Privacy Policy

Last updated: 12 July 2026

Copymoar is a trade-copying app for futures traders. It is not a broker, not an investment adviser, and gives no trading advice. On the desktop plan the copier runs entirely on your own machine; on hosted plans (Pro+ and Elite) the copier runs on infrastructure we manage for you, and this policy describes both honestly. Our guiding rule is to collect as little as possible to run your account and the app — and nothing more.

Who we are

Copymoar is operated by Copymoar ("Copymoar", "we", "us", "our"), the entity responsible for the personal data described here. If you have any question about this policy or wish to exercise a privacy right, you can reach us using the details in the Contact section below.

The short version

On the desktop plan, your broker logins, your order flow, and your funds never touch our servers. Copymoar runs locally on your computer and connects directly to your brokers. We do not receive, store, or have any access to your broker credentials or the contents of your orders. Your trades route from your own machine straight to your broker.

On hosted plans (Pro+ / Elite), your copier engine runs on infrastructure we operate, so it — not your PC — holds your broker sessions and processes your orders there. Your credentials are sent to your engine over an encrypted, sealed channel, and your engine environment is isolated per customer. See "Hosted plans" below for exactly what that means.

On every plan, your money moves only between you and your broker — never through us. We never custody, route, or touch funds.

What we collect

We collect only the minimum needed to create your account, unlock the features you paid for, secure the service, and support you:

Account email address — to create your account, sign you in, send essential service and billing notices, and respond to support requests.
Subscription / entitlement state (via Whop) — which plan you hold and whether it is active, expired, or cancelled, so the app knows what you are allowed to use. This comes to us from Whop, our billing provider; we never see or store your card number.
A device identifier — a per-install X-Client-Id that we generate, used to bind your session to your device and to prevent token theft and credential sharing. It is not a hardware fingerprint and does not identify you personally.
Optional support logs — if you contact us with a problem, you may choose to send us diagnostic logs to help us troubleshoot. These are provided by you, only when you decide to share them, and only used to resolve your issue.
Basic operational logs — standard server logs (such as timestamps, IP address, and request status) generated when the app talks to our account/licensing API, retained for security and troubleshooting.

What we never collect or handle on the desktop plan

On the desktop plan, the following never leaves your computer and is never transmitted to, stored by, or accessible to Copymoar:

Your broker usernames, passwords, API keys, and access tokens.
Your order flow — the orders, fills, positions, and live P&L generated by your trading.
Your funds. Money moves only between you and your broker; we are not a broker and never custody, route, or touch your funds.
Your copy configuration (leaders, followers, sizing, and risk rules).

All of the above is stored locally on your own machine and is used by the app to copy trades and enforce your risk rules. You control it directly, and you can remove it at any time by deleting it in the app.

Hosted plans (Pro+ and Elite)

Hosted plans exist so your copier can run without your PC staying on. That necessarily means the copier engine — and the trading state it needs — runs on servers we operate. Plainly:

Where your engine runs. Pro+ provisions an isolated, single-customer engine container with its own dedicated IP address on infrastructure we operate; Elite provisions a dedicated, single-tenant server. Both run with our hosting providers (currently in the United States).
Broker credentials. When you connect a broker to a hosted engine, your credentials travel over an encrypted, sealed channel from your browser to your engine. Our web and account servers pass the sealed payload through and cannot read it. Your engine holds the broker session so it can trade for you; you can disconnect a broker at any time from the app, which removes the stored credentials from your engine.
Order flow and configuration. Your hosted engine processes and stores your orders, fills, positions, and copy configuration in your isolated engine environment, because that is what it needs to copy trades and enforce your risk rules. This data is used to run your copier — never for advertising, profiling, or sale.
The browser viewer. The paired viewer shows your engine's live state (positions, orders, P&L) in your browser over an encrypted connection tied to your account session. Viewer traffic passes through our relay to reach your engine; the relay exists to connect the two ends of your own session.
Infrastructure access. Our operations team can access the underlying servers for provisioning, maintenance, and support. Such access is limited to what operating the service requires. If you ask us to troubleshoot your engine, we may view its logs and state as part of resolving your issue.
Retention and deletion. Your engine and its data exist for as long as your hosted subscription is active. When your hosted subscription ends, your dedicated engine environment is decommissioned and its stored broker credentials and trading state are deleted, subject to short-lived backups and operational logs which expire on a rolling basis.
Logs and backups. Hosted engines produce operational logs (and may be covered by infrastructure-level backups) used for reliability, security, and support. These are retained on a rolling basis and are not used for any other purpose.

