Privacy Policy

How CopiFynex collects, uses, shares, and protects your personal information, and the rights available to you.

1. Introduction and Scope

This Privacy Policy explains how CopiFynex Technology Limited ("CopiFynex", "we", "our", or "us") processes personal information when you visit our websites, create an account, follow a trader, fund or withdraw from your account, contact our support team, or otherwise use the CopiFynex copy trading platform (the "Services").

We process personal information in line with the General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR"), the United Kingdom General Data Protection Regulation and the Data Protection Act 2018, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (the "CCPA"), and other applicable data protection laws in the jurisdictions where we operate.

2. Controller of Your Personal Information

The data controller responsible for personal information processed in connection with the Services is:

Legal entity: CopiFynex Technology Limited
Registered office: 1821 N Willow Ave, Broken Arrow, OK 74012, US
Privacy contact: privacy@copifynex.com
Data Protection Officer (DPO): dpo@copifynex.com

3. Categories of Personal Information We Collect

Depending on how you interact with the Services, we may collect identification and contact data, government-issued identifiers, financial and transaction data, authentication and security data, technical and usage data, communications data, and marketing preference data.

4. Sources of Personal Information

We obtain personal information directly from you, from your device and browser, from identity verification providers, from connected exchanges and custodians, from public sources, and from affiliates and referrers.

5. Purposes of Processing and Legal Bases

We process personal information to create accounts, execute copy-trading instructions, process deposits and withdrawals, provide customer support, comply with legal obligations, secure the Services, and send non-essential marketing communications where consent is given.

6. Recipients and Sub-processors

We share personal information with cloud and infrastructure providers, KYC providers, connected exchanges, payment providers, communications providers, analytics providers, professional advisers, and authorities where required by law.

7. International Data Transfers

Personal information may be transferred to, processed in, and stored in jurisdictions outside your country of residence, including the United States and other regions in which our infrastructure and service providers are located.

8. Retention Periods

We retain personal information only for as long as necessary for the purposes for which it was collected and to comply with our legal obligations.

9. Automated Decision-Making and Profiling

Some processing operations involve automated decision-making for sanctions screening, risk-based transaction monitoring, and geographic access controls. Where a decision produces legal effects or similarly significant effects, you may request human review.

10. Security of Personal Information

We apply technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, and destruction.

11. Your Rights Under the GDPR and the UK GDPR

If you are in the EEA, the United Kingdom, or Switzerland, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, subject to applicable law.

12. Children's Privacy

The Services are not directed to anyone under the age of 18 and we do not knowingly collect personal information from children.

13. Cookies and Similar Technologies

We use cookies, local storage, web beacons, and similar technologies to operate the Services, remember preferences, and understand how they are used.

14. Marketing Communications

Transactional messages are sent on the basis of contract or legal obligation, while promotional communications are sent only where you have opted in or where applicable law allows them.

15. Notice for California Residents

If you are a California resident, you have the right to know, delete, correct, opt out of sale or sharing, and limit the use of sensitive personal information, subject to applicable law.

16. Notice for United Kingdom Residents

If you are located in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply to our processing of your personal information.

17. Third-Party Links and Services

The Services may link to or integrate third-party websites and services that operate under their own privacy notices.

18. Personal Data Breach Notification

We maintain an incident response plan and will notify the relevant authority and affected users where a breach is likely to result in a high risk to their rights and freedoms.

19. Changes to This Privacy Policy

We review this Policy periodically and update it to reflect changes in our practices, services, or applicable law.

20. How to Contact Us

For privacy questions, requests, or complaints, contact us at privacy@copifynex.com.

Last updated: April 2, 2026