Privacy Policy
This policy explains what we collect when you use pipsly.app and the Pipsly app, why, how long we keep it, who we share it with, and your choices. "We" means Pipsly, operated by [BUSINESS ENTITY NAME / REGISTRATION]. You can reach us by email at support@pipsly.app or on Telegram at @pipslyadmin1.
We are not your broker. Your trading account, deposits and withdrawals are with your broker, whose own privacy policy covers the data you give them.
1. What we collect
Your account
- Email address, name and Telegram username. To sign you in and to contact you about your account.
- Your app password, stored only as a salted one-way hash (scrypt). We cannot read it.
- The Activation Code your account belongs to.
When you connect an MT5 account
- MT5 login number and server, and the account name that MT5 reports.
- Your MT5 trading password, only if we run MT5 for you. It is encrypted (AES-256-GCM) with a key kept only on our server, never shown in the app, and used only to sign your terminal in. It is deleted when you unlink the account or when your terminal is paused. You can cut off our access at any time by changing your MT5 password.
- Live account data from your terminal: balance, equity, margin, positions and pending orders, the limits and alerts you set, and timing figures.
- What you tap and what the system replies.
Verification
When you verify an MT5 number (in the app, on our onboarding page or with @pipslyadmin1 on Telegram), we check it against the client list kept for your Activation Code. A verified account (MT5 number, broker, server, email, Telegram username) is added to that list. We log each check with only the last four digits of the number.
To keep your account safe
- A session cookie that keeps you signed in (HttpOnly, up to 30 days, renewed while you use the app), and a cookie that remembers your Activation Code (up to 60 days).
- Face ID / passcode keys, if you turn the lock on: only the public key your phone creates.
- When you last opened the app, and your IP address briefly, to limit repeated attempts.
We do not use advertising or analytics cookies, and we do not run third-party trackers.
2. Why we use it
- To provide the app: show your account live, send the commands you tap to your MT5 terminal, and run MT5 for you.
- To verify your MT5 account and to send you your MT5 Key.
- To keep your account secure and to stop abuse, and to answer you when you contact us.
We do not sell your data, and we do not use it for advertising.
3. Who we share it with
- The person who invited you (the owner of your Activation Code) keeps the client list for that code in Google Sheets, and can see the verification details listed above.
- Service providers: our hosting provider, Google (client lists), our email provider (to send your MT5 Key and account emails) and Telegram (if you use @pipslyadmin1).
- Your broker: your hosted terminal signs in to your broker with your MT5 credentials, as any MT5 terminal does.
- Embedded content: TradingView charts and prices load from TradingView. Nothing about your account is sent to them.
- The law: if we are legally required to, or to protect our users or our service.
4. How long we keep it
- Commands, replies and alerts: 30 days. Sign-in sessions: until you sign out or 30 days without use.
- MT5 trading password: until you unlink the account or it is paused.
- Your account and linked MT5 accounts: until you ask us to delete them.
5. Your rights
You can ask for a copy of your data, ask us to correct it or delete your account by email at support@pipsly.app or on Telegram at @pipslyadmin1. Tell us the email address on your account.
6. Security
Connections are encrypted (HTTPS). Passwords are hashed, MT5 trading passwords are encrypted, and the session cookie cannot be read by scripts. If we learn of a breach that affects you, we will tell you and the authorities as the law requires.
7. Age and changes
The service is for adults. If we change this policy, we will update the date at the top and tell you in the app about important changes.