Privacy policy

Effective October 24, 2026

Who we are

CopyPaist is a SaaSsee app, run by SaaSsee LLC, a Vermont limited liability company ("we"). For anything in this policy, email support@copypaist.com.

What we collect

If you use CopyPaist without an account

Your requests, settings and drafts are kept in your own browser's storage. They're sent to our server only when you ask for directions, a draft, an edit, hashtags, a pack or a download, so that we can produce them.

If you create an account

• Account details: your email address and your password, which we store only as a one-way hash.
• Your projects: your requests, settings, chosen directions, drafts with up to 20 earlier versions each, and pack outputs.
• Your brand voices: the names, descriptions, rules and writing samples you save. They're sent to Anthropic only with the requests you choose them for.

If you buy a pass

Stripe handles the payment on its own checkout page, so we never see or store your card or bank details. We keep a record of each purchase: which pass, the price, when it was paid, its status (paid or refunded) and Stripe's reference numbers for it. We give Stripe your account's email address so it can send your receipt.

Files you add

When you add a .txt, .docx or .pdf file in the studio, it's read by your own browser. The file itself is never uploaded. Only the text you leave in the Source material box is sent, and only when you ask for writing, the same as text you paste.

For everyone

• Usage records: when each AI request happened, what kind it was, how many tokens and credits it used, what it cost and whether it succeeded. These records don't include your writing.
• A short-lived copy of generated text, kept so that a double-click or a retry returns the same result instead of charging you twice. It's deleted automatically after 48 hours.
• Your IP address, which we only use as a one-way, keyed hash to apply fair-use limits (such as the daily guest allowance) and to protect sign-in from abuse.
• Security records of account events such as sign-ins, password changes and admin changes.

Cookies and browser storage

CopyPaist uses only the cookies it needs to work, and no advertising or analytics cookies:

• cp_sess: keeps your session and protects forms from cross-site attacks. It ends when you close your browser or after a period of inactivity.
• cp_guest: a random ID that tracks a guest's daily credits. It lasts a year.
• cp_auth: keeps you signed in for up to 30 days when you choose "Keep me signed in".

The studio also uses your browser's local storage to keep your current work if you refresh the page.

How the AI handles your writing

CopyPaist writes with Claude, made by Anthropic, through Anthropic's API. To produce your writing, we send Anthropic the text you give us (your request, settings, source material and the parts of a draft being changed) along with our instructions. We don't send your email address or account details.

Under Anthropic's policies for its commercial API, your inputs and outputs aren't used to train its models by default, and they're deleted from Anthropic's systems within 30 days. The exception is content that Anthropic's safety systems flag under its Usage Policy, which Anthropic may keep for up to 2 years. We don't train any AI models on your writing either.

Who else handles data

• Anthropic writes the text, as described above.
• Stripe processes pass payments under its own privacy policy, and may use the payment details you give it to prevent fraud.
• Namecheap hosts the website, the database and the email server that sends password-reset emails.
• Google Fonts serves the site's typefaces, so your browser contacts Google's servers, which see your IP address, when it loads them.

We don't sell or rent your personal information or your writing, and we don't share it with advertisers. We'd only disclose it if the law requires us to, or to protect people's safety or the service from abuse.

How long we keep things

• Projects and their versions: until you delete them or your account.
• Generated text kept against double charges: 48 hours.
• Password-reset links: 1 hour. Sign-in tokens: up to 30 days.
• Usage records, without your writing: kept for accounting and to prevent abuse.
• Purchase records: kept for as long as tax and accounting rules require, even after an account is deleted. They're no longer linked to your email once the account is gone.

Your choices

• See and export your writing: open any project and copy or download it.
• Delete it: delete projects on the Projects page, or delete your account on the Account page. Deleting your account removes your account details, projects, versions, brand voices and credits right away. Usage and purchase records stay, but are no longer linked to any writing or to your email.
• Anything else: email support@copypaist.com to ask what we hold about you or to correct it. We'll reply within 30 days.

Children

CopyPaist isn't meant for children under 13, and we don't knowingly collect their information. If you think a child under 13 has created an account, email us and we'll delete it.

Security

CopyPaist is served only over HTTPS. Passwords are hashed, projects are private to their account, and every request for a project checks that it belongs to the person asking. No system is perfectly secure, so please use a password you don't use elsewhere.

Changes to this policy

If we change this policy, we'll update the date at the top. If the change is significant, we'll also say so on the site before it takes effect.