Privacy policy

The short version

AutoSignalCopier is designed so that the sensitive part never leaves your computer: your source sessions (Telegram, Discord) and the raw message text they carry. This policy describes what data does leave it, and why.

What stays on your device

Your source sessions and the raw text of messages read from selected chats and channels stay on the Windows device running the app. The app connects to Telegram and Discord directly from that device, and the routing rules and local activity history live there too.

If you turn on image reading for a chat, its images are downloaded to that device and read there with the text recognition built into Windows. They are not uploaded, and the copy Telegram downloads is deleted once it has been read; the text read from them is kept like any message text.

If you turn on AI reading, the text of a message the parser found no signal in, and its image when you allow that, is sent from your device directly to the AI provider you chose, with your own API key and under that provider's terms. It does not pass through our servers, and your key is stored on the device with Windows data protection.

If you turn on the news filter, the app downloads the public ForexFactory economic calendar from nfs.faireconomy.media. That request carries no account or trading data, only what any web request does, such as your IP address, and nothing is downloaded while the filter is off.

What the cloud handles

The cloud service handles device pairing and licensing, and it stores the structured data behind your account dashboard so you can review it in a browser: parsed signals (metadata only: side, symbol, entry, stop, target, routing status), trades and execution results, account snapshots, journal notes, and symbol mappings. Source message text is never uploaded.

The cloud also serves your device's licence checks and any published desktop builds. It is not part of the execution path: orders never pass through it.

This website

This marketing site is static content. With your consent it runs Google Analytics 4 (website measurement) and, on the dashboard, PostHog hosted in the EU (product analytics). In the EEA, UK and Switzerland both stay off until you accept the cookie banner; elsewhere limited, anonymised measurement runs unless you reject. Development builds never send anything.

With consent the site stores: _ga and _ga_* (Google Analytics, 13 months), ph_* (PostHog, only on the dashboard), asc_consent (your accept/reject choice, 12 months, shared between the marketing site and the dashboard), asc_attr (first/last marketing touch such as UTM source, 12 months), and sc_session (your dashboard sign-in session). Rejecting leaves only strictly necessary function: the signup handoff and your session.

Support requests sent through the contact form on this site are not analytics. The form collects your email address, the topic you choose, a subject and your message. We store them to answer you, and we retain them for support and legal purposes.

To prevent abuse, the contact form uses Cloudflare Turnstile. It loads from challenges.cloudflare.com only when you open the contact page, and it processes technical signals from your browser and connection to tell people from automated traffic. We also keep a hashed, non-reversible identifier derived from your network address for about 30 days, so we can limit abuse of the form.

The setup video on some pages is hosted on YouTube (Google). Nothing loads from YouTube until you press play; then the player is embedded from youtube-nocookie.com, YouTube's privacy-enhanced mode, and YouTube receives your IP address and browser details and may store its own cookies or local storage under its own privacy policy. If you do not press play, no request reaches YouTube.

Apart from the contact form and the video, the only interactive action on the marketing site is the signup flow, which hands the details you type (such as your email) to the dashboard so you can create an account — carried in the URL fragment so it never reaches analytics. You can withdraw consent any time by clearing cookies; the banner will ask again. We do not sell personal information.

Payments

We are the controller of your billing data. Stripe, our payment processor processes card data on our behalf (and is an independent controller for its own fraud and compliance purposes). Those details go to Stripe, not to us: we never see or store full card numbers.

What we do receive back is what we need to run your subscription: which plan you bought, how many trading accounts it covers, when the period ends, whether it is paid, and the customer and subscription identifiers linking your account to your subscription.

Your choices

The data controller is the operator of AutoSignalCopier. You can remove the app's data from your device at any time, and you can revoke paired devices from the dashboard. Account deletion and data-removal requests are handled by support at support@autosignalcopier.com. Deleting an account is not self-service yet.