What this covers
This policy covers the BoltCopy application, the public pages around it and the email we send you. It is written for the person whose account it is, so it says what actually happens rather than everything a policy could permit.
What you give us
To open an account: a name, an email address, a phone number and the country it belongs to. To keep it usable: your language, the avatar you pick and the notifications you switch on. The email address is not decoration — an account whose email is not verified cannot buy a plan or withdraw, because a payout has to be able to reach a person.
What the platform records as you use it
Every deposit, plan purchase, daily earning, commission and withdrawal is written to your ledger with its amount, its time and its reason. Your sign-in times, the address you signed in from and the device string your browser sends are kept as a security record. An administrator’s action on your account is written to a separate audit log with their name against it.
What we ask for only when we must
Identity documents are requested before a large withdrawal, or when a pattern on the account needs explaining. We do not ask for them to open an account. We never ask for a private key, a seed phrase or an exchange password, and nobody at BoltCopy will ever ask you for one.
Why we are allowed to hold it
Account and ledger data is held to perform the agreement you accepted at sign-up. Security records are held because a platform that moves money has a real interest in knowing who reached an account. Identity records are held because the law requires them. Service email is part of the account rather than marketing; anything optional is switched off from Settings.
Who else sees it
The payment gateway sees the amount and the payment details for a deposit, and the network and address for a payout, because it is the party moving the funds. The email provider sees your address and the message. The server that runs the platform holds the database. That is the whole list. Nothing is sold, rented, shared with advertisers or handed to a data broker — there is no advertising or analytics code on this site at all.
How long it is kept
Your account data is held while the account is open. When an account closes the profile is removed, but the financial and identity records behind it are kept for the period the money-laundering rules impose — five years from the last transaction — because deleting them early is not something we are permitted to do. After that they go.
How it is protected
The connection is encrypted and the site refuses to be served without it. Passwords are stored as hashes and cannot be read back, by us or by anyone. Withdrawal passwords are hashed the same way. Administrative access is restricted, and every administrator decision on an account is logged against the account it touched.
What you can ask for
A copy of what we hold, a correction of anything wrong, an export of it, or deletion of whatever we are not obliged to keep. You can object to a use and withdraw a consent you gave. Ask through Support inside the app; the answer comes within thirty days. If it does not satisfy you, the data protection authority where you live can be asked to look at it.
Children
BoltCopy is for adults. An account may not be opened by anyone under 18, and an account found to belong to a minor is closed and its data deleted.
When this changes
A change to what we collect or to who sees it is published here and announced in the app before it takes effect. The date at the foot of this page is the version you are reading.
Last updated September 2026.
