Privacy Statement

This Privacy Statement explains how CopycatTrader in formation, trading as CopycatTrader, collects, uses, stores, shares, and protects personal data in connection with the Platform.

The controller for the personal data described in this Statement is: CopycatTrader in formation Email: privacy@copycattrader.io Support: support@copycattrader.io

This Statement applies to personal data relating to:

1. website visitors;
2. waitlist registrants;
3. account holders;
4. Copycats;
5. Gurus;
6. administrators; and
7. individuals who contact us or interact with our communications.

We may collect and process the following categories of personal data.

3.1 Identity and Account Data Name, display name, email address, user role, account identifiers, profile details, and account preferences.

3.2 Country and Access Declaration Data Declared country of residence, restricted-access declarations, acceptance timestamps, policy version data, and related access confirmations.

3.3 Technical Access and Security Data IP address, IP-derived geolocation country, session information, browser data, device signals, login events, security logs, geolocation check status, mismatch flags, block reasons, and related enforcement records.

3.4 Broker Integration Data Broker name, connection type, broker account identifier or sub-account identifier, PAMM or strategy identifiers where applicable, technical integration metadata, and related linkage data.

3.5 Trading and Analytics Data Trade timestamps, symbols, direction, price data, volume, PnL data, allocation data, high-water mark logic data where relevant, and audit-trail data needed to operate the Platform.

3.6 Public Profile Data Biography, avatar, social links, verification indicators, referral code, and public performance metrics where enabled.

3.7 Payment and Subscription Data Stripe customer identifiers, subscription status, billing status, invoice and payment events, billing-country indicators where available, and related subscription records.

3.8 Communications Data Support emails, tickets, marketing preferences, waitlist entries, service notifications, and aggregate campaign data.

3.9 Usage Data Page views, clicks, navigation paths, timestamps, browser type, device type, operating system, and cookie or similar identifiers.

At this phase, CopycatTrader does not intend to operate a full KYC or identity-document verification workflow. We do not state that we verify identity or residency through passports, ID cards, utility bills, or similar documents as part of ordinary onboarding.

We collect personal data:

1. directly from you;
2. automatically from your browser, device, and session;
3. from supported broker integrations;
4. from authentication and infrastructure providers;
5. from payment providers such as Stripe;
6. from analytics and email providers; and
7. from social platforms you choose to link.

Where GDPR or similar law applies, we rely on one or more of the following legal bases: contract, legitimate interests, legal obligation, and consent where required.

We use personal data for the following purposes.

6.1 To Provide the Platform To create accounts, authenticate users, connect brokers, relay signals, display analytics, and operate subscriptions. Legal basis: contract.

6.2 To Enforce Geographic Restrictions To determine whether an account is permitted under our allowlist model, including through country declarations, IP-derived location checks, billing-country indicators, mismatch checks, and enforcement logs. Legal basis: legitimate interests and legal obligation where applicable.

6.3 To Maintain Security and Prevent Abuse To detect circumvention, fraud, unauthorized access, account misuse, and policy violations. Legal basis: legitimate interests and legal obligation where applicable.

6.4 To Manage Subscriptions and Billing To create and manage Stripe billing, subscription status, failed-payment events, and related account access decisions. Legal basis: contract and legitimate interests.

6.5 To Communicate with You To send account notices, security messages, service updates, support replies, and, where permitted, marketing communications. Legal basis: contract, legitimate interests, and consent where required.

6.6 To Improve the Platform To understand product usage, troubleshoot issues, improve features, and measure service performance. Legal basis: legitimate interests and consent where required for non-essential tracking.

If you choose to operate publicly as a Guru, certain information may be visible to other users or publicly accessible, including your display name, avatar, biography, linked social profiles, verification badge, and broker-verified performance statistics.

We use cookies, local storage, and similar technologies for authentication, security, user preferences, and analytics. See our Cookie Notice for more detail.

We do not sell personal data.

We may share personal data with:

9.1 Service Providers Including providers such as:

1. Supabase for database, authentication, and storage;
2. Vercel for hosting and delivery;
3. Stripe for subscription payments;
4. Resend for email delivery;
5. PostHog for analytics; and
6. other providers used for support, security, infrastructure, or operations.

9.2 Brokers and Integrations We may share broker-related identifiers and technical trade-relay data with supported broker integrations to operate the Platform.

9.3 Social Platforms If you choose to link social accounts, relevant data is exchanged with those providers in accordance with your settings and their services.

9.4 Legal and Corporate Events We may disclose personal data where reasonably necessary to comply with law, legal process, regulatory request, law enforcement request, or in connection with audits, financing, mergers, reorganizations, or sale transactions.

Because our infrastructure and service providers may operate globally, personal data may be processed outside your home jurisdiction. Where required by law, we use transfer safeguards intended to legitimize such transfers.

We retain personal data for as long as reasonably necessary for the purposes described in this Statement, including:

1. while your account is active;
2. for a reasonable period after closure;
3. for billing, fraud-prevention, legal, tax, accounting, and evidentiary purposes; and
4. to preserve technical enforcement and audit records.

This may include retention of: declared country-of-residence data, IP-country data, mismatch flags, declaration timestamps, and block or restriction reasons.

We use technical and organizational measures designed to protect personal data, including access controls, authentication protections, session management, and operational logging.

No system is completely secure, and we cannot guarantee absolute security.

The Platform is not intended for persons under 18. We do not knowingly collect personal data from minors.

Depending on applicable law, you may have rights to access, correct, erase, restrict, object to, or port certain personal data, and to withdraw consent where processing is based on consent.

We may request sufficient information to verify your request. We may refuse or limit requests where permitted by law.

You may opt out of non-essential marketing communications at any time using unsubscribe tools or account settings where available. We may still send service, legal, security, and billing messages.

We may update this Privacy Statement from time to time. The updated version becomes effective when posted or on the stated effective date.

For privacy questions or requests, contact: privacy@copycattrader.io