Account Information: When you register, we collect your name and email address, and — if you arrived through an affiliate's link — that affiliate's referral code, so they can be credited. Passwords are stored as one-way cryptographic hashes — we cannot recover your password.
API Credentials: To connect your brokerage accounts, you provide API keys and credentials. These are stored encrypted on our servers and used solely to execute trades on your behalf.
Trade Data: We log trade executions, including symbol, side, quantity, timestamp, and execution status. This data is yours and is used to power your trade history and analytics.
Usage Data: We collect basic server logs including IP addresses, page views, and feature usage to operate and improve the service. Our website is served through Cloudflare, whose Web Analytics counts page visits without cookies.
Login Security: To warn you when your account is logged into from a new browser, each browser you log in from keeps a random identifier, and we store a one-way hash of it (up to 20 per account). When a new one appears, we email you the time, the browser type and the IP address of that login.
Account Activity: So you can check that nothing changed without you, we keep a log of logins, failed login attempts and changes to your account (password, two-factor login, webhook URL, broker accounts and settings), each with its time, browser type, IP address and the country Cloudflare reports for that address. You can see it in Settings → Account activity. Entries are kept for 90 days (at most 200), and deleted with your account.
App Use: Once a day per device, the dashboard tells us whether you're using the installed CopyTrade app or a browser, whether on a phone or a computer, and the phone's system (Android or iPhone) — nothing else, and no device identifier. We use it only to decide which apps to build. It is deleted with your account.
Reviews: If you answer the dashboard's "How is CopyTrade working for you?" question, we keep your star rating and any comment. We show it on our website only if you tick the box allowing that, with the first name you give (or "CopyTrade customer"), never your email. It is deleted with your account, and you can ask us to remove it sooner.
When a Trial or Subscription Ends: CopyTrade stops trading and stops connecting to your broker accounts (except to finish managing a trade that's still open). Your connected accounts and their saved logins are kept for 30 days, so you can come back without setting them up again, then deleted. We email you 7 days before. Your trade history is kept until you delete your CopyTrade account.
Payment Information: Billing is handled by Stripe. We do not store your credit card information. Stripe's privacy policy applies to payment processing.
We do not use your data to provide trading signals, investment advice, or share data with third parties for marketing purposes.
Your data is stored on secure cloud infrastructure. We implement the following security measures:
While we take reasonable precautions, no security system is impenetrable. We recommend using API keys with trade-only permissions (no withdrawal access) to limit risk.
We do not sell, rent, or share your personal data with third parties, except:
We retain your account data for as long as your account is active. When you delete your account (Settings → Delete Account):
Removing a single broker account deletes its saved credentials from our live systems immediately; backup copies expire within 30 days.
You have the right to:
We do not use advertising or tracking cookies. We use one essential cookie to keep you logged in; page scripts can't read it, and it's only sent to copytrade.trade. In your browser's local storage we keep a random browser identifier (for new-login emails), your display preferences, and — if you arrived through an affiliate's link — that referral code for up to 90 days. If you arrived from one of our ads or posts, or from another website, we also keep that link's campaign label (for example "facebook / ad / october") and the name of the site you came from, for up to 90 days; it's sent with your sign-up so we can tell which ads and links bring customers. It stays with CopyTrade — we don't send it, or anything else about you, to Facebook, Google or any other advertiser. If you install the CopyTrade app, a copy of the dashboard page is stored on your device so it can show a message when you're offline.
The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.
If you are located outside the United States, your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.
In the event of a confirmed security incident resulting in unauthorized access to your personal information or stored brokerage credentials, CopyTrade will notify affected users by email within 72 hours of confirming the breach where technically feasible. We will describe the nature of the information affected, steps being taken in response, and guidance on protective actions including revoking API credentials within your broker platform.
You are responsible for maintaining a current email address on your account. Upon any suspected compromise, immediately revoke all API keys connected to CopyTrade directly within your broker platform.
Geographic Restriction: CopyTrade is currently intended for use by residents of the United States, Canada, Australia, and other non-EEA jurisdictions. If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, please do not create an account at this time, as CopyTrade has not yet implemented a fully GDPR-compliant data processing framework.
If you have already created an account and are located in the EEA or UK, you may have rights under GDPR including: right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and to object (Art. 21). Contact us at [email protected] to exercise these rights.
Data Transfers: Data is transferred to and processed in the United States. CopyTrade is working toward implementing Standard Contractual Clauses (SCCs) for international transfers. By using the Service, you consent to this transfer.
Lawful Basis: Processing is based on contract performance, legitimate interests, and consent as applicable under GDPR.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use of the Service constitutes acceptance of the updated policy.
For privacy-related questions or to exercise your rights, contact us at [email protected]. We will respond within 30 days.