Sign in

Privacy policy

Last updated 5 November 2026

This policy explains what personal data PipYard collects, why, who it goes to, how long we keep it and what you can do about it. It covers the PipYard website and web app (pipyard.com), the API, the PipYard Connector, the Android app and the PipYard connector in AI assistants such as Claude and ChatGPT.

1. Who we are

PipYard is run by LogicFrame LLC, a Georgia (United States) limited liability company at 600 Garson Dr NE, Apt 7203, Atlanta, Georgia, United States ("PipYard", "we"). We decide how your personal data is used, so we're its controller. Contact us about privacy at support@pipyard.com.

2. What we collect

You give us

  • Account: your email address and how you sign in (password or Google). Passwords are held by Google Firebase Authentication; we never see them. If you turn on 2-step verification, Firebase holds its secret; we only see whether a sign-in used it.
  • Profile: when you confirmed you're 18 or older and accepted the terms, your language, and your settings.
  • Your work: strategies, their versions, rules, MQL5 code, notes, comments, theses, and the price data you upload.
  • AI provider keys you add (for example Anthropic, OpenAI, Google Gemini or DeepSeek), and your own model server's address if you use one. Keys are encrypted with Google Cloud Key Management and used only to call that provider for you.
  • Support: what you write in support chats and tickets. We remove anything that looks like a card number or a key before storing it.
  • Research searches you run, with their results and sources.
  • Payments: your plan, subscription, invoices and credit packs. Card and wallet details go straight to Stripe; we never receive card numbers. To check where we can sell, we keep the billing country you choose, the country your connection comes from when our network reports it, and the country of the billing address and card that Stripe reports for a payment.

From your MetaTrader 5, through the PipYard Connector

When you pair the Connector on the PC or server that runs your MT5, it sends us, for the accounts you link: the account number, broker server, whether it's a demo or real account, your label for it, balance, equity and open-position readings, the account's trades and open positions, and the price history you ask it to load. It also sends the device name you gave it, its version and its status. The Connector never sends your MT5 password; you log in to MT5 yourself.

Collected automatically

  • Usage and security records: the days you used PipYard, an audit log of important actions (for example changes to execution modes and limits, consents you give, and what PipYard staff do in the admin dashboard), and request logs with IP addresses kept by our hosting provider.
  • The IP address a Connector pairing request came from.
  • Push notifications: if you allow them, your browser's push subscription.
  • AI usage: for PipYard's own in-app AI, the model, the kind of task and its cost. PipYard doesn't store the text of those conversations.
  • AI assistant connections: which AI apps you connected (for example Claude or ChatGPT), and a record of each tool they called and when. We don't receive your conversation with the assistant, only the tool calls it makes to PipYard.

We don't use advertising or analytics cookies, and we don't track you across other sites. The web app keeps a few things in your browser: your sign-in (stored by Firebase), your language, theme and current workspace, and whether we've asked about notifications. Our fonts are served from pipyard.com, not from a font service.

3. Why we use it

  • To provide PipYard (our contract with you): sign-in, your workspaces and strategies, tests and reports, forward tests and the risk guard on your linked accounts, notifications you asked for, and the AI and research features you use.
  • Payments and accounts (contract, and legal obligations for tax and accounting records and for sanctions: checking the countries of a payment).
  • Security and abuse prevention (our legitimate interest in keeping PipYard and its users safe): rate limits, the audit log, detecting misuse.
  • Support (contract and legitimate interest): answering you, and improving our help articles from questions people ask.
  • Running and improving the service (legitimate interest): counts of active users, engine load, error rates and costs. We look at these in aggregate.
  • Push notifications (your consent, which you can withdraw in your browser or in Settings).
  • Legal obligations: keeping records the law requires and answering lawful requests.

We don't sell your personal data, we don't share it for advertising, and we don't use your strategies or trades to train AI models.

