1. Information We Collect
We collect information in the following ways:
A. Information You Directly Provide
- Account Data: Your name, email address, and password (hashed/encrypted) when you register for an account.
- Payment Data: Billing address and payment card details (processed securely by our third-party payment processor, Stripe). We do not store full payment card numbers on our servers.
- Content Input: The text, data, and prompts (Input) you submit to the AI tools, and the resulting content (Output) you save.
- Communications: Records of correspondence when you contact customer support or submit feedback.
B. Connected Social Media Accounts
If you choose to connect a social media account — Facebook Pages, Instagram Business accounts,
Threads or TikTok — we receive and store the following from that platform, and only for the
accounts you explicitly connect and select:
- Account identifiers and public profile details: the account or page ID, display name, username, profile picture and account type, so we can show you which destination you are publishing to.
- Access tokens: the credentials that allow us to publish on your behalf. These are stored encrypted at rest (AES-256-GCM) and are never shown to you or to anyone else.
- Post results: the ID and permalink of each post we publish for you.
- Performance metrics of posts we published: aggregate counts such as views, reach, likes, comments, shares and saves, stored as dated snapshots so you can see how your content performed over time.
We read engagement figures only as aggregate totals. We do not collect the names, IDs or profiles
of the people who liked, commented on or shared your posts, and we do not read the text of their
comments. We do not read your private messages, your follower lists, your drafts, or any content
that our Service did not publish for you. We do not access accounts you have not connected.
Data obtained from these platforms is used only to operate the publishing and analytics features
you asked for. It is never sold, never used for advertising, never shared with other users of the
Service, and never sent to our AI providers. You can disconnect an account at any time from the
Connect page; doing so deletes the stored tokens and the associated account records immediately.
C. Information Collected Automatically (Usage Data)
When you use the Service, we automatically collect data related to your activity:
- Log Data: Your Internet Protocol (IP) address, browser type, device information, operating system, and the date/time of access.
- Usage Metrics: Information on how you interact with the Service, such as the AI tools you use, the amount of content generated, the features accessed, and the time spent on each page.
2. How We Use Your Information
We use the collected data for the following purposes:
- To Provide and Maintain the Service: To operate the Copypen platform, process your payments, and fulfill your requests to generate content.
- Account Management: To manage your account, send you technical notices, updates, security alerts, and support messages.
- Service Improvement: To monitor usage, analyze trends, and troubleshoot errors. This helps us understand how to improve our AI models and user interface.
- AI Model Processing: Your Input is processed by our underlying AI technology (which may include third-party providers like OpenAI and Anthropic) to generate the requested Output.
- Marketing and Communication: To send you promotional communications (if you have opted in) about new features, offers, and events. You can opt out at any time.
- Security and Legal Compliance: To detect, prevent, and respond to potential fraud, abuse, and other illegal activities, and to comply with legal obligations.
3. How We Share Your Information
We do not sell your personal data. We only share it in the following limited circumstances:
- With Service Providers: We share data with trusted third-party vendors and partners who perform services on our behalf, such as cloud hosting (our cloud hosting and network infrastructure providers), payment processing, analytics, and customer support. These parties are contractually obligated to protect your data.
- AI Providers: To generate Output, we send your Input (prompts) to third-party AI model providers. We contractually restrict these providers from using your Input or Output to train their models without a separate agreement. We recommend you do not include sensitive personal data or confidential business information in your Input.
- For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
- Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
4. Data Retention and Security
- Retention: We retain your Personal Data only for as long as necessary to provide the Service, maintain your account, and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law (e.g., for tax purposes).
- Security: We implement commercially reasonable technical and organizational security measures (such as encryption, firewalls, and access controls) to protect your data from unauthorized access, disclosure, or destruction. However, no security system is impenetrable, and we cannot guarantee the absolute security of your data.
5. Your Data Rights (GDPR, CCPA and Malaysia's PDPA)
Depending on your location, you may have the following rights regarding your Personal Data:
- Right of Access: The right to request copies of the Personal Data we hold about you.
- Right to Rectification: The right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure ('Right to be Forgotten'): The right to request that we erase your Personal Data, under certain conditions.
- Right to Restrict Processing: The right to object to or restrict our processing of your Personal Data, under certain conditions.
- Right to Data Portability: The right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- Right to Opt-Out: The right to opt-out of the "sale" or "sharing" of your Personal Data (as those terms are defined under applicable law). Copypen does not sell your data in the conventional sense, but you may contact us to exercise this right.
To exercise any of these rights, please contact us using the details in Section 7.
6. Use of Cookies and Tracking Technologies
We use "Cookies" and similar tracking technologies to track activity on our Service and hold certain information. Cookies are small files stored on your device. We use them for:
- Strictly Necessary Cookies: Essential for the operation of the Service (e.g., keeping you logged in).
- Performance/Analytics Cookies: To analyze how users interact with the Service and improve performance.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
If you have questions or concerns about this Privacy Policy or your data, please contact us:
Email: [email protected]
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.