Table of Contents
- 01 Introduction
- 02 Notice at Collection (California)
- 03 Categories of Personal Information
- 04 Sources of Personal Data
- 05 Purposes of Processing
- 06 How We Use Personal Data
- 07 Cookies & Similar Technologies
- 08 How We Share Personal Data
- 09 International Data Transfers
- 10 Data Retention
- 11 Security Measures
- 12 Children's Privacy
- 13 Your Rights
- 14 Do Not Sell or Share
- 15 Limit Sensitive Personal Information
- 16 External Links
- 17 Changes to This Policy
- 18 Contact Us
1. Introduction
Tradecopia Solutions Inc. ("Tradecopia," "we," "our," or "us") is a Canadian corporation with its principal place of business at 233 - 1433 LONSDALE AVENUE, NORTH VANCOUVER BC V7M 2H9, CANADA. We operate the Tradecopia website, desktop applications, and related services (collectively, the "Service").
For the purposes of applicable data-protection laws, Tradecopia acts as the data controller with respect to personal information processed through the Service. You may contact us at legal@tradecopia.com or by mail at the address listed above.
2. Notice at Collection (California)
California privacy law requires us to provide notice, at or before the point of collection, regarding the categories of personal information we collect, the purposes for which it is used, and whether such information is sold or shared for cross-context behavioral advertising.
A summary of this information is set out below in Section 3.3. Where required, a link labeled "Notice at Collection" will be made available in connection with account registration, checkout, or other applicable forms.
3. Categories of Personal Information We Collect
3.1 Information You Provide to Us
- Personal identifiers - such as your name, mailing address, email address, and a unique account or user identifier.
- Account and authentication details - including usernames, encrypted or hashed passwords, and authentication or access tokens.
- Commercial details - such as subscription plan information, purchase history, and billing address.
- Payment-related data - including payment method type, the last four digits of a tc-card, expiration date, and a Stripe customer reference. Tradecopia does not store full tc-card numbers or CVV codes.
- Communications and support content - information you choose to provide when contacting us, including messages, files, or responses to surveys.
3.2 Information Collected Automatically
- Technical and usage information - such as IP address, device and browser characteristics, operating system, referring pages or URLs, and timestamps associated with interactions with the Service.
- Approximate location information - such as city or regional location inferred from an IP address.
- Data collected through cookies or similar technologies - as described in Section 7 below.
3.3 Statutory Category Table (CCPA/CPRA)
| CCPA Category | Examples | Collected | Sold | Shared for targeted advertising |
|---|---|---|---|---|
| A - Identifiers | Name, email address, IP address, user ID | Yes | No | No |
| B - Customer records | Billing address | Yes | No | No |
| D - Commercial information | Purchases, subscription status | Yes | No | No |
| F - Internet or network activity | Page views, feature usage, interaction events | Where enabled | No | Where enabled |
| G - Geolocation data | City or region derived from IP address | Where enabled | No | Where enabled |
| Sensitive PI (login credentials) | Encrypted passwords, authentication tokens | Yes | No | No |
Certain categories of personal information listed above are collected only when relevant features are enabled or as the Service evolves. Tradecopia does not sell personal information and does not share personal information for cross-context behavioral advertising except where explicitly disclosed and permitted by applicable law.
Tradecopia does not knowingly sell or share personal information of consumers under 16 years of age.
4. Sources of Personal Data
- Directly from you when you register, purchase a subscription, or communicate with us.
- Automatically from your device via cookies and similar technologies.
5. Purposes of Processing & Legal Bases (GDPR Art 6)
| Purpose | Legal basis (GDPR) | Relevant categories |
|---|---|---|
| Provide & administer the Service | Performance of a contract (Art 6(1)(b)) | A, B, D, F, I, Sensitive PI |
| Process payments & prevent fraud | Performance of a contract; Legitimate interests (Art 6(1)(f)) | A, B, D, F, Sensitive PI |
| Improve and secure the Service (analytics, debugging, security monitoring) | Legitimate interests | A, F, G |
| Marketing our own or affiliated services | Consent (emails + cookies) or Legitimate interests | A, F |
| Legal obligations (tax, accounting, consumer-protection) | Compliance with a legal obligation (Art 6(1)(c)) | A, B, D |
You may withdraw consent or object to processing based on legitimate interest at any time (see Section 13).
6. How We Use Personal Data
We use the information described above to:
- Create and manage accounts and authenticate users.
- Deliver core functionality such as trade synchronisation, journaling, social features and notifications.
- Process transactions through our payment partner Stripe, Inc.
- Provide customer support by email, Discord.
- Analyse usage to improve performance and develop new features.
- Market our own and closely-related services, including PropFirmSyncer.com, subject to your choices.
- Detect, investigate and prevent fraud, abuse or security incidents.
7. Cookies & Similar Technologies
Where enabled, we may use first- and third-party cookies, local storage, and similar technologies for:
- Strictly necessary operations - such as session management and load balancing.
- Preferences - such as remembering language or interface settings.
For additional information, see our Cookie Policy.
8. How We Share Personal Data
We may disclose personal information to third parties that assist us in operating and delivering the Service. These include infrastructure and hosting providers, payment processors, and communications service providers, such as Google Cloud, AWS, Fly.io, Stripe, SendGrid, and GoHighLevel.
