1. Information We Collect
This Privacy Policy describes how TradeDupe (“TradeDupe,” “we,” or “us”) collects, uses, and shares information when you use the platform.
We collect the following categories of information:
- Account information: name, email address, and profile details you provide during registration.
- Billing information: payment method details processed through our third-party payment processor (Stripe). TradeDupe does not store full credit card numbers.
- Brokerage credentials and access tokens: your Tradovate account credentials (username, password, and related authentication details) and, where you connect through a delegated-access flow such as OAuth, the access and refresh tokens issued to us by your broker. These are stored in encrypted form using AES-256-GCM encryption and are used solely to connect to your brokerage account, monitor positions, and place, modify, or cancel orders on your behalf as part of the copy trading functionality.
- Fraud and abuse signals: identifiers we use to detect duplicate free trials, prohibited account creation, and payment abuse. These include your email address and normalized variants of it, IP address and approximate location, browser and device fingerprints, payment card fingerprints provided by our payment processor, Stripe customer identifiers, and brokerage account identifiers. See section 6 for how these are used.
- Trading data: information about your connected accounts, positions, orders, execution reports, and trading activity within the platform.
- Usage data: log data, device information, browser type, IP address, pages visited, and interactions with the platform.
- Communications: support messages, feedback, and other correspondence you send to us.
2. How We Use Information
We use your information to provide and improve the platform, process payments, maintain security, communicate account updates, and comply with legal obligations.
3. Data Sharing
We may share information with service providers that help operate TradeDupe, including:
- Tradovate: your brokerage credentials are transmitted to Tradovate's servers to authenticate and execute trades on your behalf.
- Stripe: billing and payment information is shared with Stripe for payment processing.
- Hosting and infrastructure providers: data is stored and processed using third-party cloud services.
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may disclose information if required by law, legal process, or government request, or to protect the rights, safety, or property of TradeDupe or its users.
4. Cookies and Tracking Technologies
TradeDupe uses cookies and similar technologies for the following purposes:
- Authentication cookies: to keep you signed in and maintain your session.
- Preference cookies: to remember your settings and display preferences.
- Analytics: to understand how users interact with the platform and improve our services.
You can control cookies through your browser settings. Disabling cookies may affect platform functionality, including the ability to remain signed in.
5. Administrative Account Access
Authorized TradeDupe administrators may access your account for the purposes of providing customer support, troubleshooting technical issues, and ensuring platform integrity. During administrative access:
- Administrators can view your dashboard, account settings, and connection status. These sessions are read-only — administrators cannot place trades, modify your connections, change your account settings, or perform actions on your brokerage accounts.
- All administrative access sessions, and any action taken during them, are logged and audited — including the identity of the administrator, the time and duration of access, the user account accessed, and the action performed.
- Administrative access sessions are time-limited and automatically expire after one hour.
6. Fraud Prevention, Trial Abuse, and Enforcement
We process certain identifiers to protect the platform against fraud, duplicate free trials, prohibited account creation, and payment abuse. Our legitimate interest in preventing fraud and abuse is the basis for this processing where a legal basis is required.
For these purposes we may record, compare, and store: your email address and normalized variants of it; IP address and approximate location derived from it; browser and device fingerprints; payment card fingerprints supplied by our payment processor (we never receive or store full card numbers); Stripe customer identifiers; and brokerage account identifiers. We use these signals to determine free trial eligibility, to detect multiple accounts operated by the same person, and to enforce account restrictions.
Where an account is terminated for a payment dispute or a breach of our Terms and Conditions, we may retain these identifiers on a blocklist and use them to prevent the same person from creating new accounts or subscriptions. Because this record exists to enforce a restriction, we retain it after account closure for as long as necessary for that purpose, and a deletion request may not remove it. Automated signals are used to flag accounts for review; decisions to restrict or terminate an account involve human review, and you may contest an outcome by contacting support.
7. Security
We use commercially reasonable safeguards to protect your data, including encryption of brokerage credentials at rest (AES-256-GCM), secure HTTPS connections, and access controls. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.
8. Data Breach Notification
In the event of a data breach that compromises your personal information or stored credentials, TradeDupe will notify affected users by email within 72 hours of becoming aware of the breach. The notification will include the nature of the breach, the types of data affected, and recommended steps to protect your accounts. We will also notify relevant regulatory authorities as required by applicable law.
9. Automated Processing
TradeDupe uses automated systems to process your data as part of the copy trading functionality. When copy trading is enabled, the platform automatically monitors leader account activity and places corresponding orders on follower accounts without manual intervention. This automated processing directly affects your brokerage account and financial positions. You can disable copy trading at any time from your dashboard settings.
If copy trading remains enabled during high-impact news releases, economic announcements, or other highly volatile market conditions, the platform may continue to process and submit copied orders automatically. Copy trading during high-impact or volatile news events is not recommended, and you are responsible for disabling copy trading in advance if you do not want automated execution during those conditions.
10. Data Retention
We retain personal information for as long as needed to provide services, resolve disputes, and meet legal and operational requirements. Brokerage credentials and broker-issued access tokens are deleted upon account termination or when you remove a connection. You may request deletion of your account and associated data at any time by contacting support.
Some records are retained after account closure where we have a continuing obligation or legitimate interest: billing and transaction records for tax and accounting purposes; records of your acceptance of our legal terms; audit logs of administrative access; and the fraud and abuse identifiers described in section 6, which are retained for as long as needed to enforce an account restriction. These records are retained in the minimum form necessary for those purposes.
11. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal information we hold about you.
- Correction: request that we correct inaccurate or incomplete data.
- Deletion: request that we delete your personal data, subject to legal retention obligations.
- Portability: request a machine-readable copy of your data.
- Opt-out: opt out of non-essential communications at any time.
To exercise any of these rights, contact us using the information below. We will respond to verified requests within 30 days.
12. California Privacy Rights (CCPA)
If you are a California resident, you have the right to: (a) know what personal information we collect, use, and disclose; (b) request deletion of your personal information; and (c) not be discriminated against for exercising your privacy rights. TradeDupe does not sell personal information as defined under the California Consumer Privacy Act. To submit a verifiable consumer request, contact us at the email address below.
13. Children's Privacy
TradeDupe is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will take steps to delete their account and associated data promptly.
14. International Data Transfers
TradeDupe is operated from the United States. If you access the platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. By using TradeDupe, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.
15. Public Trader Profiles
TradeDupe offers an optional public trader profile, reachable at a public URL based on your username. This feature is off by default. If you enable it, certain information derived from your trading activity — such as your chosen display name or handle, avatar, and the aggregated closed-trade statistics you select, which may include win rate, overall profit and loss, profit factor, total trades, winning streak, and best and worst trades — is displayed publicly and may be visible to other users, to visitors who are not logged in, and to search engines.
You control which of these statistics are shown. A public profile is provided for informational purposes only and does not constitute a recommendation by TradeDupe to copy any trader. You can disable your public profile at any time from your dashboard settings, after which your profile will no longer be displayed. We cannot control or remove copies of publicly displayed information that may have been cached, indexed, or saved by third parties before you disabled your profile.
16. Third-Party Links
TradeDupe may contain links to third-party websites or services, including Tradovate and payment processors. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party services you interact with.
17. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the platform. Continued use of TradeDupe after changes take effect constitutes acceptance of the updated policy.
18. Contact
For privacy requests or questions, contact us at support@tradedupe.com.