Effective October 7, 2026. This Privacy Policy explains what information Whisper Arc Technologies, LLC, a Florida limited liability company doing business as Whisper Systems (“Whisper Systems,” “we,” “us,” or “our”) collects when you use Fusion Copilot at https://copilot.whisper-systems.com and the Whisper Systems websites, and how we use and protect it. Questions: the support page.
Information we collect
- Account — your email address, your password stored only as a
one-way hash (never in plain text), when the account was created, its plan and
status, and which version of our Terms you accepted and when.
- Sign-in & security — if you turn it on, your two-factor
(TOTP) secret and hashed recovery codes; hashed, single-use, expiring tokens
for email verification, signup, and password reset; random identifiers of
signed-out sessions (not linked to your email, and kept only until that session
would have expired, at most 7 days); and short-lived counters of failed sign-in
attempts by email and IP address.
- Billing — your Stripe customer ID, subscription status and
renewal date, and for Founders Elite purchases an order record (email,
amount, Stripe checkout and payment references, and status). Card details
are handled by Stripe; we never see or store your card number.
- Futures feed (paid members who connect NinjaTrader) — your
pairing token, stored only as a hash with its creation date, and the status of
your feed (which symbols it sends and when data last arrived). The
market data your indicator sends (bars, trades, and order-book levels)
and the read computed from it are held in memory only: they are not
written to our databases or logs and are never shown to anyone else. They are
cleared when you disconnect your feed on the Connect page, when you delete your
account, and whenever the service restarts.
- Support — the email address, messages, and any attachment
you send us, plus diagnostics attached automatically to help us fix problems:
your account’s plan and status, founder status, account creation date,
your browser’s user-agent string, the app version and website host, the
market you were viewing, and the health of our own services. Diagnostics never
include your password or payment details.
- Founding Member Program — waitlist entries (name, email,
membership of interest) and feedback you send through the founder dashboard.
- Logs — our servers record technical logs needed to run and
secure the service, such as request times, IP addresses, pages and endpoints
requested, errors, and in some events the account email involved.
- Preferences — the market you last viewed, and display settings
the terminal keeps in your own browser (see “Cookies and local
storage”).
We do not collect your broker, trading-account, or position information, and
we do not use third-party analytics or advertising trackers.
How we use it
To create and secure your account, verify your email, and sign you in; to
provide the service, including your read and your own futures terminal; to
process payments, subscriptions, memberships, and refunds; to answer support
requests; to send service emails (verification, password reset, security,
billing, and important changes to the service or these policies); to prevent
fraud and abuse and keep the service secure; and to meet legal, tax, and
accounting obligations. We do not sell your personal information, and we do
not share it for targeted advertising.
Service providers
We share information only with providers that help us run the service, and
only what each one needs:
- Stripe — payments, subscriptions, invoices, and refunds.
Stripe’s own privacy policy applies to the payment details you give
it.
- Brevo — delivery of our service emails (your email address and
the message).
- Cloudflare — network delivery and security for our websites
(it handles your connection, including your IP address).
- Our server hosting provider — the servers in the United States
that run the service and store its databases.
- Microsoft Azure AI Speech text-to-speech — receives
narration text only; used to generate the spoken voice. Our server sends it
only the generated market narration text, never your personal information. If that service
is unavailable, your own browser’s built-in speech reads the narration on
your device.
Crypto market data comes from Coinbase’s public feeds; our servers
fetch it and we send Coinbase nothing about you. We may also disclose
information if the law requires it, to protect our rights, users, or the public,
or as part of a merger, sale, or reorganization of our business, in which case
this policy continues to apply to it.
Cookies and local storage
We use an essential, secure, HttpOnly session cookie (valid for up to
7 days) to keep you signed in, and a preference cookie
(fc_symbol, up to one year) to remember the market you last viewed.
The terminal also saves display settings (such as chart layers and panel
choices) in your browser’s local storage; they stay on your device. We do
not use advertising, analytics, or cross-site tracking cookies.
Retention & deletion
- Account and security data are kept while your account exists. When
you delete your account, your login, password hash, two-factor and recovery
data, and pairing tokens are deleted immediately, and any futures feed in
memory is dropped.
- Billing and order records (ours and Stripe’s) are kept as long
as tax, accounting, and legal rules require, even after an account is
deleted.
- Support tickets, attachments, founder feedback, and waitlist entries
are kept to handle your request and for our records. Ask us through the
support page and we will delete or anonymize them, unless we must keep them
for a legal reason.
- Server logs are kept only as long as needed for security and
troubleshooting, then deleted in normal log rotation.
- Backups. Deleted information can remain in our encrypted backups
until those backups are replaced in the normal backup cycle. We do not restore
it into the live service.
Security
We protect your information with encryption in transit (HTTPS), hashed
passwords and tokens, optional two-factor authentication, access controls, and
encrypted backups. No method is perfectly secure. If a breach affecting your
personal information occurs, we will notify you and the authorities as the law
requires.
Your choices & rights
You can change your password, turn on two-factor authentication, disconnect
your futures feed, and permanently delete your account yourself from the
account page. You can also ask us, through the support
page, to access, correct, delete, or export your personal information. We may
need to confirm the request comes from the account’s email address.
Depending on where you live you may have additional rights under local privacy
law, and we will honor them as the law requires, without discriminating against
you for using them.
Children
The service is for adults 18 and over. It is not directed to children, and we
do not knowingly collect information from anyone under 18. If you believe a
child has given us information, contact us and we will delete it.
Where data is processed
We are based in the United States and our servers are in the United States.
If you use the service from elsewhere, your information is transferred to and
processed in the United States.
Changes & contact
We may update this policy. We will post the new version with a new
effective date and, for material changes, notify account holders by email or
in the service. Questions or requests: the support page. Whisper Arc Technologies, LLC, a Florida limited liability company doing business as Whisper Systems (“Whisper Systems,” “we,” “us,” or “our”).