This policy explains what personal data eatradepilot.com and the TradePilot EA collect, why, and the choices you have. We collect only what we need to run the service, and we don't sell your data.
What we collect
Your account
- Name, email address, phone number (if you give one) and the country you choose at sign-up.
- Your password, stored only as a one-way hash, and your two-factor authentication settings.
Your subscription and EA
- Your plans, orders and payment records: amounts, the network used and blockchain transaction references. We never see your wallet's private keys.
- The MT5 login numbers and broker servers you register.
- Licence checks. About every 30 minutes the running EA sends its licence key, MT5 login, broker server, whether the account is demo or live, a random ID for that MT5 terminal, its version and the IP address it connects from. The EA doesn't send your balance, trades or passwords.
- EA downloads: the time, IP address and browser.
Referrals and payouts
- Who referred you and whom you referred, the rewards earned and the USDT addresses you withdraw to.
Support and email
- Your support tickets and messages, and a record of the emails we send you (sign-up codes, receipts, licence alerts).
Security and fraud prevention
- The IP address you sign up and last signed in from, and short-lived rate-limit counters. We look up the country of an IP address with a local database (by DB-IP) to apply country rules; the address isn't sent anywhere for this.
Why we use it
- To provide the service: your account, building and licensing your EA, payments, renewals and referral rewards.
- To keep it secure: stopping fraud, abuse, account takeovers and licence sharing.
- To support you and send service emails. We don't send marketing email without your consent.
- To meet legal, tax and accounting obligations.
Cookies and browser storage
We use one essential cookie, tp_session, to keep you signed in (it lasts up to 7 days). Your browser also stores a few preferences on your device only: light or dark theme, the plan in your cart, a referral code from an invite link and layout choices. We don't use advertising or third-party analytics cookies.
Who processes it for us
- Cloudflare: delivers and protects the website (traffic passes through its network).
- NOWPayments: processes USDT payments and payouts.
- Google (Gmail): sends our emails.
These providers handle data only to provide their service to us. Blockchain payments are public by nature: transaction details on the blockchain can't be changed or deleted by anyone.
How long we keep it
We keep your data while your account is open. Payment and order records are kept as long as accounting and tax law require, even after you delete your account. Licence check and security records are kept only as long as they're needed for the purposes above.
Your rights
- Download your data: Dashboard → Account → Download my data.
- Delete your account: Dashboard → Account → Delete my account. Your name, email, phone, country, IP addresses and two-factor settings are erased straight away. Orders and referral history are kept, no longer linked to you, for bookkeeping.
- Correct or object: you can change most details in your dashboard, or ask us.
Depending on where you live (for example under the GDPR in the EU and UK), you may also have the right to restrict processing or complain to your data protection authority.
Security
The site is served only over HTTPS. Passwords are hashed, secrets are encrypted at rest and staff access is limited to the people who need it. No system is perfectly secure, so use a strong password and turn on two-factor authentication.
Children
TradePilot is for adults. We don't knowingly collect data from anyone under 18.
Changes
We may update this policy. The date at the top shows the latest version, and we'll tell you about significant changes by email or in your dashboard.
Contact
For privacy questions or requests, open a ticket under Support or email [email protected].