Privacy Policy

The data controller is HeptaPower SARL (RNE 1876744K), registered office at 9 Rue Samarmar, Cité Manara, El Mourouj 5, 2074 Ben Arous, Tunisia. For any privacy request, contact us at [email protected].

• Account data: name, email, password (stored only as a hash), and optionally phone number and company name.
• Billing data: your plan and status. Card payments are handled by our payment processor; we do not store full card numbers.
• Trading metadata: the account numbers (logins) you connect, your copy settings, and records of copied trades and profit/loss, so we can run and display the service.
• Technical data: IP address, browser and device type, and usage logs, collected automatically (see the Cookie Policy).

We never collect your broker or trading-account passwords, we never hold your funds, and we do not place trades for you. The HeptaCopier Bridge authenticates to your terminals locally, on your own machine.

• to provide, operate and secure HeptaCopier;
• to manage your account, subscription and billing;
• to respond to your support requests (support and account communications may be logged and retained, and may be used as evidence in the event of a dispute);
• to send you service and, if you opted in, product or marketing emails (you can unsubscribe at any time);
• to comply with our legal obligations.

Where the GDPR applies, we process your data on the basis of: the contract between us (to provide the service), your consent (for optional marketing and non-essential cookies), our legitimate interests (security and improving the service), and legal obligations.

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract: hosting, payment and email providers, and our analytics providers Google LLC (Google Analytics) and Microsoft Corporation (Microsoft Clarity), which are used only with your consent (see the Cookie Policy). Beyond that, we disclose data only when legally required (for example a valid court order). Any statistics we publish are aggregated and anonymised.

HeptaPower SARL operates from Tunisia, and your data may be stored or processed on servers outside your country, including outside the EEA. Where we transfer EEA or UK personal data to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, together with technical measures like encryption in transit and at rest. Our analytics providers (Google, Microsoft) process data in the United States under the EU-US Data Privacy Framework. You can contact us for more information about these safeguards.

Data is stored in a technically and physically secured environment. We use SSL/TLS encryption in transit, store passwords only as hashes, and apply access controls. No transmission over the internet is ever completely secure, so you should also take suitable precautions on your side.

We keep your data for as long as your account is active and as long as we need it for the purposes above, or as required by law. When you ask us to delete your account, we delete your personal data except where we must keep some records (for example for tax or accounting).

Subject to applicable law (including the GDPR), you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• ask us to delete your data;
• restrict or object to certain processing;
• data portability;
• withdraw consent you have given, at any time;
• complain to your local data protection authority.

To exercise any of these, email [email protected].

HeptaCopier is not intended for anyone under 18, and we do not knowingly collect data from children.

We may update this Privacy Policy from time to time. Minor changes take effect when posted on this page. If we make material changes, we will notify you in advance (for example by email or an in-app notice) before they take effect.