Privacy policy

How we handle your personal data, in plain English. We treat your data the way we'd want ours treated.

1. Who we are

LetsCopyTrade (“we”, “us”, “our”) is a pre-launch copy trading platform being built for the Indian market. The legal entity name, CIN, and registered office will be published on this page when public sign-ups open.

For privacy matters, the responsible contact is our designated Data Protection Officer: privacy@letscopytrade.com.

2. What we collect

We collect only what we need to run the service. Categories of personal data:

Account & identity

• Email address — required for the waitlist and account creation
• Name — collected during account creation
• PAN, Aadhaar (masked) & KYC documents — required by Indian financial regulations before any trading activity. Collected at sign-up, not at waitlist.
• Mobile number — for transactional and security communications

Broker & trading

• Broker API tokens — stored encrypted (AES-256). We never store your broker password.
• Trade routing logs — signals sent, confirmations received, timestamps. Used for audit and dispute resolution.
• Allocation & risk settings — how much you're allocating to which trader, your stop-loss thresholds.

Technical & usage

• IP address, device type, browser — for security and to debug issues
• Pages visited & actions taken — basic product analytics, aggregated where possible
• Cookies — see section 6

What we don't collect

• Your broker password
• Your bank account credentials
• Biometric data
• Location data beyond city-level (derived from IP)
• Data from your other apps, browsing outside our site, or third-party trackers we don't operate

3. Why we collect it

Each category has a specific purpose. We don't repurpose data without your consent.

• Provide the service — route trades, show your dashboard, send confirmations
• Comply with regulation — KYC, anti-money-laundering, tax reporting
• Keep the platform secure — detect fraud, prevent abuse, investigate incidents
• Improve the product — understand which features are used, fix bugs
• Communicate with you — account updates, security notices, occasional pre-launch updates if you opted in

4. Legal basis

Under the Digital Personal Data Protection (DPDP) Act, 2023, we process your data on these grounds:

• Your consent — for marketing emails, analytics beyond strictly necessary, and any optional features
• Performance of a contract — to deliver the service you signed up for
• Legal obligation — KYC, tax reporting, regulatory disclosures required by Indian law
• Legitimate interest — basic security, fraud detection, internal audit (these never override your fundamental rights)

5. Who we share with

We do not sell, rent, or trade your personal data. We share only with parties necessary to deliver the service or comply with law:

• Your broker — the trade signals you authorise. Required for the service to function.
• Cloud & hosting providers — for infrastructure. All providers are bound by data-processing agreements and Indian data-localisation requirements where applicable.
• Compliance & audit partners — KYC verification vendors, compliance counsel, statutory auditors.
• Regulators & law enforcement — only when legally compelled, and we'll notify you unless prohibited from doing so.

We do not share data with advertisers, marketing networks, or data brokers. Ever.

6. Cookies & tracking

We use a minimal set of cookies:

• Strictly necessary — session, login, CSRF protection. Cannot be disabled.
• Preferences — theme, language, dismissed banners. Optional.
• Analytics — aggregated usage. We use a privacy-respecting analytics provider that does not track you across sites. Optional, opt-in.

We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking.

7. How we protect data

Technical measures we currently apply:

• TLS 1.3 for all data in transit
• AES-256 encryption at rest for sensitive fields (broker tokens, KYC documents)
• Role-based access controls; staff access is logged and limited to those who need it for a specific task
• Regular vulnerability scans and a responsible-disclosure programme (security@letscopytrade.com)
• Data hosted on servers located in India

No system is perfectly secure. If a breach occurs, we will notify affected users and the Data Protection Board of India within the timelines required by law.

8. How long we keep it

• Waitlist emails: until you unsubscribe, plus 30 days for our records
• Active account data: for as long as your account is open
• KYC & financial records: for the period required by Indian law (typically 5–8 years after account closure)
• Trade logs: retained for audit and dispute resolution per regulatory requirements
• Analytics: aggregated and retained for product improvement, no longer than 24 months in identifiable form

Outside legal retention requirements, you can request deletion at any time.

9. Your rights

Under the DPDP Act, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — ask us to fix inaccurate or incomplete data
• Delete — request deletion (subject to legal retention requirements)
• Withdraw consent — for any processing based on consent
• Grievance — raise a complaint with our DPO, then escalate to the Data Protection Board of India if unresolved
• Nominate — appoint another person to exercise these rights on your behalf in case of incapacity

To exercise any of these rights, email privacy@letscopytrade.com. We respond within 30 days, usually faster.

10. Children

Our service is not for users under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the product evolves or regulations change. Material changes will be communicated via email (for account holders) and a notice on this page at least 14 days before they take effect. The version number and effective date at the top of this page are the source of truth.

12. Contact us

For privacy matters: privacy@letscopytrade.com
For security issues: security@letscopytrade.com
For general inquiries: hello@letscopytrade.com

Postal address and registered office will be published with team reveal at launch.