1. Information We Collect
We collect the following categories of information:
- Account information: name, email address, and profile details you provide during registration.
- Billing information: payment method details processed through our third-party payment processor (Stripe). TradeDupe does not store full credit card numbers.
- Brokerage credentials: your Tradovate account credentials (username, password, and related authentication details), which are stored in encrypted form using AES-256-GCM encryption. These credentials are used solely to connect to your brokerage account, monitor positions, and execute trades on your behalf as part of the copy trading functionality.
- Trading data: information about your connected accounts, positions, orders, execution reports, and trading activity within the platform.
- Usage data: log data, device information, browser type, IP address, pages visited, and interactions with the platform.
- Communications: support messages, feedback, and other correspondence you send to us.
2. How We Use Information
We use your information to provide and improve the platform, process payments, maintain security, communicate account updates, and comply with legal obligations.
3. Data Sharing
We may share information with service providers that help operate TradeDupe, including:
- Tradovate: your brokerage credentials are transmitted to Tradovate's servers to authenticate and execute trades on your behalf.
- Stripe: billing and payment information is shared with Stripe for payment processing.
- Hosting and infrastructure providers: data is stored and processed using third-party cloud services.
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may disclose information if required by law, legal process, or government request, or to protect the rights, safety, or property of TradeDupe or its users.
4. Cookies and Tracking Technologies
TradeDupe uses cookies and similar technologies for the following purposes:
- Authentication cookies: to keep you signed in and maintain your session.
- Preference cookies: to remember your settings and display preferences.
- Analytics: to understand how users interact with the platform and improve our services.
You can control cookies through your browser settings. Disabling cookies may affect platform functionality, including the ability to remain signed in.
5. Administrative Account Access
Authorized TradeDupe administrators may access your account in a read-only capacity for the purposes of providing customer support, troubleshooting technical issues, and ensuring platform integrity. During administrative access:
- Administrators can view your dashboard, account settings, and connection status, but cannot place trades, modify your connections, change account settings, or perform any actions on your behalf.
- All administrative access sessions are logged and audited, including the identity of the administrator, the time and duration of access, and the user account accessed.
- Administrative access sessions are time-limited and automatically expire after one hour.
6. Security
We use commercially reasonable safeguards to protect your data, including encryption of brokerage credentials at rest (AES-256-GCM), secure HTTPS connections, and access controls. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.
7. Data Breach Notification
In the event of a data breach that compromises your personal information or stored credentials, TradeDupe will notify affected users by email within 72 hours of becoming aware of the breach. The notification will include the nature of the breach, the types of data affected, and recommended steps to protect your accounts. We will also notify relevant regulatory authorities as required by applicable law.
8. Automated Processing
TradeDupe uses automated systems to process your data as part of the copy trading functionality. When copy trading is enabled, the platform automatically monitors leader account activity and places corresponding orders on follower accounts without manual intervention. This automated processing directly affects your brokerage account and financial positions. You can disable copy trading at any time from your dashboard settings.
If copy trading remains enabled during high-impact news releases, economic announcements, or other highly volatile market conditions, the platform may continue to process and submit copied orders automatically. Copy trading during high-impact or volatile news events is not recommended, and you are responsible for disabling copy trading in advance if you do not want automated execution during those conditions.
9. Data Retention
We retain personal information for as long as needed to provide services, resolve disputes, and meet legal and operational requirements. Brokerage credentials are deleted upon account termination or when you remove a connection. You may request deletion of your account and associated data at any time by contacting support.
10. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal information we hold about you.
- Correction: request that we correct inaccurate or incomplete data.
- Deletion: request that we delete your personal data, subject to legal retention obligations.
- Portability: request a machine-readable copy of your data.
- Opt-out: opt out of non-essential communications at any time.
To exercise any of these rights, contact us using the information below. We will respond to verified requests within 30 days.
11. California Privacy Rights (CCPA)
If you are a California resident, you have the right to: (a) know what personal information we collect, use, and disclose; (b) request deletion of your personal information; and (c) not be discriminated against for exercising your privacy rights. TradeDupe does not sell personal information as defined under the California Consumer Privacy Act. To submit a verifiable consumer request, contact us at the email address below.
12. Children's Privacy
TradeDupe is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will take steps to delete their account and associated data promptly.
13. International Data Transfers
TradeDupe is operated from the United States. If you access the platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. By using TradeDupe, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.
14. Third-Party Links
TradeDupe may contain links to third-party websites or services, including Tradovate and payment processors. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party services you interact with.
15. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the platform. Continued use of TradeDupe after changes take effect constitutes acceptance of the updated policy.
16. Contact
For privacy requests or questions, contact us at support@tradedupe.com.