Privacy Policy

1. Information we collect

• Account data. When you sign up or sign in (e.g. with Google or email magic link), we receive identifiers such as your user ID, email address, and name if you provide it. Our authentication provider (e.g. Supabase) processes sign-in on our behalf.
• Profile and billing. We may store your display name, plan tier, usage counters, billing cycle, and payment-related metadata needed to deliver subscriptions. Payment card details are handled by our payment processor (e.g. Razorpay); we do not store full card numbers on our servers.
• Content you submit. Briefs, prompts, product descriptions, keywords, tone selections, and similar inputs you enter to generate copy. If you use features like a content library, we store copies you choose to save.
• Generated output. AI-generated text returned to you in the app may be processed and stored according to the features you use.
• Technical data. Log data, device/browser type, approximate location derived from IP, and cookies or similar technologies as described in our Cookie Policy.

2. How we use information

• Provide, maintain, and improve the Service and AI features.
• Authenticate users, enforce plan limits, and prevent fraud or abuse.
• Process payments and communicate about billing or the Service.
• Send transactional messages (e.g. sign-in links, receipts) and, where permitted, product updates you can opt out of.
• Comply with law, respond to lawful requests, and protect rights and safety.
• Train or improve models only where we implement a lawful basis and, if applicable, allow you to opt out. Currently, we prioritize using aggregated or de-identified analytics rather than your private prompts for training; contact us for the current practice.

3. Legal bases (EEA/UK users)

Where the GDPR applies, we rely on contract (to deliver the Service), legitimate interests (security, analytics, product improvement), and consent where required (e.g. certain cookies or marketing).

4. Sharing of information

We may share data with:

• Service providers who host infrastructure, authentication, payments, email delivery, or analytics, under contracts that require appropriate safeguards.
• AI providers that process prompts to generate outputs, subject to their terms and our instructions.
• Authorities when required by law or to protect rights.
• Business transfers in connection with a merger or acquisition, with notice where appropriate.

We do not sell your personal information as “sale” is defined under U.S. state privacy laws.

5. Retention

We retain information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account subject to legal exceptions.

6. Security

We use industry-standard measures (encryption in transit, access controls, secure hosting) to protect data. No method of transmission or storage is 100% secure.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, object to certain processing, or withdraw consent. To exercise these rights, contact us using the email in Section 11 below. You may lodge a complaint with a supervisory authority where applicable.

8. International transfers

We may process data in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses.

9. Children

The Service is not directed to children under 16 (or the age required in your jurisdiction). We do not knowingly collect their personal information.

10. Changes

We may update this Policy and will revise the “Last updated” date. Material changes may be communicated via the Service or email.

11. Contact

Privacy questions for CopyBuilder AI: info@arinesolutions.com. See also our Sub-processors list.