Privacy Policy

Overview

This Privacy Policy describes how Rhino4 Solutions (“Rhino4”, “we”, “us”, or “our”) collects, uses, and protects your information when you use the R4Copier desktop terminal (the “Software”), the R4 Copier member dashboard, and the website at r4copier.com (together, the “Services”).

R4Copier is a self-hosted forex trade copier that replicates orders from one master account to your slave accounts on MT4, MT5, and cTrader. The Software runs entirely on your own machine or VPS. That architecture is the foundation of this policy: most of the sensitive data involved in copying trades never leaves your device and is never sent to us.

Our privacy-first architecture

The Software authenticates each broker through their native platform API using a trade-only token. Your broker credentials are stored locally and encrypted in your operating system’s native keystore (Windows Credential Manager, macOS Keychain, and equivalents). They never leave the device the terminal runs on, and our cloud holds no copy.

The web dashboard only ever sees what your terminal chooses to publish — a sanitized snapshot of status, balances, and logs. It cannot read your passwords, and the trade-only token can never be used to withdraw, transfer, or alter your funds.

The short version: credentials stay on your hardware. We hold your account and billing details so the member area and your licence work — nothing more than we need.

Information we collect

Account information

When you create an account or sign in, we collect your name, email address, and a securely hashed password. If you sign in with Google, we receive your name, email address, and Google account identifier from Google instead of a password.

Billing information

Subscriptions are processed by Stripe. Stripe collects and stores your payment card details directly — we never see or store full card numbers. We retain limited billing metadata such as your plan, subscription status, billing country, and the last four digits and brand of your card for receipts and support.

Member-area telemetry (the sanitized snapshot)

When you link the terminal to your member account, it publishes a sanitized snapshot so you can monitor your accounts from anywhere. This may include account labels and login IDs, balances and equity, connection status, replication latency, and trade logs. It does not include broker passwords.

Device & connection data

To show the live status of your terminals across the devices you sign in from, we collect the devices you connect and their online/offline state.

Support communications

If you contact support, we keep your messages and the contact details you provide so we can help and keep a record of the request.

Technical & usage data

Like most websites, we automatically receive your IP address, browser and device type, and basic usage data when you visit r4copier.com or use the dashboard, for security, diagnostics, and fraud prevention.

What we never collect

Your broker, prop-firm, or platform passwords — these are encrypted locally and never transmitted to us.
Your investor or master passwords.
Any ability to withdraw, transfer, or move funds in your trading accounts.
Full payment card numbers — these are held by Stripe, not by us.

How we use information

To provide and operate the member area, licensing, and the Software.
To process subscriptions, trials, renewals, and refunds.
To show live status of your connected accounts and send the alerts you enable.
To provide customer support and respond to your requests.
To secure the Services, detect abuse, and prevent fraud.
To send essential service notices, and — only where permitted — product updates you can opt out of.
To comply with our legal obligations.

Cookies & local storage

We use a small number of cookies, and we do not sell your data to advertisers. These include:

Authentication cookies — keep you signed in to the member area securely.
Preference storage — for example a tc-palette cookie that remembers your chosen colour theme.
Essential operational data — used for security and to keep the Services working.

You can clear or block cookies in your browser, though some features may stop working if you do. For full details, see our Cookie Policy.

Third-party processors

We share the minimum necessary data with vetted providers who help us run the Services:

Stripe — payment processing and subscription billing.
Google — optional “Sign in with Google” authentication.
Google Analytics — aggregate, consent-based traffic measurement on the website. It runs only if you accept analytics cookies, and you can withdraw consent at any time via our Cookie Policy page.
Hosting & infrastructure providers — to operate our website and member-area servers.
Email & messaging providers — to deliver verification emails, password resets, receipts, and the alerts you enable.

Each processor handles your data under its own privacy terms and only for the purposes above.

We do not sell your personal information. We disclose information only:

To the processors listed above, to provide the Services.
When required by law, regulation, legal process, or a valid government request.
To protect the rights, safety, and property of Rhino4 Solutions, our users, or the public.
In connection with a merger, acquisition, or sale of assets, subject to this policy.

Data retention

We keep your account and billing records for as long as your account is active and for as long afterwards as needed to meet legal, tax, and accounting obligations. Sanitized telemetry and trade logs are retained to power the dashboard and are removed when no longer needed or on your request, subject to those obligations. Because broker credentials live only on your device, they are deleted when you remove them or uninstall the terminal.

Security

We use industry-standard safeguards — encryption in transit, hashed passwords, scoped access controls, and trade-only broker tokens — to protect your information. The most sensitive data, your broker credentials, never reaches our servers in the first place. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you and the relevant authorities of incidents where the law requires it.

Your rights & choices

Depending on where you live, you may have rights under laws such as the EU/UK GDPR or the CCPA, including the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your account and associated data.
Export a copy of your data.
Object to or restrict certain processing, and withdraw consent where processing relies on it.
Opt out of non-essential marketing emails at any time.

You can manage much of this from the member dashboard, or contact us using the details below. We will respond within the timeframe required by applicable law.

International transfers

Rhino4 Solutions operates internationally, and your information may be processed in countries other than your own. Where we transfer personal data across borders, we rely on appropriate safeguards, such as standard contractual clauses, as required by applicable law.

Children’s privacy

The Services are intended for adults aged 18 and over and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Services. Your continued use of the Services after an update means you accept the revised policy.

Contact us

Questions about this policy or your data? Email us at info@r4copier.com, or reach general support at support@r4copier.com.

Rhino4 Solutions
Meydan Grandstand, 6th Floor, Meydan Road
Dubai, United Arab Emirates