All such vendors process personal data on Tradecopia's behalf and subject to contractual obligations that limit their use of personal information to the provision of services, and that require appropriate confidentiality and security safeguards. Where required by law, these arrangements include Data Processing Agreements (DPAs) or equivalent service-provider agreements under applicable privacy regulations.
9. International Data Transfers
Personal information processed through the Service may be transferred to, stored in, or accessed from jurisdictions outside the European Economic Area.
Where such transfers occur, Tradecopia relies on appropriate legal safeguards recognized under applicable data-protection laws, which may include adequacy determinations or contractual protections approved by the European Commission, together with additional measures where required to ensure an appropriate level of protection.
10. Data Retention
Tradecopia retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, and support legitimate business operations.
| Data category | Retention period |
|---|---|
| Account information | For the duration of the active account and thereafter only as necessary for legal, accounting, or legitimate business purposes |
| Transaction records | Up to 7 years (tax, accounting, and regulatory requirements) |
| Customer support communications | Up to 12 months following closure of the support request |
| Analytics and diagnostic server logs | Up to 30 days |
| Backup archives | Rolling retention of up to 90 days |
In certain circumstances, personal information may be retained for longer periods where required to establish, exercise, or defend legal claims or to comply with applicable law. Where consent is relied upon for specific processing activities, you may manage or withdraw such consent at any time through available settings or controls.
11. Security Measures
Tradecopia implements reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.
These measures include encryption of data in transit using HTTPS/TLS, encryption of data at rest where supported by our infrastructure providers, access controls and least-privilege permissions, role-based access management, and secure software development practices. Access to systems containing personal information is restricted to authorized personnel only.
We regularly review and improve our security practices in light of evolving threats, operational needs, and industry standards.
12. Children's Privacy
The Service is intended for use by individuals who are at least 16 years of age. Tradecopia does not knowingly collect or process personal information from children under 16.
If we become aware that personal information has been collected from a child under the applicable age threshold, we will take reasonable steps to delete such information promptly. Parents or guardians who believe that a child has provided personal information to Tradecopia may contact us at privacy@tradecopia.com.
13. Your Rights & How to Exercise Them
13.1 EU / EEA Data-Subject Rights (GDPR)
Subject to applicable law, individuals located in the European Union or European Economic Area have the right to:
- Request access to personal information we hold about them.
- Request correction of inaccurate or incomplete personal information.
- Request deletion of personal information, where applicable ("right to be forgotten").
- Request restriction of processing in certain circumstances.
- Receive a copy of their personal information in a portable format.
- Object to processing based on legitimate interests or for direct marketing purposes.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with a competent supervisory authority.
13.2 California Privacy Rights (CCPA/CPRA)
Residents of California have the right to:
- Request information about the categories and specific pieces of personal information collected, used, disclosed, sold, or shared.
- Request deletion of personal information, subject to applicable exceptions.
- Request correction of inaccurate personal information.
- Opt out of the sale or sharing of personal information, where applicable.
- Limit the use or disclosure of sensitive personal information.
- Exercise these rights without discrimination, meaning we will not deny services, charge different prices, or provide a different level or quality of service for exercising privacy rights.
- Use Global Privacy Control (GPC) browser signals to communicate an opt-out preference, which we honor where required by law.
13.3 Submitting a Request
- Web form: tradecopia.com/legal/request-data
- Email: privacy@tradecopia.com
We will verify your identity and respond within 30 days (GDPR) or 45 days (CCPA), with a possible extension where permitted.
14. Do Not Sell or Share My Personal Information
Tradecopia does not sell personal information in exchange for monetary consideration. In limited circumstances, certain personal information may be disclosed to third parties in a manner that could be considered "sharing" under the California Privacy Rights Act, such as where online identifiers or usage data are involved.
California residents may opt out of the sale or sharing of personal information at any time by using the "Do Not Sell or Share My Personal Information" option available through the Service or by enabling recognized opt-out preference signals, including Global Privacy Control (GPC), where applicable.
15. Limit the Use of My Sensitive Personal Information
Where required by applicable law, California residents may request that the use or disclosure of sensitive personal information be limited to what is necessary to provide the Service or perform essential business operations.
Instructions for submitting such a request will be made available through the Service where applicable.
16. External Links
The Service may include links to websites or services operated by third parties. Tradecopia does not control and is not responsible for the privacy practices or content of those third-party sites. We encourage users to review the privacy policies of any external services they choose to access.
17. Changes to This Policy
We may revise this Privacy Policy from time to time to reflect updates to our practices, legal requirements, or the Service. Any changes will be posted on this page, and the "Last updated" date will be revised accordingly.
Where changes are material, we will take reasonable steps to notify users in advance, such as through email or in-product notifications, in accordance with applicable law.
18. Contact Us
- General enquiries: info@tradecopia.com
- DPO: privacy@tradecopia.com
- Postal: Tradecopia Solutions Inc., 233 - 1433 LONSDALE AVENUE, NORTH VANCOUVER BC V7M 2H9, CANADA
Appendix A - Definitions
- Personal data / personal information - any information that identifies or relates to an identifiable individual.
- Sell / Share (CPRA) - transferring personal information to a third party for monetary or other valuable consideration or for cross-context behavioural advertising.
- Sensitive personal information - as defined in Cal. Civ. Code §1798.140(ae).
© 2025 Tradecopia Solutions Inc. All rights reserved.