Account Information: When you register, we collect your name and email address. Passwords are stored as one-way cryptographic hashes — we cannot recover your password.
API Credentials: To connect your brokerage accounts, you provide API keys and credentials. These are stored encrypted on our servers and used solely to execute trades on your behalf.
Trade Data: We log trade executions, including symbol, side, quantity, timestamp, and execution status. This data is yours and is used to power your trade history and analytics.
Usage Data: We collect basic server logs including IP addresses, page views, and feature usage to operate and improve the service.
Payment Information: Billing is handled by Stripe. We do not store your credit card information. Stripe's privacy policy applies to payment processing.
We do not use your data to provide trading signals, investment advice, or share data with third parties for marketing purposes.
Your data is stored on secure cloud infrastructure. We implement the following security measures:
While we take reasonable precautions, no security system is impenetrable. We recommend using API keys with trade-only permissions (no withdrawal access) to limit risk.
We do not sell, rent, or share your personal data with third parties, except:
We retain your account data for as long as your account is active. After account deletion:
You have the right to:
We use minimal cookies — primarily for authentication session management (keeping you logged in). We do not use advertising or tracking cookies.
The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.
If you are located outside the United States, your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.
In the event of a confirmed security incident resulting in unauthorized access to your personal information or stored brokerage credentials, CopyTrade will notify affected users by email within 72 hours of confirming the breach where technically feasible. We will describe the nature of the information affected, steps being taken in response, and guidance on protective actions including revoking API credentials within your broker platform.
You are responsible for maintaining a current email address on your account. Upon any suspected compromise, immediately revoke all API keys connected to CopyTrade directly within your broker platform.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use of the Service constitutes acceptance of the updated policy.
For privacy-related questions or to exercise your rights, contact us at the email address provided on the platform. We will respond within 30 days.