Privacy Notice

1. Data we process

• Account and authentication: public wallet addresses, wallet type, account and device identifiers, linked sign-in methods, recovery credentials, login sessions, security information, and identifiers used to prevent fraud. We do not store your wallet private key or recovery phrase.
• Exchange connections: exchange name, credentials needed for the requested connection, permission choices, connection time, balances, positions, fills, trade history, portfolio values, and calculated performance. Withdrawal permission is not requested. Trading permission is optional and used only for a user-confirmed copy action.
• Billing and trial protection: customer, subscription, checkout and payout identifiers; payment and payout status; promotion and trial history; and limited identifiers used to prevent repeated trial use. WickSync does not receive full card numbers.
• Copy Trading and partner programs: trader profile and statistics, followed traders and expiry dates, signal records, referral codes and attribution, commissions, royalties, payout readiness, and public leaderboard information.
• Notifications and support: notification destinations and choices, bug reports, withdrawal requests, correspondence, and delivery status.
• Local browser data: authentication state, device identifier, short-lived referral attribution and, after you select “Accept all”, interface choices, Academy progress, quiz results and creator voting state. See the Cookie & Local Storage Notice.
• Technical data: IP address and request metadata may be processed by our hosting, security and communications providers when you access the service.

2. Purposes and legal bases

We do not use account data for third-party advertising and do not sell personal data.

3. Sources and recipients

Most data comes from you, your wallet signature, your selected exchange, payment and payout services, or your use of WickSync. Market information may come from public or licensed data sources and social-media services.

We use categories of service providers necessary to operate WickSync, including cloud infrastructure, security and delivery providers; payment and payout processors; connected exchanges; market-data and AI services; notification, social-media and embedded-media services; and support communications providers. They receive only the information needed for their role and process it under the applicable contractual and legal terms.

Public trader names, selected profile information and aggregate performance may be visible to other users. Full exchange balances, API credentials, wallet holdings and private AI conversations are not published through the leaderboard.

4. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers are protected by an adequacy decision, the European Commission's standard contractual clauses, or another lawful safeguard. You may ask us for information about the applicable safeguard.

5. Retention

• Account and encrypted exchange credentials are retained while the account or connection remains active, then deleted or de-identified when no longer needed, subject to legal retention duties and unresolved claims.
• Net-worth snapshots used for charts are automatically deleted after approximately seven days plus a short processing margin.
• Authentication sessions expire or are removed when revoked. A hash indicating prior trial use may be retained to enforce the one-trial rule.
• A referral code awaiting account attribution is retained in the browser for no more than seven days and removed after successful account attribution or expiry.
• Payment, commission, withdrawal and accounting records are retained for the periods required by applicable accounting and legal obligations.
• Support and security records are retained only as long as reasonably necessary for the request, security purpose, or legal claim.

6. Security and your choices

We use technical and organisational safeguards to protect exchange credentials, account-recovery data and other personal data. Access is restricted and sensitive actions require authentication. No internet service can guarantee absolute security, so use narrowly scoped exchange keys and never enable withdrawals.

You can disconnect exchanges, remove linked wallets, revoke sessions, disable notifications, and manage a PRO subscription from Settings. Removing the only recovery method can make an anonymous device account unrecoverable.

7. Your rights

Subject to the GDPR and applicable data-protection law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw consent at any time without affecting earlier lawful processing. We may need reasonable proof that you control the relevant account.

You may complain to the Office of the Data Protection Ombudsman. Please contact us first if you want us to resolve a concern directly.