The fine print.

Terms of service

These terms govern your use of PipSync ("we", "us"). The current contracting-entity status and contact details are listed in the Legal Notice. By creating an account you accept these terms.

1. What PipSync does

PipSync is a signal-to-execution routing platform. We receive signals from sources you configure, optionally transform them, and submit orders to brokers on your behalf. We do not provide investment advice. We are not a broker-dealer. We do not hold client funds.

2. Your responsibilities

• You are solely responsible for the trading decisions executed through PipSync, including any rules, sources, and signal providers you connect.
• You must comply with the terms of service of every broker and signal source you connect.
• You must keep your account credentials secure. Enable 2FA.

3. Fees & cancellation

Subscriptions are billed monthly or annually in advance. You may cancel any time — access continues until the end of the current billing period. Refund requests are handled under our own published refunds policy, including the rule that refund eligibility may end once you activate signal-copy.

4. Suspension & termination

We may suspend accounts that demonstrably violate broker TOS, engage in market abuse, or attempt to reverse-engineer the platform. We'll notify you before any suspension except in cases of ongoing abuse.

5. Liability

PipSync is provided "as-is". To the maximum extent permitted by law, our aggregate liability is capped at the fees you paid in the preceding 12 months. We are not liable for broker-side outages, slippage, or your own rule configurations.

6. Governing law

These terms are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-law rules. Exclusive venue: the state and federal courts located in New Castle County, Delaware.

Privacy policy

We collect only what we need to run the service. Namely:

• Account data: email, name, billing address.
• Broker credentials: API keys and tokens — stored through app-managed credential-encryption helpers when storage is required and never shown back in plaintext.
• Signal & order data: the things you route through us. Retained 12 months (Enterprise: 3 years) for audit.
• Product analytics: page views, feature usage — pseudonymised, no third-party trackers.

We do not sell or share your data with advertisers. We do not profile you for marketing.

You can request data export or deletion from Account settings where available, or by emailing support@pipsync.io.

If you are a California resident, you can exercise your rights under the CCPA/CPRA by emailing support@pipsync.io: the right to know what personal information we hold, to have it deleted or corrected, to opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information. We will not discriminate against you for exercising any of these rights.

Risk disclosure

PipSync is a technical routing tool. We do not assess whether any signal, source, or trade is suitable for you. We do not recommend specific trades, sources, or brokers. Connecting a third-party signal source means you accept its risks — including the possibility that the source is wrong, inconsistent, or malicious.

Server-side risk controls (DD caps, position sizing, news blockers) exist to help you manage risk, not eliminate it. In extreme market conditions, slippage, gaps, and broker-side suspensions can produce fills outside your configured limits.

Cookies

We use a small number of strictly-necessary cookies to authenticate your session and remember UI preferences (dark mode, time-zone, etc.). We do not use any cookies for advertising, retargeting, or cross-site tracking.

Optional analytics cookies (self-hosted, aggregated, no fingerprinting) are only set after you allow them in the cookie prompt on first visit. You can change that choice at any time from the cookie prompt, Account settings where available, or by contacting privacy support.

Technical and organisational measures (TOMs)

High-level summary of measures we apply to protect personal data. This is descriptive, not an exhaustive security specification.

• Access control: role-based access, least-privilege service accounts, and administrative actions protected with strong authentication (including 2FA for admin operations where enforced).
• Encryption: TLS for data in transit; broker credentials and other sensitive fields encrypted at rest with app-managed encryption where stored.
• Logging and audit: security-relevant events and administrative actions logged with append-only patterns where implemented; operational logs designed to avoid unnecessary personal data.
• Backups and availability:infrastructure-level redundancy and backups according to our hosting provider's practices; restore testing is an operational responsibility.
• Incident response: security contact published below; suspected incidents should be reported to support@pipsync.io.
• Vendors: reviewed before onboarding, with written arrangements where required.

Contact a human

Legal, privacy and security questions: support@pipsync.io

The registered office is published in the Legal Notice.