Privacy Policy
Last updated: 29/09/2026
This document applies to Copiai (copiai.work). Official contact is available exclusively through the email shown at the end of this page.
1. Data we collect
We may collect registration data such as name, email, WhatsApp, CPF or CNPJ, business information, and how you heard about the service; account usage and technical data; captured pages, files, and content; navigation and analytics data from published sites; security logs, devices, and preferences. For payments, we receive transaction and status information, while complete card data remains with Cakto and is not stored by Copiai.
2. Purposes and legal bases
We process data to create and protect accounts, provide and improve the service, enforce plan limits and subscriptions, provide support, prevent fraud and abuse, maintain security, comply with legal duties, respond to requests, and generate product metrics. Depending on the context, legal bases may include contract performance, compliance with legal or regulatory obligations, exercise of legal rights, legitimate interests with appropriate assessment, and consent where required.
3. Payments
Cakto processes checkout, payment methods, recurring billing, and card data. Copiai receives only the information needed to identify a purchase, assign a plan, and record status, amount, payment method, dates, and events such as cancellation, refund, or chargeback.
4. Processors and sharing
We may use service providers to operate Copiai, including Supabase for database, authentication, and storage; Cloudflare for network, security, and infrastructure; Cakto for payments; an email provider for transactional messages; and Google when you choose Google sign-in. We share only the data needed for the relevant purpose and require appropriate safeguards when applicable.
5. International transfers
Some providers may process or store data outside Brazil. In those cases, we seek to use contractual mechanisms and safeguards consistent with the LGPD to protect transferred data.
6. Retention and deletion
We retain data while necessary to provide the service, comply with legal duties, prevent fraud, resolve disputes, and exercise rights. When an account is deleted, data and files may be deleted or anonymized, except records that must be retained for legal obligations, security, billing, or the regular exercise of rights.
7. Security
We use technical and organizational controls such as authentication, access restrictions, RLS, audit logs, secret protection, and infrastructure security measures. No system is completely immune to incidents; when required by law, relevant incidents will be handled and communicated under the LGPD.
8. Your LGPD rights
You may request confirmation and access, correction, anonymization, blocking or deletion where applicable, portability under applicable regulations, information about sharing, review or explanation of automated decisions when applicable, and withdrawal of consent. The data subject and privacy contact is the email shown on this page. We aim to answer access requests within 15 days, without prejudice to specific legal deadlines.
9. Cookies and similar technologies
Copiai may use cookies, local storage, and technical identifiers that are necessary for sessions, security, preferences, and product operation, as well as metrics and analytics when applicable. You can control cookies through your browser, although disabling essential items may prevent parts of the service from working.
10. Minors
Copiai is not intended for people under 18. By creating an account, you represent that you are at least 18 years old.
11. Updates to this Policy
This Policy may be updated to reflect changes in the service, providers, processing practices, or law. When an update requires renewed consent or has a material impact, we will provide notice and, when necessary, request renewed acceptance on the next access.