Privacy Policy

Last updated: August 25, 2026

At CopyUp.ai ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, password, and profile information
  • Content Data: Keywords, content strategies, generated content, and publishing preferences
  • Business Information: Company name, industry, website URL, and business goals
  • Payment Information: Billing address and payment method details (processed securely through third-party payment processors)

1.2 Automatically Collected Information

  • Usage Data: Pages visited, features used, time spent, and interaction patterns
  • Device Information: IP address, browser type, operating system, and device identifiers
  • Cookies and Tracking: We use cookies and similar tracking technologies to enhance your experience

1.3 Third-Party Integrations

When you connect third-party services, we may collect:

  • Social Media Platforms: Access tokens and profile information from Telegram, Facebook, Instagram, LinkedIn, GitHub, TikTok, YouTube, Threads, Shopify, Wix, WordPress, and Google Business Profile
  • Analytics Services: Data from Google Analytics, Google Search Console, and other analytics platforms
  • AI Platforms: API keys and usage data for OpenAI, Claude, Gemini, Perplexity, and Groq

1.4 TikTok Integration

CopyUp allows users to connect a TikTok account and upload, schedule, or publish content that the user has reviewed and approved.

TikTok permissions we request

  • user.info.basic: Read the connected user's Open ID, avatar, and display name
  • user.info.stats: Read profile-level totals, including likes count, follower count, following count, and video count
  • video.list: Read the user's public videos and per-video like count, comment count, share count, and view count
  • video.upload: Upload content to the user's TikTok account as a draft for further editing and posting in TikTok
  • video.publish: Publish user-approved content directly to the user's TikTok profile

TikTok information we process

  • TikTok account identifiers, including Open ID and, when returned by TikTok, Union ID
  • Display name, avatar URL, granted authorization scopes, access token, refresh token, and token expiration information
  • Creator settings returned by TikTok, including available privacy levels, interaction permissions, and maximum video duration
  • Videos, captions, cover selection, privacy selection, comment, Duet and Stitch choices, commercial-content disclosures, publishing status, and TikTok post identifiers
  • Profile-level likes, follower, following, and video totals only when the user grants user.info.stats
  • Public-video metadata and per-video like, comment, share, and view counts only when the user grants video.list

How we use TikTok information

  • To identify and display the TikTok account connected by the user
  • To maintain the user-authorized connection and retrieve current posting options
  • To upload, schedule, or publish content and settings expressly selected or approved by the user
  • To show publishing status and, when authorized, information about content published through CopyUp
  • To secure, support, and troubleshoot the TikTok integration

User control, sharing, retention, and deletion

CopyUp sends content and publishing choices to TikTok only after the user expressly initiates, approves, or schedules the action. CopyUp does not sell TikTok user data.

TikTok connection credentials are retained while the user's TikTok account remains connected to CopyUp. Disconnecting TikTok in CopyUp removes the stored TikTok connection credentials. Users can also revoke CopyUp's authorization in TikTok. Content records retained in CopyUp remain subject to the retention and deletion terms in this policy.

Users may delete their CopyUp account through the account privacy controls or request access, correction, or deletion by emailing privacy@copyup.ai.

TikTok's own collection and use of information is governed by its Privacy Policy.

2. How We Use Your Information

We use the collected information for the following purposes:

  • To provide, maintain, and improve our Service
  • To process your transactions and manage your account
  • To generate AI-powered content, forecasts, and recommendations
  • To publish content to connected social media platforms on your behalf
  • To send you updates, newsletters, and marketing communications (with your consent)
  • To respond to your inquiries and provide customer support
  • To detect, prevent, and address technical issues and security threats
  • To comply with legal obligations and enforce our terms of service
  • To analyze usage patterns and improve user experience

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We may share information with third-party service providers who perform services on our behalf:

  • Supabase: Database hosting and authentication services
  • OpenAI, Anthropic, Google, Perplexity, Groq: AI content generation and analysis
  • Vercel: Hosting and deployment services
  • Payment Processor: Secure payment processing through Hyp Pay
  • Email Services: Transactional and marketing emails

3.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

  • Encryption of data in transit (SSL/TLS) and at rest
  • Secure authentication and authorization mechanisms
  • Regular security audits and vulnerability assessments
  • Access controls and role-based permissions
  • Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Objection: Object to processing of your personal information
  • Restriction: Request restriction of processing in certain circumstances
  • Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us at the email address provided below.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

We use cookies for authentication, session management, analytics, and to improve user experience.

7. Third-Party Services

Our Service contains links to third-party websites and integrates with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies:

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or business purposes.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Email: privacy@copyup.ai

Support: support@copyup.ai

13. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to be informed about data collection and processing
  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Rights related to automated decision-making and profiling

Our legal basis for processing your personal data includes: consent, contract performance, legal obligations, legitimate interests, and protection of vital interests.

14. CCPA Compliance (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information held by businesses
  • Right to opt-out of the sale of personal information (we do not sell your information)
  • Right to non-discrimination for exercising your privacy rights

Thank you for trusting CopyUp.ai with your information. We are committed to protecting your privacy and being transparent about how we use your data.