Privacy Policy

Last updated: October 3, 2026

This policy describes how Otocopier handles personal information when you use otocopier.com.

Operator: Otocopier

What we collect

Account. Email address, display name if you add one, and a hash of your password. We do not store the password itself. We store whether the email is confirmed, a hash of the confirmation link, and when that link expires.

Session. A sign-in cookie that keeps you logged in. It can last up to 14 days. It is HTTP-only. On the public site it is sent only over HTTPS and is limited to same-site requests.

Trading wallet. A Solana deposit address and the private key for that wallet. The key is sealed before it is stored so the service can sign swaps. You can reveal it in Settings after you enter your password.

Strategy. Wallet addresses you choose to watch, nicknames, copy size, exit rules, pause state, and related settings.

Trading records. Positions, fills, skipped trades, event messages, and transaction signatures tied to your account. Test-mode records are stored the same way and are labeled as test activity.

Billing. A Stripe customer id and subscription ids. Stripe collects the card or other payment method, billing details, and receipts. We do not store your full card number.

Telegram. A link code, and the Telegram chat id once you connect alerts. Alert text can include trade activity.

Messages you send us. If you email us, or write from Support on your account, we keep that correspondence so we can answer you.

We do not ask for your phone number at checkout.

How we use it

We use this information to:

Create and secure your account, including email confirmation and sign-in.
Run the copy-trading rules you set, including watching addresses and signing swaps from the trading wallet.
Send Telegram alerts you connect.
Bill the subscription, show invoices, and handle cancellation.
Detect abuse, keep the service reliable, and fix failures.
Respond to you and meet legal duties.

We do not sell personal information. We do not use it for advertising profiles.

Who else processes it

We use these providers only to run the service:

Stripe processes subscriptions, cards, invoices, and the billing portal.
Resend sends email for this service, including confirmation and support notices.
Telegram delivers alerts to the chat you link.
Solana infrastructure, including Helius, is used to read public chain data and submit transactions. Wallet addresses and transactions are public on Solana once they are sent.
Jupiter is used to route and execute swaps.
Google Fonts serves typefaces on the marketing pages. Your browser requests those files from Google.

Those providers process data under their own terms. Public blockchain data can be read by anyone and is not deleted when you delete an account.

Cookies

We use a session cookie to keep you signed in and to protect forms from cross-site requests. We do not use advertising or analytics cookies on the product.

The session cookie is required to use the signed-in product. Blocking it will sign you out.

How long we keep it

We keep account, wallet, and trading records while the account exists. Confirmation tokens are kept only until they expire or the email is confirmed.

When you delete the account, we delete the account row, trading history stored in our database, the sealed trading key, support messages, and we delete the Stripe customer. You should withdraw SOL first. Copies of data can remain in backups for a short period until those backups roll off. Stripe may keep billing records it is required to keep. Transactions already broadcast stay on Solana.

Server logs used to operate and secure the service are kept only as long as needed for that purpose.

Security

Passwords are stored as hashes. Trading keys are sealed before storage. Sign-in cookies are HTTP-only. Revealing a trading key requires your password.

No method of storage or transmission is perfectly secure. You are responsible for your password, for the key if you reveal it, and for the devices you use.

Your choices

You can update your display name and password in Settings. You can disconnect future alerts by not using Telegram, and you can cancel billing there. You can delete the account in Settings. Deletion requires your password and cannot be undone.

You may email support@otocopier.com to ask for a copy of the account information we hold, or to ask us to correct it. We may need to confirm you control the account before we act.

Depending on where you live, you may have additional rights to access, correct, delete, or export personal information, or to object to certain uses. You can contact us to use those rights. You can also complain to a data-protection authority where you live.

Children

Otocopier is not for anyone under 18. We do not knowingly collect personal information from children.

International processing

We and our providers may process information in the United States and in other countries where those providers operate. Those countries may have different data-protection laws than yours.

Changes

We may update this policy. The date at the top will change. If a change is material, we will notify you by email or in the product.

Contact

Privacy questions: support@otocopier.com