Privacy Policy

1. Information we collect

Account information

You can sign in with your Google account or with an email address and password. With Google, we receive your name, email address, profile photo, and a unique account identifier from Google, and never your Google password. With email sign-in, we store your email address; your password is handled by Google's Firebase Authentication, which keeps only a secure hash of it. We never see or store your password in readable form. We email you a link to verify your address, and to reset your password if you ask.

Content you create

Posts, captions, scheduled dates, tags, images and videos you upload, carousel slides, and the brand voice details you enter or ask us to generate.

Connected Facebook and Instagram accounts

When you connect Facebook or Instagram, Meta gives us, with your permission: the identifiers and names of the Facebook Pages and Instagram professional accounts you choose, access tokens that let us publish on your behalf, and, if you use brand voice learning, the text of recent posts from those accounts. We request only the permissions needed to list your Pages, read your own Pages' posts, and publish to your Page and Instagram account.

Billing information

Payments are processed by Stripe. We store your Stripe customer identifier and subscription status. We never receive or store your full card number.

Usage and technical information

Basic logs needed to run and secure the service (such as request times, errors, and IP addresses), counts of how many AI requests your account has used, and a sign-in cookie. We do not use advertising cookies or sell tracking data.

2. How we use information

• To provide Copious: storing your drafts, scheduling them, and publishing them to the accounts you connect, at the times you choose.
• To generate AI suggestions you ask for, such as captions, rewrites, images, and brand voice summaries.
• To run your free trial and subscription, and to enforce plan limits.
• To secure the service, prevent abuse, and fix problems.
• To contact you about your account, billing, and important changes.

We use information from Facebook and Instagram only to provide the features you use in Copious. We do not sell it, use it for advertising, or use it to build profiles about you or anyone else.

3. Who we share information with

We share information only with service providers that help us run Copious, and only as needed:

• Google (Firebase and Google Cloud) for sign-in, sending verification and password-reset emails, and data storage.
• Vercel for hosting the app and storing uploaded and generated media.
• Stripe for payments and the billing portal.
• Meta (Facebook and Instagram) to publish the posts you schedule to the accounts you connect.
• Anthropic and OpenAI to generate the AI text and images you request. The text you submit for a request (for example a caption or topic, and your brand voice details) is sent to them to produce the result.
• Pexels when you search its free photo library from the composer.

We may also disclose information if required by law, or to protect the rights and safety of our users or the public. If Monroy Labs LLC is involved in a merger or sale, information may be transferred as part of that transaction, subject to this policy. We do not sell your personal information.

4. How long we keep information

We keep your account and content while your account is open. When you disconnect a Facebook or Instagram account, we delete the access tokens we stored for it. When you ask us to delete your account, we delete your account, content, and connection data within 30 days, except where we must keep limited records (for example billing records) to meet legal or tax obligations.

5. Your choices and rights

• Edit or delete your posts and drafts at any time in Copious.
• Disconnect Facebook or Instagram at any time from the Connections page. You can also remove Copious from your Facebook settings under Business Integrations.
• Cancel your subscription at any time from Settings → Billing.
• Ask for a copy of your information, a correction, or deletion by emailing support@copiousapp.com. See our data deletion instructions.

Depending on where you live, you may have additional rights under local law. We will honor requests as the law requires.

6. Security

We use encryption in transit, signed sign-in sessions, and access controls that keep each account's data separate. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you as required by law.

7. Children

Copious is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

8. Where information is processed

Monroy Labs LLC is based in the United States, and your information is processed in the United States.

9. Changes to this policy

We may update this policy. If we make significant changes, we will tell you by email or in the app before they take effect. The date at the top shows when it last changed.

10. Contact

Questions or requests: support@copiousapp.com. Monroy Labs LLC, operator of Copious.