4. Who we share it with

  • Google Cloud and Firebase host PipYard: sign-in, the database, the servers, key encryption, logs and the web app.
  • Stripe processes payments and holds card and wallet details, and keeps billing records.
  • Google Gemini powers the support assistant (it sees your support messages) and research searches (it sees your search and returns sources).
  • Anthropic powers PipYard's own in-app AI on the Elite plan: it sees the messages you send there and the strategy context you share in them.
  • AI providers you choose: when you add your own key, your requests go to that provider under your own agreement with them.
  • AI assistants you connect (for example Claude or ChatGPT): when you connect PipYard, the assistant receives what PipYard's tools return to it, such as your strategies, results, trades and, in Claude, your linked accounts' status and trade book. Their use of it is covered by your agreement with them. You can disconnect any time in Settings → AI connections.
  • People in your workspaces see the strategies, versions, results and comments shared there, and your name or email next to your work. They never see your AI keys or your MT5 accounts.
  • PipYard staff see what they need to run the service and help you (your plan, usage and activity); no staff role sees your strategy code, account numbers or balances.
  • Authorities or others when the law requires it, or to protect PipYard, our users or the public; and a buyer or successor if PipYard's business is sold or reorganised, under this policy.

5. Where your data is

PipYard's servers and database run in Google Cloud's europe-west1 region (Belgium). Some providers process data in other countries, including the United States (for example Firebase Authentication, Stripe and the AI providers). Where data leaves the European Economic Area or the UK, we rely on the transfer safeguards, such as the European Commission's standard contractual clauses.

6. How long we keep it

  • Your account and your work: until you delete your account (Settings → Delete account), which removes your profile, workspaces only you use with their strategies, tests and stored trades, your linked accounts and trade book, AI keys, AI assistant connections, notifications, support conversations, research searches, the record of days you used PipYard, and pairing requests. Your price data is removed within 7 days. Strategies you wrote in other people's workspaces stay with those workspaces.
  • Research searches: 12 months.
  • Kept after you delete your account, because the law or our accounting requires it, or to show what happened: payment and refund records, the audit log, consents you gave, and the record of orders and execution decisions. These hold an internal user id, not your profile. Payment and refund records and the audit log are kept for 7 years; consents and the record of orders and execution decisions are kept for 7 years after the account is closed.
  • Cost and usage lines (compute used by a run, AI usage and its cost, credits used per period): when you delete your account, your identity is removed from them and only the anonymous figures stay, for our accounting.
  • Request logs: kept by Google Cloud Logging for 30 days.

7. Security

Data is encrypted in transit and at rest. AI provider keys are encrypted with Google Cloud Key Management. Commands to your Connector are signed, and the Connector only acts on commands it can verify. Staff access is limited by role and logged, and can require 2-step verification. No system is perfectly secure: use a strong password and turn on 2-step verification in Settings.

8. Your choices and rights

  • See and correct most of your data in the app; change your language and notifications in Settings.
  • Download your test trades and price data from their pages.
  • Disconnect AI assistants and remove AI keys in Settings → AI connections; unpair a Connector in Accounts.
  • Delete your account in Settings → Delete account.

Depending on where you live (for example in the EU, UK or California), you may also have the right to access a copy of your data, to have it corrected or erased, to restrict or object to some uses, to data portability, and to withdraw consent. Write to support@pipyard.com from your account's email address; we'll answer within the time the law sets (one month, the period set by the GDPR). You can also complain to your data protection authority.

9. Age

PipYard is for people aged 18 or over, and you confirm your age when you start. We don't knowingly collect data from anyone younger; if you believe we have, write to support@pipyard.com and we'll delete it.

10. Changes

We'll update this policy when what we collect or how we use it changes, and change the date at the top. If a change matters, we'll tell you in the app or by email before it applies.

11. Contact

LogicFrame LLC, 600 Garson Dr NE, Apt 7203, Atlanta, Georgia, United States. Email: support@pipyard.com.