Privacy Policy

Last updated: July 19, 2026

1. What we collect

Account data (name, email, hashed password); trading configuration (broker connections, accounts, copier groups, risk settings); activity records (orders, fills, positions, audit logs); billing status from our payment processors; and technical data (IP address, timestamps) for security and rate limiting. Broker credentials you provide are encrypted (AES-256-GCM) before storage and are never exposed to your browser or third parties.

2. What we do NOT collect

We never see or store your card number or PayPal credentials — payments are handled entirely by Stripe and PayPal. We do not sell or rent personal data to anyone, and we use only essential cookies (session authentication); no advertising trackers.

3. How we use data

To operate the copier engine and your account; to enforce security (rate limits, session management, audit trail); to process subscription billing; and to comply with legal obligations. Legal bases: performance of contract, legitimate interests in securing the Service, and legal compliance.

4. Sharing

Data is shared only with processors necessary to run the Service: payment providers (Stripe, PayPal), your own brokerage via the connection you configure, and infrastructure/hosting providers — each bound by their own safeguards. We may disclose data if required by law.

5. Retention and deletion

Account and trading records are kept while your account is active and as required for legal, audit and dispute purposes. You may request a copy of your data or deletion of your account by contacting support@copypilotflow.com; some records may be retained where the law requires.

6. Security

Measures include encryption of credentials at rest, hashed passwords (bcrypt), revocable sessions, role-based access, rate limiting, security headers and a complete audit trail. No system is perfectly secure; notify us immediately of any suspected breach of your account.

7. Your rights

Depending on your jurisdiction (e.g., GDPR, CCPA, Israeli Privacy Protection Law), you may have rights to access, correct, export or delete your personal data and to object to certain processing. Contact support@copypilotflow.com to exercise them.

8. Changes

We will post any changes to this policy on this page with an updated date; material changes will be notified in the app or by email.