandatory
  • no third-party trackers
scroll
The quiet failures

Most losing trades aren’t bad reads.
They’re bad follow-throughs.

  1. Past 21 DTE. Again.

    Your own rule. The calendar moved. The position kept breathing without you while gamma sharpened.

  2. A leg you didn’t open.

    The broker shows it. Your local journal doesn’t. It sat there for two days before you noticed.

  3. Why the May 29 IC?

    Three weeks ago you had a thesis. Today the rationale is gone. The trade is still open and you’re guessing.

What goes wrong

Four ways every premium-seller
quietly bleeds money.

None of these are exotic. They’re the failures r/thetagang keeps writing the same post-mortems about. Thetaghost watches for each one against the thresholds you authored at signup.

  1. 21 DTE

    “I knew I should’ve closed at 21 DTE. I told myself I would. Wednesday came and gamma stomped me before I checked.”

    Your 21 DTE rule fires 24 hours before. Telegram, push, or email — your channel choice.

  2. 50% PT

    “Hit 50% profit on a put credit spread Tuesday morning. Got busy, didn’t close. By Friday it was a loser.”

    Your 50% PT (set 2026-04-12) hit 4h 12m ago.

  3. ex-div

    “Woke up to 100 shares of AAPL assigned overnight on a covered call. Dividend was the next day. I knew. I forgot.”

    AAPL ex-div in 2 days · 0.24 dividend · short call ITM by $1.10.

  4. earnings

    “Sold the iron condor Thursday. Earnings were Tuesday. I never checked the calendar.”

    AAPL earnings in 3 days. Historical 1-day move: avg 5.1%, max 11.4%.

What you get

Three things no journal app does.

We’re not trying to replace your spreadsheet. We’re trying to catch the failures your spreadsheet can’t see.

Your 50% PTset 2026-04-12
47%50%
01The killer hook

The rules you set, fired the moment they trigger.

21 DTE management. 50% profit-take. Ex-dividend assignment heuristic. Earnings-event-in-window. You set the thresholds during onboarding from a neutrally-worded menu. We watch for them. We never authored a default. We never will.

Per ADR-0008: zero default position-management rules. The product holds no opinion about whether you should take 50% or 75% PT. It only holds your answer to that question, and the date you gave it.

“Finally, someone’s watching the rules I keep ignoring.”

A hand holding a phone, capturing voice rationale at dusk
REC00:24

“…selling the 440/445 call spread, IVR’s in the sixties, scaling out at fifty percent…”

02The differentiator

Voice-first rationale, captured at the fill.

Call a number. Record 30 seconds about why you put the trade on. Deepgram Nova-3 transcribes with finance-jargon keyterm-prompting (“DTE”, “IVR”, “iron condor”, “roll”). Claude Haiku 4.5 extracts thesis, conviction, exit_trigger.

When the close fill confirms three weeks later, the dashboard replays your rationale beside the result. No competitor in the journal category ships this.

“Why the May 29 IC?” — never an unanswered question again.

A constellation of strikes with one phantom leg highlighted in cyan
Apr 10 PCSopened
May 1 ICrolled
May 29 ICopen · gen 3
03The moat

Roll-threading and the integrity engine.

Every options journal silently mis-attributes rolls as two separate trades. We thread them as one continuous lineage. This May 29 IC is the third generation of an Apr 10 put credit spread. Win-rate math becomes correct for the first time.

The same engine diffs your broker against your local journal every 60 seconds. Six detectors run on every snapshot: phantom_leg, quantity_drift, orphan_position, expiry_ghost, broken_combo, partial_close. Caught before they cost you.

“The broker shows it. Your journal doesn’t. We close the gap.”

Thetaghost watches your account read-only and tells you when you’re about to break the rules you set — 21 DTE, 50% PT, ex-div assignment, earnings surprises. We catch the phantom legs your bot missed. Rolls thread automatically. Every position carries the voice journal you recorded when you opened it. We can see your transcripts to power search; we cannot read your audio.

— the launch pitch, in plain words.

How it watches

Three loops. Sixty seconds.
One source of truth.

01

Read-only IBKR connection.

The IBKR API token Thetaghost holds has read-only scope. No placeOrder, no cancelOrder, no modifyOrder. Ever. We’re an observer, not an executor.

When you need to act on something we surface, we deep-link into your TWS. You execute. We never can. This is an architectural invariant under ADR-0003 — breaking it requires a new ADR superseding the old one.

  • no placeOrder
  • no cancelOrder
  • no modifyOrder
02

60-second reconciliation loop.

Every minute, the poller snapshots your broker state and diffs it against your local journal. Six detector classes run on every snapshot. Each detector returns either silence or a structured alert with a severity grade.

  • phantom_legbroker has it, journal doesn’t
  • quantity_driftcontract count moved without a fill
  • orphan_positionleg outlived its combo
  • expiry_ghostexpired position still tracked
  • broken_combomulti-leg structure no longer hedged
  • partial_closehalf the spread closed, half didn’t

last sync OK · 23s ago — the engine wears its reliability publicly. Because if we lie about that, the rest doesn’t matter.

03

Voice in 30 seconds, end-to-end.

  1. 01
    Twilioinbound number takes the call. Up to 60 seconds of audio.
  2. 02
    Deepgram Nova-3streaming transcription with keyterm-prompting on options jargon — sub-7% WER. Zero-retention contract.
  3. 03
    Claude Haiku 4.5structured extract: thesis, conviction, exit_trigger, position_ref.
  4. 04
    AES-GCM in browseraudio blob encrypts client-side with your key before upload. Server stores ciphertext.
Security & privacy

Built paranoid.
On purpose.

Your audio is sent over TLS to our transcription provider (Deepgram) under their zero-retention agreement; once transcribed it is encrypted with your key and we cannot decrypt it. Transcripts are stored server-side to power search. We will never train on them.

Honest seam

There is no zero-knowledge speech-to-text vendor in 2026. We document this on /securityinstead of pretending otherwise. A “Paranoid Mode” with on-device Whisper-tiny ships in v2 for users who refuse server-side transcription.

Read the full security page

  • Read-only broker connection.

    View-only IBKR API. No placeOrder, no cancelOrder, no modifyOrder — enforced at the connector. Ever.

  • Per-user AES-256-GCM with Argon2id-derived keys.

    m=64 MiB, t=3, p=1. Every customer carries their own envelope. Server stores ciphertext. KEKs live in request scope only — never cached.

  • Mandatory TOTP MFA on every account from day one.

    MFA is on, day one, no opt-out for paid tiers. Passwords alone never gate paid surfaces.

  • No third-party trackers in the dashboard.

    No Google Analytics. No FullStory. No Mixpanel. No marketing pixels. The dashboard talks only to us.

  • Bug bounty live from launch.

    Public security page documents the architecture, the seam, and the bounty schedule. We expect to be tested.

Coming next

v0 ships premium-seller core. v0.5 widens the lens. v1 is the audience expansion.

  • PMCC + diagonals support
  • Wheel-strategy assignment alerts
  • Calendar P&L heatmap
  • End-of-week journal export PDF
Early access

For premium-sellers,
by a premium-seller.

Founder runs a paper SPY iron-condor bot on IBKR. Eats his own dog food. We charge for software, not for your data.

$19/ mo
  • Rule-violation alerts on the rules you set
  • Voice rationale capture · unlimited
  • Read-only IBKR · roll-threading · integrity engine
  • Zero-knowledge encryption · TOTP · per-user keys

No credit card. Read-only broker access. Cancel any time.