Payments

Billing is handled by Whop, our merchant of record. When you subscribe, Whop processes your payment and card details under its own privacy policy — we never see or store your card number. We receive only your subscription status (which plan, and whether it is active) so we can unlock the app. See Whop's privacy terms at whop.com/privacy.

How we use what we collect

To create and authenticate your account and keep your session secure.
To deliver the app, signed auto-updates, and the features your plan includes.
To provide support and send essential service or billing notifications.
To protect the service against fraud, abuse, and credential theft.

We do not sell, rent, or trade your personal data, and we do not use it for third-party advertising or profiling.

Email practices

We send two kinds of email. Transactional email — account, security, support, billing, and trial-status notices that are necessary to operate the service you signed up for; these cannot be opted out of while you hold an account. Occasional product announcements — updates about the service sent to account holders; every such email includes an unsubscribe link that works immediately. All email we send uses honest, accurate sender names and subject lines, never deceptive or misleading headers, and clearly identifies Copymoar as the sender.

To opt out of non-essential mail, use the unsubscribe link in the email, or contact us at support@copymoar.com. Our physical mailing address is included in the Contact section below, as required by anti-spam law.

Sharing

We share data only with the service providers needed to run Copymoar — for example our billing provider (Whop) and our hosting/infrastructure provider — and only to the extent they need it to perform their function on our behalf. We do not sell personal data. We may disclose information where we are legally required to do so, or to protect our rights, users, or the security of the service.

Lawful basis for processing

Where applicable data-protection law (such as the EU/UK GDPR) requires a lawful basis, we rely on:

Performance of a contract — to create your account, deliver the app, and provide the features and support you signed up for.
Legitimate interests — to secure the service, prevent fraud and credential theft, and troubleshoot problems, balanced against your rights.
Legal obligation — to keep limited records we are required by law to retain, and to respond to lawful requests.
Consent — for anything optional, such as diagnostic logs you choose to send us, which you can withdraw at any time.

Retention

We keep account data for as long as your account is active. If you cancel and ask us to delete your account, we remove your account record, retaining only what we are legally required to keep (for example, limited billing records held by Whop). Operational logs are kept only for as long as needed for security and troubleshooting and are then deleted or anonymised.

Your rights

Subject to applicable law, you may ask us to access, correct, export, or delete the account information we hold about you, to restrict or object to certain processing, and to withdraw consent for anything optional. Where the GDPR applies, you also have the right to lodge a complaint with your local data-protection authority. To exercise any right, contact us at support@copymoar.com. On the desktop plan your broker credentials and trade data live only on your own machine, so you control those directly by removing them in the app; on hosted plans you can disconnect brokers from the app at any time, and ending your hosted subscription decommissions your engine as described in "Hosted plans" above.

Security

The desktop app is Apple-notarized and ships signed, verified auto-updates, so the version you run is the version we published. Sessions are bound to your device to limit token theft, and traffic to our account/licensing API is encrypted in transit. On the desktop plan, sensitive trading data — your credentials, orders, and configuration — stays on your computer and never reaches us. On hosted plans, credentials travel over an encrypted sealed channel to your isolated engine environment, and hosted engine updates are the same signed, verified releases as the desktop app, applied only when you approve them. No method of transmission or storage is perfectly secure, so while we work hard to protect your data we cannot guarantee absolute security.

International transfers

Copymoar and our service providers may process data in countries other than your own. Where we transfer personal data across borders, we take steps to ensure it remains protected in line with applicable law.

Children

Copymoar is intended for adults and is not directed to children. We do not knowingly collect personal data from anyone under the age of majority in their jurisdiction.

Governing law

This policy and any dispute relating to it are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-laws rules.

Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above and, where appropriate, communicated to you.

Contact

Copymoar is operated by Copymoar. Questions about this policy, requests to exercise your rights, or requests to opt out of any non-essential email can be sent to:

Email: support@copymoar.com
Mailing address: 34365 Istanbul, Turkey
Community support: discord.gg/copymoar