Your privacy is important to us. This policy explains what information we collect, how we use it, how we protect it, and the rights you have over your data. Plain language wherever possible — legalese only where the regulator requires it.
What we collect
- Email address
- Name (optional)
- Password — hashed with bcrypt, never stored in plain text
- Exchange API keys (AES-256 encrypted at rest)
- Discord / Telegram channel preferences
- Trading settings & risk parameters
- Trade history & execution logs
- Profit / loss records
- Signal history
- Login timestamps
- Feature usage patterns
- Error logs (anonymized)
How we use it
| Purpose | Data used |
|---|---|
| Provide the Service | Account, Config, Trading data |
| Execute trades | API keys, Trading settings |
| Calculate profit share | Trading data, Profit records |
| Send notifications | Email address, Trading events |
| Improve the Service | Usage data (anonymized) |
Data security
🔒 We take security seriously
- API keys are encrypted using AES-256 at rest
- Passwords are hashed using bcrypt
- All connections use TLS 1.3 / HTTPS
- We never request withdrawal permissions for exchange APIs
- Regular security audits and penetration testing
Data sharing
We do not sell your personal information. We may share data with:
- Exchanges & brokers — to execute trades, using the API keys you provide
- Payment processors — Stripe for billing, limited to payment information
- Law enforcement — when legally required, subject to court order or subpoena
Data retention
- Account data — until you delete your account
- Trading history — 7 years (tax / compliance)
- Server logs — 90 days
- Backups — 30 days, then permanently destroyed
Your rights
You have the right to:
- Access — request a copy of your data
- Correct — update inaccurate information
- Delete — request account deletion
- Export — download your data in a standard format
- Restrict — limit how we process your data
To exercise these rights, contact support@signalcopier.io. We respond within 30 days.
Cookies & tracking
We use minimal cookies:
- Essential — session authentication (required)
- Preferences — UI settings like theme + ticker on/off (optional)
We do not use third-party advertising trackers. We use Plausible for privacy-friendly analytics — no cookies, no personal data.
International transfers
Your data may be processed in countries outside your residence. We use Standard Contractual Clauses where applicable to ensure adequate protection.
Children's privacy
Our Service is not intended for users under 18. We do not knowingly collect data from minors.
Changes to this policy
We may update this policy periodically. Significant changes will be notified via email or in-app banner before they take effect.
Contact us
For privacy-related inquiries: support@signalcopier.io.