Privacy Policy
Last updated: November 28, 2025
1. Introduction
Welcome to CoPilly ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our browser extension (collectively, the "Service").
2. Information We Collect
Information You Provide
- Account Information: Email address, name, and profile picture (via Google OAuth).
- User Preferences: Persona settings, tone preferences, and custom instructions.
- Input Data: Text you manually select on webpages to generate context-aware responses.
- Payment Information: Billing details are processed securely by our Merchant of Record (Paddle). We do not store your full credit card information.
Information Automatically Collected
- Usage Data: Features used, number of generations, and extension interactions.
- Technical Data: Browser type, operating system, IP address (for security and rate limiting).
- Cookies: Session cookies for authentication.
Note on LinkedIn Data: We do not scrape or store your LinkedIn browsing history. We only process the specific text snippets you manually select or interact with to generate a response.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the AI writing assistant service.
- Process your transactions and manage your subscriptions via Paddle.
- Send you technical notices, updates, security alerts, and support messages.
- Monitor and analyze usage patterns to improve user experience.
- Detect, prevent, and address technical issues and security threats.
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share your information in the following situations:
- Service Providers: With trusted third-party services that help us operate our business.
- Legal Requirements: If required by law or in response to valid legal requests.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
5. Data Security & Retention
We implement appropriate technical and organizational security measures including encryption (TLS/SSL), secure Google OAuth, and strict access controls.
We retain your personal information only for as long as necessary. Account data is retained while active. Generation history is retained for your convenience (history feature) but can be deleted upon request. Payment records are retained by Paddle for tax purposes.
6. Third-Party Services
We use the following third-party services to operate CoPilly:
- Paddle: Payment processing and Merchant of Record.
- DeepSeek / OpenAI: LLM providers for text generation. (Data sent to AI providers is not used for model training by default).
- Google Cloud: Hosting and authentication.
- Sentry: Error tracking and monitoring.
7. Your Rights
Depending on your location (including EEA, UK, and California), you have rights regarding your personal information, such as access, correction, deletion, and restriction of processing. To exercise these rights, please contact us at privacy@copilly.com.
8. Contact Us
If you have any questions about this Privacy Policy, please contact us at: privacy@copilly.com