1. Scope and controller
This Privacy Policy applies to the PipCopier website, dashboard, API, Telegram connection, MetaTrader connection, and related support or account-access workflows.
PipCopier is currently a private, invite-only service. The operator or administrator identified in your invitation, onboarding communication, or service order is responsible for the personal information described here. Privacy requests can be sent through that same administrative contact.
2. Information we process
Account and access information: email address, optional name and access-request note, password hash, role, account status, login and password-reset records, and security audit events. We do not store your plaintext password.
Telegram information: phone number, encrypted Telegram authorization session, selected channel identifiers, channel names and URLs, message identifiers, message text, reply relationships, and media type. When a relevant signal contains an image, the image may be downloaded temporarily for analysis.
Trading and terminal information: broker symbols, account currency, balance and equity data used for sizing and display, trade mode, connector version and heartbeat status, order tickets, symbols, direction, entry, stop-loss, take-profit, lot size, fills, closures, profit or loss, and risk settings.
AI processing information: provider and model settings, encrypted user-supplied API credentials, signal text or images submitted for parsing, structured results, confidence and reasoning fields, verification outcomes, token usage, estimated cost, and short-lived response-cache records.
Technical information: essential session and CSRF cookies, request timing, error details, rate-limit events, and operational logs needed to secure, diagnose, and maintain the service.
3. How we use information
We use information to authenticate accounts; connect the Telegram sources you select; interpret, verify and route signals; calculate risk; communicate with your connector; reconcile broker activity; provide reviews, audits and performance statistics; prevent duplicate execution; investigate errors; and protect the platform.
Where applicable, processing is based on performing the service you requested, protecting legitimate security and reliability interests, complying with legal obligations, or your consent where consent is required.
4. Service providers and disclosures
Information may be processed by infrastructure and database hosting providers, transactional email providers, Telegram, and the AI provider you configure. If OpenRouter is selected, signal content is sent through OpenRouter and may be routed to the model provider shown in your AI settings.
Your MetaTrader terminal and broker account remain outside PipCopier’s custody. The connector exchanges execution and account-state information with PipCopier, but PipCopier does not receive or store your broker password.
We may disclose information when required by law, to protect users or the service, or as part of a business reorganization subject to appropriate safeguards. We do not sell personal information or use signal content for third-party advertising.
5. Retention
Account, signal, trade, review, audit and security records are retained while your account is active and afterwards where reasonably necessary for security, dispute resolution, legal compliance, execution integrity, and system improvement. Some AI cache records expire automatically after a limited period.
Because trading records form an integrity trail, deleting a Telegram channel may remove related records through database relationships. Before requesting deletion, export anything you are required to retain. You may ask the administrator who issued your invitation to close your account or review a deletion request.
6. Security
PipCopier uses encrypted storage for Telegram sessions and user-supplied AI keys, hashed passwords and one-time tokens, secure HTTP-only session cookies in production, CSRF protection, scoped account access, and audit logging.
No online system is completely secure. You are responsible for protecting your email account, Telegram account, AI credentials, bridge secret, VPS, MetaTrader installation, and devices, and for reporting suspected unauthorized access promptly.
7. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to a data-protection authority. Some rights are subject to legal exceptions and identity verification.
You can disconnect Telegram from the dashboard, rotate your bridge secret or AI key, deactivate channels, and sign out of your session. Contact the administrator identified during onboarding for account-level privacy requests.
8. International processing, age and changes
Service providers and model routes may process information in countries other than your own. Data-protection standards can differ between countries. Use only providers and model routes whose terms are acceptable for your signal content.
PipCopier is intended only for adults legally able to trade and enter contracts. It is not directed to children. We may update this policy as the product, providers, or law changes; the date above identifies the current version.