Privacy Policy

Last updated: August 21, 2026

1. Introduction

CopyFlow AI is an independently owned and operated service, run by its individual owner ("we," "us," or "our"). We respect your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to our website and services (the "Service").

2. Information We Collect

• Account information: your name, email address, and password when you register.
• Payment information: subscriptions are processed by Creem, our payment provider and merchant of record. We receive only your email and billing status — we never see or store your full card number.
• Content you create: the text inputs you provide and the outputs generated for you, so we can display your history and improve quality.
• Usage data: pages visited, features used, device type, IP address, and similar diagnostic information.
• Cookies: small files used to keep you signed in and understand aggregate usage patterns.

3. How We Use Your Information

• To provide, operate, and improve the Service;
• To process payments and manage your subscription;
• To respond to support requests and inquiries;
• To send service-related communications, such as billing notices and product updates;
• To detect, prevent, and address technical issues, fraud, or abuse;
• To comply with legal obligations.

4. AI Training

We do not use your private Inputs or Outputs to train models that are shared with or available to other customers. Content you delete from your account is removed from our active systems within 30 days and from encrypted backups within 90 days.

5. Data Sharing

We do not sell your personal information. We share data only with service providers who help us operate the Service, under contracts that protect your data:

• Creem — payment processing and merchant of record (Creem Privacy Notice);
• Cloud hosting providers — secure data storage and delivery;
• Email service providers — transactional and account-related emails.

We may also disclose information if required by law or to protect our rights, safety, or property.

6. Data Security

We protect your data with industry-standard measures, including TLS 1.3 encryption in transit and AES-256 encryption at rest, role-based access controls, and regular security reviews. No method of transmission or storage is 100% secure, but we work continuously to safeguard your information.

7. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we remove your personal data from active systems within 30 days, except where retention is required for legal, accounting, or fraud-prevention purposes.

8. Your Rights

Depending on your location (including the EU/EEA, UK, and California), you may have rights to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Delete your data ("right to be forgotten");
• Export your data in a portable format;
• Object to or restrict certain processing;
• Opt out of marketing communications at any time.

To exercise any of these rights, contact us at support@copyflowai.xyz. We respond within 30 days.

9. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.

10. International Transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 14 days before they take effect.

12. Contact Us

Questions about this policy or your data? Contact our privacy team at support@copyflowai.xyz.