Privacy Policy

Effective date: May 22, 2026

This Privacy Policy explains how Copsy ("we", "our", "us") handles information when you use the Copsy web app at copsy.app and the Copsy Mac agent (collectively, the "Service").

1. What we collect

Account info — your email address and a password hash, or, if you sign in with Google, your name, email and Google account ID.
App settings — paths and folder names you choose on your own computer (e.g. the hard drive you want footage to land on, the Drive folder you pick for backup).
Operational metadata — job records (which card was copied, when, for how long, success/error). We do not record file content.
Telegram link — if you connect Telegram, we store your Telegram user ID so the bot can talk to your account.
Voice messages — when you press the microphone in the dashboard chat, your recording is sent to Groq for transcription, then discarded. We do not store the audio.

2. What we do NOT collect

We never read the content of your video, photo, audio or any other files. Copying happens locally on your Mac. We only see file names and sizes for progress reporting.
We never access your Google Drive directly. The Mac agent talks to Google Drive on your computer using a token you grant locally; the token never leaves your machine.
We do not sell, rent or share your personal data with advertisers or third parties.

3. Google data — how we use it

If you sign in with Google, we use your email address and name to create and identify your Copsy account. That's it. Copsy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We never sell your Google data, never use it for ads, and never transfer it to anyone unless required by law.

4. Where data is stored

Account data lives in a PostgreSQL database hosted by Railway (US/EU regions). The Mac agent stores your local configuration (drive paths, rclone token) on your own computer, never on our servers.

5. Cookies

We use a single cookie/local-storage entry to keep you signed in (a JWT token). No tracking, no analytics cookies, no advertising pixels.

6. Your rights

Request a copy of your data — email us.
Delete your account — email us; we'll wipe your records.
Disconnect Telegram or Google — directly from the dashboard.

7. Children

Copsy is not directed at children under 13. We do not knowingly collect data from them.

8. Changes

If we change this policy materially, we'll post the updated version here and update the date at the top.

9. Contact

Questions, requests, or worries: dgaponestuff@gmail.com