← Back to app

Terms of Service

Last updated: July 26, 2026

1. Acceptance of Terms

By connecting your wallet to XRP Copy Trader ("the App", "we", "us"), an automated grid & scalp copy-trading tool built on the XRP Ledger (XRPL) and the Xaman wallet, you ("User", "you") agree to these Terms of Service. If you do not agree, do not connect your wallet or use the App.

2. What the App Does

The App lets you follow a leader's grid/scalp trading signals on the XRPL decentralized exchange. Once you activate copy trading, the App:

3. Multi-Signature Wallet & Custodial Disclosure

Your trading wallet is protected by a 4-signer, 2-of-4 multi-signature configuration:

Signer Held by Weight
AUs (automated, primary server)1
BUs (automated, separate independent server)1
CYou, generated on your own device3
DUs, offline, not connected to any server1

Approving a transaction requires a combined signing weight of at least 2 (the quorum). Signer C alone satisfies this threshold (weight 3 ≥ 2), so you can always withdraw independently, even if the App is completely offline, using your own recovery key.

Important disclosure: Signer A and Signer B together also satisfy this threshold on their own (1 + 1 = 2). This means the App's own servers technically retain the ability to authorize transactions on your trading wallet without your separate signature. In normal operation this ability is used only to (a) execute trades mirroring the leader's signals, and (b) process withdrawal or fee-payment requests you make in the App. We are disclosing this plainly so you understand the App is not "fully non-custodial" in the strictest sense - you are trusting the App's servers with real technical control alongside your own. What the design does guarantee is that you are never dependent on us: your Signer C key alone always meets the quorum on its own, so you can withdraw or close out your position at any time, with or without our cooperation.

4. Custody & Key Responsibility

This is a self-custody system. Signer C is generated on your own device and is never transmitted to, or stored by, us at any point. We do not have a copy of it, we cannot recover it, and no support request can bring back a lost or destroyed Signer C key.

Why we don't offer key recovery. The entire point of Signer C is that it gives you an emergency exit that does not depend on us. If we could recover it for you, that would mean we have the technical ability to reconstruct a key that's supposed to be yours alone - which would defeat the purpose of the safeguard and give us more control over your funds than this system is designed to allow. This is the same policy followed by every reputable self-custody wallet (hardware wallets, browser wallets, etc.): the provider cannot recover a lost seed phrase, by design.

What you must do. When your trading wallet is created, you will be shown your Signer C seed exactly once and asked to record it. Treat it like the master key to your funds, because it is:

Tools available to you, independent of us. Because we do not want you to depend on our servers being online, you have two things that work with only your own Signer C key and a public XRPL node - no account with us, no support ticket, no dependency on our infrastructure being up:

If you still have your Signer C key, you always have a way to move your funds out - even in a worst-case scenario where we disappear entirely.

5. The Role of Signer D

A server going down is not the same as a key being lost. "Signer A" and "Signer B" each refer to two things: the service that runs on our servers, and the underlying seed that service uses to sign. If we keep a secure, offline copy of that seed separately from the server itself, losing the server changes nothing - we simply sign manually with the same key elsewhere. The seed is what matters, not the machine it happened to run on.

With that distinction in mind, here are the scenarios that matter:

Scenario 1 - a server goes down, but we still hold the seed. Nothing is actually lost - we sign manually with A and B (weight 1 + 1 = 2 = quorum) exactly as before. D is not needed here at all.

Scenario 2 - the seed for one of A or B is permanently lost (not just its server). This is the actual purpose of Signer D: it combines with whichever of A or B is still available (weight 1 + 1 = 2 = quorum) so the system, or an orderly wind-down, can continue even after losing one operator key permanently.

Scenario 3 - the seeds for both A and B are permanently lost. Signer D cannot help here either: its weight (1) alone never reaches the quorum (2), and there is nothing left for it to combine with. The only remaining path is Signer C - your own key, independent of us entirely - which is exactly why the standalone, server-independent recovery tool described above exists.

What Signer D is not for. Signer D cannot, by itself, approve anything - its weight is below the quorum on its own. Signer D is never used to recover an individual user's lost Signer C key. It cannot be combined with anything to bypass your key; it can only combine with our own A or B keys.

6. Frequently Asked Questions - Custody & Recovery

Q: I lost my Signer C key / seed phrase. Can you get my funds back?
A: No. Signer C is generated on your device and never held by us, by design. We have no way to reconstruct it, and no support process can recover it. This is why we ask you, when your trading wallet is created, to record and safely store it.

Q: What is "Signer D" and why do you have it?
A: It's an offline backup key we hold, used only if we permanently lose the seed for one of our two operating keys (A or B) - not merely if a server is temporarily down. It combines with whichever of A or B still has a usable seed to keep meeting the approval threshold. It cannot move funds on its own, and it can never be used to recover a user's individual lost key.

Q: Can you technically move my funds without my permission?
A: Our two automated signing services (A and B) together meet the approval threshold on their own, so - technically - yes, we have that capability, the same way any two-person signing arrangement does. We are telling you this directly rather than claiming otherwise. What protects you is that your own key (Signer C) independently meets that same threshold by itself, so you are never locked out and never dependent on our cooperation to access your own funds.

Q: What happens if your company disappears or your servers all go down permanently?
A: As long as you still have your Signer C key, you can use the standalone emergency withdrawal page (which needs no account with us and no server of ours) to move your funds directly to your own wallet at any time - this works regardless of what happens to our servers or company.

7. Testnet / Development Status

The App currently operates on the XRP Ledger Testnet while under active development. Testnet XRP and Testnet RLUSD have no real-world monetary value. We will clearly announce any transition to XRP Ledger Mainnet before it happens; once live on Mainnet, real funds will be at risk and these Terms will govern that use as well.

8. Your Responsibilities

9. Risks

Trading digital assets carries a substantial risk of loss. Grid and martingale-style strategies, including the one this App automates, can produce significant losses during sustained adverse price movement. Only allocate funds you can afford to lose entirely. Past performance is not indicative of future results.

10. Fees and Billing

11. No Financial Advice

The App is an automation tool, not a financial adviser. Nothing in the App constitutes investment, legal, or tax advice. All decisions to activate, allocate margin, or withdraw are made by you at your own discretion.

12. Limitation of Liability

To the maximum extent permitted by law, the App and its developer are not liable for losses arising from trading activity, XRPL network congestion or failures, Xaman or third-party service interruptions, user error (including a lost recovery key), or any indirect, incidental, or consequential damages. The App is provided "as is," without warranties of any kind, express or implied.

13. Changes to These Terms

We may update these Terms at any time. Continued use of the App after a change constitutes acceptance of the revised Terms.

14. Termination

You may deactivate copy trading at any time; open positions remain until closed or withdrawn. We may suspend or terminate access for violations of these Terms.

15. Contact

See our Contact page for how to reach us with questions about these Terms.