Privacy Policy
How COPY. handles personal data. The Korean version prevails.
Effective 2026-09-21
What we collect
- The AI assistant runs on your device — prompts and answers are never sent to us or to any AI service.
- Members: username, hashed password, optional email, signup IP, synced app data, stored docs and share-view counts.
- All visitors: IP address, device/OS/browser, in-app actions (names only), time on screen, approximate location from IP.
- Community: posts, comments and photos (location data removed), likes and reports, posting IP; guest question emails.
- Guest docs and settings stay in your browser and are never sent to us.
- T-Ad: if a member connects their own Meta ad account, we store the Meta access token (ads_read only — we never create or edit ads), their Meta name, ad account IDs/names and a 10-minute cache of ad performance. The token is never shown to anyone.
Why
Accounts and sync, docs sharing, security and abuse prevention, usage statistics, ads.
Retention
Account data is deleted when you delete your account. Usage and security logs are kept for one year.
Processors
- Web hosting provider
- ip-api.com (US) — IP geolocation
- Google (US) — AdSense ads and analytics
- YouTube — video playback and captions
- Meta Platforms (US) — login and ad performance for members who connect a Meta ad account
- Higgsfield AI (US) — generates T-Ad videos from the video and reference images a member uploads (sent only when the member starts a video job)
Your rights & contact
Export or delete your data from the Account window, or email copydot.thomaspaik@gmail.com.
Meta data deletion: press "Disconnect" in T-Ad — the token, ad account list and cached performance are deleted at once and the Meta permission is revoked. You can also remove the app in Facebook Settings → Business Integrations.
Effective 2026-09-21.