Privacy PolicyPrivacy Policy

Information you provide. When you sign up, you provide your name, email address, organization name (if applicable), and password. If you purchase a paid plan, extra credit, or an add-on, we collect billing information (processed by our payment processor; we never store the full number of the card you pay with).

Information you create. As you use Copera, you create messages, documents, tasks, files, comments, recordings, transcripts, voice clips, and other content (collectively, "Your Content"). We host and process Your Content to deliver the Service.

Information from your use. We log usage events such as feature interactions, page views, browser type, IP address, device information, and approximate location for analytics, abuse prevention, and reliability. We use cookies and similar technologies to keep you signed in, to operate the Service, and for the analytics and advertising described in Section 8.

AI inputs and outputs. When you use Copera AI, Bankai, transcription, or other AI features, we process the prompts, voice clips, and contextual data needed to generate a response. Outputs and request metadata (model used, allowance consumed) are stored in your workspace.

Sensitive personal data. Copera is not designed for collecting special categories of personal data, but the Service is general-purpose and you may, at your discretion, submit sensitive personal data through messages, documents, files, or signed contracts. By doing so, you consent to our processing of that data as described in this Privacy Policy. If you require special handling of sensitive data, contact privacy@copera.ai before submitting it.

We use the information we collect to provide, maintain, secure, and improve the Service; process payments, manage subscriptions, and send invoices; communicate with you about your account, transactions, and support requests; send service announcements, security notices, and (with your permission) product news; detect, prevent, and respond to abuse, fraud, or security incidents; and comply with legal obligations, enforce our Terms, and protect our rights.

We do not sell your personal data, and we do not use Your Content for advertising or AI training.

AI requests are routed through Copera's proprietary AI router, which chooses an appropriate model for each task and sends the request, with the context needed to answer it, to the provider that runs that model. Copera never uses Your Content to train AI models. AI providers process requests under their own terms, which differ from provider to provider.

Within Copera, AI features follow the same member-level permissions as the rest of the Service, and no data flows between workspaces. AI features can also use information from outside your workspace, such as the web, accounts you connect, your browser through the Copera extension, and compute machines.

You can ask privacy@copera.ai for the current list of the AI providers we use.

Subprocessors. Cloud hosting providers, payment processors, email-delivery providers, AI model providers, and similar service providers that process data to help us provide the Service. Advertising platforms receive the information described in Section 8.

Within your workspace. Members of a workspace can see content and activity within that workspace according to permissions set by the workspace owner. Personal inboxes and direct messages remain visible only to participants.

Business transfers. If Copera is acquired or merged, your information may be transferred under the same privacy commitments.

Legal reasons. We may disclose information when required by law, subpoena, or court order, or to protect rights, property, or safety. Where lawful, we will notify affected customers.

We do not sell personal information.

Data is encrypted in transit between your device and the Service. Our hosting providers hold SOC 2 and ISO 27001 certifications, and Copera's own SOC 2 audit is in progress.

We store the Service's data in the United States. The exception is a compute machine you rent: it may run in a data center outside the United States, and what is on it is stored there. We do not offer a choice of storage region. To report a security issue, email security@copera.ai. More about our security is at copera.ai/security.

Backups and operational copies. We keep backups of production systems so we can recover from a disaster. When content is deleted, copies of it can remain in those backups for a period.

We retain Your Content for as long as your workspace is active. Deleting a workspace is immediate and cannot be undone. We keep records where the law requires it (for example, billing records), and copies of deleted data can remain in backups for a period (Section 5).

Signed e-signature documents have a retention period set by their category, counted from the date of completion: 6 years for general contracts, 6 years for healthcare-related documents and 7 years for financial documents. Documents flagged as demo or test documents have none. During the retention period, a signed document cannot be deleted on its own. Each signature's audit trail records the signer's IP address, browser, the time of each step and, if the signer allows it in their browser, their device's location.

Deleting a workspace deletes everything in it, including signed documents still in their retention period. If you or the other signers need to keep them, download them before you delete the workspace.

To delete your account or to get a copy of your personal data, email privacy@copera.ai. We respond within 30 days.

Depending on your location, you may have rights to access, correct, or update your personal data; request deletion; object to or restrict certain processing; request a portable export; and withdraw consent where we rely on it.

Which of these rights you have depends on the law that applies to you, such as data-protection law in the EU/EEA, the UK, or Brazil, or the privacy law of your US state.

To exercise any of these rights, write to privacy@copera.ai. We will respond within the time required by applicable law.

Our website (copera.ai) uses cookies and similar technologies, such as local storage. Necessary ones are always on. Analytics and advertising ones are not always in use. When they are, they depend on your choice, which you make in the cookie banner the first time we ask. The Copera app also uses cookies and local storage to keep you signed in and your account secure. While we run campaigns on Meta, the app also loads the Meta pixel, and when you create an account we send Meta your email address and account ID in hashed form, with your IP address and browser details, to measure sign-ups.

Necessary. These keep the site working and need no consent: copera_logged, which only records whether this browser is signed in to Copera, so we can take you straight to the app; copera_consent, which remembers your cookie choice for 12 months; NEXT_LOCALE, which remembers your language; and, in local storage, what you enter in the savings calculator, so it is still there when you come back.

Analytics. When we measure how the site is used, such as which pages people visit, we use PostHog. With your consent, PostHog keeps an identifier in a cookie and in local storage (names starting with ph_) so it can recognize your browser on later visits. Without it, PostHog stores nothing on your device: it still counts page visits, but cannot recognize you from one visit to the next.

Advertising. When we run ad campaigns, we may use the Google tag, the Meta pixel and the TikTok pixel on this site to measure them. Each tag loads only while we run a campaign on its platform, and only when advertising cookies are allowed under the rules below. Once loaded, they set cookies such as _gcl_au (Google), _fbp (Meta) and _ttp (TikTok); the platforms can also set cookies on their own domains, under their own privacy policies.

Where consent comes first. In the EEA, the UK, Switzerland and Brazil, analytics and advertising cookies stay off until you accept them. Elsewhere they are on by default, and the banner lets you reject them. We tell which rules apply from your device’s time zone; if we can’t tell, we ask first. If your browser sends a Global Privacy Control signal, we treat it as a rejection of advertising cookies, wherever you are.

Changing your choice. While we use analytics or advertising cookies, you can change or withdraw your choice at any time from the Cookie settings link in the site’s footer. When you withdraw it, we stop loading the related tags and delete the cookies and local storage they left on copera.ai. Cookies the platforms set on their own domains can only be removed from your browser.

Browser settings. You can also block or delete cookies in your browser settings. Blocking necessary cookies may stop parts of the site from working, such as remembering your language or your cookie choice.

Copera is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, please contact privacy@copera.ai and we will delete it.

Copera is based in the United States, and we store data there (Section 5). If you use the Service from another country, your information is transferred to the United States and processed there. Some of our service providers, such as some AI providers, process it in other countries. The data-protection laws of those countries may differ from the laws where you live.

We may update this Privacy Policy from time to time. For material changes, we will notify you by email or in-app notice at least 30 days before they take effect. The effective date at the top of this policy is always current.

For privacy questions, requests, or complaints, write to privacy@copera.ai. Our postal address is available on request.