Privacy Policy

Last updated: July 26, 2026

1. Introduction

XRP Copy Trader ("the App", "we", "us") respects your privacy. This Policy explains what information we collect and how we use it when you connect your Xaman wallet and use the App.

2. Information We Collect

Your main wallet address, and the dedicated trading wallet address created for you.
On-chain trade history, balances, cycle data, and profit/loss figures.
Subscription and billing state - trial status, cycle start dates, and fee history.
If you choose to set a PIN for the optional "convenience backup," an encrypted copy of your Signer C recovery key, decryptable only with that PIN.
Basic Xaman session identifiers needed to open sign requests (e.g., for the one-time wallet-ownership verification, or a withdrawal you request).

3. What We Do NOT Collect

Your name, email address, or phone number.
Your Xaman wallet's seed phrase or private keys.
Your Signer C recovery key in plain, unencrypted form.
Cookies, browser fingerprinting, or location data.

4. How We Use Information

Solely to operate the service: creating and managing your trading wallet, executing trades that mirror the leader's signals, calculating profit/loss and fees, and letting you withdraw funds or close the wallet.

5. Where Data Is Stored

Our servers run on Railway and Render. Operational data (follower records, balances, cycle history) is kept in a persistent volume/disk attached to these services so it survives restarts and redeployments. Sensitive credentials - server signer keys, API secrets - are stored only as environment variables and are never exposed through any public endpoint.

6. Encrypted Recovery Backup

If you set a PIN when activating copy trading, we store your Signer C recovery key encrypted with that PIN. We cannot decrypt or recover it if you forget your PIN - we do not store the PIN itself, only what it produces. If you skip this optional feature, no backup of your key exists on our side at all; you rely entirely on the recovery key you personally saved during activation.

7. Third-Party Services

Xaman / XRPL Labs - wallet connection and transaction signing.
Railway and Render - server hosting for the App's two signing servers.
Public XRP Ledger nodes - submitting and reading transactions.

Each of these has its own privacy practices, which we encourage you to review.

8. Data Sharing

We do not sell or trade your data. We share information only where necessary to operate the service (for example, submitting your transactions to the XRP Ledger) or where required by law.

9. Data Retention

We retain your wallet address, trade history, and subscription data for as long as you remain an active or paused user. You may request deletion by contacting us, subject to any billing or record-keeping requirements that may apply.

10. No Cookies / Tracking

The App does not use cookies or browser-based tracking technologies beyond what the Xaman SDK needs to maintain your active session.

11. Children's Privacy

The App is not intended for individuals under the age of 18. We do not knowingly collect information from children.

12. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or request deletion of the data we hold about you.

13. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date above reflects the most recent revision.

14. Contact

See our Contact page for privacy-related questions or to exercise your data rights.