Copy.ai

The Privacy Policy mentions using data to 'improve, upgrade or enhance our Services' and 'develop new products and Services,' but does not explicitly state whether user content is used to train AI models. The language is vague about AI training specifically, and there is no clear opt-out mechanism or statement that user data is NOT used for model training.

“[Privacy] 'To improve, upgrade or enhance our Services; To develop new products and Services' - purposes listed but no explicit AI training disclosure or opt-out.”

The Terms of Service grant Copy.AI a broad, perpetual, irrevocable, worldwide, sublicensable license to user content 'in connection with Copy.AI, its licensors, and their affiliate providing, operating, securing, and improving their services.' This is an extremely broad license that survives termination and permits sublicensing.

“[ToS] 'non-exclusive, transferable, perpetual, irrevocable, worldwide, royalty-free, fully paid-up license, with the right to sublicense, to use, host, store, copy, communicate, modify, create derivative works based upon, distribute, publish, publicly display, and publicly perform your User Content'”

Copy.AI shares data with service providers, affiliates, and advertising partners. While service providers are mentioned to be under instructions, the sharing with 'advertising partners' for 'interest-based advertising' and the broad affiliate sharing creates moderate concern. Sub-processor lists are not explicitly published, though some controls are mentioned.

“[Privacy] 'We share your Personal Data with third-party advertising partners...for purposes of delivering personalized advertisements to you' and 'We share your Personal Data with our company affiliates...for our administrative purposes'”

The Privacy Policy states retention varies 'depending on the purposes for processing such information' and mentions deletion on request, but provides no specific retention periods or timelines. The language is vague ('reasonably necessary'), and backup/residual data retention is unclear. Deletion can take time 'until we completely delete residual copies.'

“[Privacy] 'We retain different types of Personal Data for different periods, depending on the purposes for processing such information...it can take time until we completely delete residual copies of Personal Data related to you from our active servers, from our backup systems'”

The Terms of Service explicitly state that Copy.AI claims no ownership of Generated Content, and users are granted a non-exclusive, worldwide license to use, copy, modify, sell, and create derivative works based on Generated Content for lawful business purposes. OpenAI retains rights to Generated Content, but Copy.AI does not claim ownership.

“[ToS] 'Copy.AI claims no ownership of Generated Content' and 'Copy.AI hereby grants you a non-exclusive, worldwide, license, with the right to sublicense, to use, copy, modify, sell, create derivative works based upon, distribute, publicly display, and publicly perform Generated Content'”

Copy.AI mentions compliance with the EU-U.S. Data Privacy Framework and states it has 'certified to the U.S. Department of Commerce' regarding the Swiss-U.S. DPF. However, no SOC 2, ISO 27001, HIPAA, or other major security certifications are mentioned. A trust page or detailed security documentation is not referenced.

“[Privacy] 'Copy.ai has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles' and 'We have put in place appropriate physical, technical and organizational controls' but no specific certifications listed.”