Privacy Policy

Last updated: September 2026.

This Privacy Policy explains what personal data CopyTradingSystem (“we”, “us”) collects when you use the website and services, why we collect it, who we share it with, how long we keep it and the choices you have. Our company details are published in the footer of the website. It should be read with our Terms of Service.

1. What we collect

• Account data — your name, email address, an optional username, phone number and address, and your password (stored only as a salted hash, never in readable form).
• Identity verification data — images of an identity document and a selfie, and the result of the check. This is collected and checked by an identity-verification provider on our behalf.
• Financial and activity data — your top-ups, package purchases, refunds, commissions, transfers and withdrawals; the MT5 accounts you connect (broker, server, login number) and the balances the Expert Advisor reports; if you buy the VPS service, the MT5 password you give us for it, kept encrypted and deleted on request or when the service ends, your wallet balances, the crypto addresses you save and use, and the resulting transaction records. Blockchain transactions are public by nature.
• Referral data — who referred you and whom you have referred, so that commission can be attributed correctly.
• Technical data — IP address, browser and device information, sign-in history, the devices you have trusted, and security and audit logs.
• Usage data — which pages you open, which buttons and links you use, errors you meet, and your device, browser and approximate location, collected with Google Analytics and Microsoft Clarity, which also records a replay of how a page is used (see section 6). While you are signed in this is linked to an anonymous account number, never to your name or email address.
• Communications — messages you send to support and the service emails we send you.

2. Why we use it

• To create and run your account and provide the Services (performance of our agreement with you).
• To verify identity, prevent fraud and money laundering, apply sanctions checks and meet our legal and regulatory obligations.
• To keep the Services secure, including detecting unauthorised access and abuse (our legitimate interest).
• To send service messages such as verification codes, security alerts, withdrawal confirmations and changes to our terms. We do not use your data for third-party advertising.

3. Who we share it with

We share data only as needed to run the Services, with providers acting on our instructions: infrastructure and hosting; an email delivery provider; an identity-verification provider; and a crypto payment gateway that processes deposits. We also disclose data where the law requires it, to respond to a lawful request from a competent authority, or to protect our rights and the safety of others. We do not sell personal data.

4. International transfers

Our providers may process data in countries other than where you live. Where we transfer personal data internationally we use safeguards appropriate to the law that applies to you.

5. How long we keep it

We keep your data while your account is open and afterwards for as long as the law requires us to keep identity, transaction and compliance records, and as needed to resolve disputes and enforce our terms. When a retention period ends we delete or anonymise the data.

6. Cookies

We use the cookies the Services need to work: a session cookie that keeps you signed in, a device-trust cookie if you choose to remember a device, and, while the site is in private preview, an access cookie. We also use Google Analytics, which sets its own cookies (_ga and _ga_ followed by an identifier) so that we can measure how the Services are used and fix what does not work. Google processes this data on our behalf. We have switched off Google’s advertising features and we do not use advertising cookies. We never send Google your name, your email address or anything you type into a form. We also use Microsoft Clarity, which records how pages are used (clicks, scrolling and a replay of the screen) so that we can improve the Services; it sets its own cookies (_clck and _clsk), and Microsoft processes the data on our behalf. We use it only on the public pages (the home page, the information and legal pages and the blog): never inside your account and never on administration pages. If your browser sends a Global Privacy Control or Do Not Track signal, we switch Google Analytics and Microsoft Clarity off for you: nothing is collected and none of their cookies is set.

7. Security

We protect your data with access controls, hashed passwords, optional two-factor authentication, email confirmation of withdrawals and monitoring for abuse. No system is perfectly secure; please keep your credentials safe and tell us at once if you suspect a problem.

8. Your rights

Depending on where you live, you may have the right to access the data we hold about you, to have it corrected, to have it deleted, to object to or restrict some processing, and to receive a copy in a portable format. Some data we must keep by law and cannot delete on request. To use these rights, contact us through the support contact published on the website. You may also complain to the data-protection authority where you live.

9. Children

The Services are not for anyone under 18, and we do not knowingly collect data from them.

10. Changes

We may update this policy. We will publish the new version with its date and, for a material change, tell you through the Services or by email.