Privacy notice

1. Scope and operator

This notice applies to the Nuropips website, account login and workspace, including the optional copy-trading feature. Nuropips does not sell personal information. The operator's full legal identity and postal address will be published here after legal review.

2. Information we process

• Account data: email address, display name, account role and account status.
• Authentication data: a one-way password hash, session records, login time, outcome and security-event history. Nuropips does not store plain-text passwords.
• Security signals: where the deployment is configured to do so, a keyed, non-reversible request fingerprint derived from trusted network information to limit abuse.
• Operational data: server errors, database health and necessary technical logs used to maintain reliability and investigate incidents.
• Education data: course and lesson progress, quiz results, associated with your account.
• Copy-trading data (only if you opt in): your chosen risk limits, the MetaApi account identifier issued for your connected broker account, consent timestamp, and a log of pause/resume/disconnect actions and copied trades. Your broker login and password are sent directly to our trade-copying provider, MetaApi, to connect your account — Nuropips does not receive, store or log them.

Nuropips does not use advertising cookies or third-party behavioral analytics.

3. Why we use it

We process this information to authenticate users, provide the features you use (education, signals, and copy-trading if enabled), enforce access controls, prevent abuse, diagnose failures, comply with legal obligations and improve the reliability of the service. Depending on the applicable law, these activities rely on performance of our terms of use, legitimate interests in operating a secure service, your explicit consent (for copy-trading specifically), or legal obligation.

4. Cookies and sessions

Nuropips uses an essential HTTP-only session cookie after a successful sign-in. It is restricted for security and is designed to expire after 12 hours. The site cannot provide authenticated access without this cookie. No advertising cookie is used.

5. Retention

Active sessions expire after 12 hours. The operational retention policy schedules unusable session records for deletion after 24 hours and authentication-event records after 90 days. Account information is retained while your account remains active and for a limited period afterward where required for security, disputes or law. If you disconnect copy-trading, your risk-limit and event history is kept as an audit trail rather than deleted, so you and we retain a record of what was authorized and when. Protected backups may persist for their documented backup lifecycle.

6. Sharing and third-party processors

Information may be processed by infrastructure, database and security providers acting on the operator's instructions, or disclosed where required by law. If you enable copy-trading, your broker account identifier (never your password) and the risk limits you set are shared with MetaApi (metaapi.cloud), the third-party service that performs the account connection and trade copying, strictly to operate that feature. Providers receive only the information needed for their service and should be bound by suitable confidentiality and data-protection terms. Hosting may involve processing outside your country; legally required transfer safeguards should be used where applicable.

7. Security

Nuropips uses password hashing, restricted session cookies, role checks, request throttling, security headers and database access boundaries. Broker credentials for copy-trading are transmitted directly to MetaApi and are never written to the Nuropips database or logs. No service is completely secure. Account holders should use a unique password and report suspected unauthorized access promptly.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy, or complain to a supervisory authority. You can pause or permanently disconnect copy-trading yourself at any time from your dashboard. Other requests can be made through the contact page. Identity verification may be required.

9. Children and changes

Nuropips is not intended for children or anyone who cannot legally agree to these terms in their jurisdiction. Material changes will be dated on this page and communicated to registered users when appropriate.