Privacy
What Copywork stores, where it is stored, who else can see it, and how long it is kept. Every number on this page is the one the software enforces today.
What this policy covers
Copywork is a studio for saving advertising and marketing work, annotating it and writing your own copy alongside it. This page explains what is collected when you use it, why it is held, who else touches it, and what you can ask us to do with it. It covers this website and the product you sign in to.
What is collected
- Your account. Your name, your email address, a hashed password, the workspace you belong to and your role in it.
- Billing. If you subscribe, Stripe takes the payment and holds the card details. We store your Stripe customer and subscription identifiers and which plan you are on. We never see or store a card number.
- What you save. The files you upload, the web pages you capture, your annotations, your written copy and its revisions.
- What you write to us. Anything you send by email, so that it can be answered.
- Usage. Counts of what you use: assets saved, text extractions run, web archives made, transcription minutes and storage held. They exist so your allowance can be enforced and shown back to you.
- Device and log data. The IP address and browser your sign-in came from, recorded against that session, and ordinary server logs of requests, kept for 14 days.
- Cookies. Listed in full further down.
What it is used for
To run the Service: to sign you in, to keep your work where you put it, to process the files you upload, to enforce your plan's allowances, to take payment, and to investigate faults and abuse.
Send transactional emails you cannot opt out of while you hold an account: email verification, password reset codes, security notices such as a sign-in from a device we have not seen before, and account changes. Payment receipts come from Stripe, who take the payment. We do not currently send marketing or product-update emails. If we start, you will be asked to opt in first, and you can withdraw that at any time.
Where your data is stored
The database holding your account, your workspace, your annotations and your written copy runs on PlanetScale Postgres, in Amazon Web Services region ap-southeast-1, which is Singapore.
The application runs on Cloudflare Workers and is placed in that same region, so requests that read the database are handled near it.
The files you upload, along with page renders, thumbnails and saved web page captures, are stored in Cloudflare R2.
What is not done with your work
Your content is not used for training, for analytics, for benchmarking or for measuring quality, unless your workspace has opted in. There is nothing in the product today that opts you in.
Deleting something deletes what was derived from it: text layers, recognised text, transcripts, page renders, thumbnails, capture tiles, revisions and annotations. No copy is kept back for measurement.
Reading text out of images and PDFs happens inside your own browser. Those pages are not sent anywhere to be read. Speech in audio and video is transcribed by Cloudflare Workers AI.
Who else receives your data
Three companies hold or process Copywork data on our behalf, and each one is named, with what it touches, on the sub-processors page.
Your data is not sold, rented or traded, and none of it is handed to advertisers. Nobody else receives it except the companies named on that page, who hold it only to run the Service.
How long things are kept
Nothing is kept for longer than the job it was collected for needs, and every window below is the one the software enforces, not an intention.
| What | Kept for |
|---|---|
| Anything you put in the Bin, before it is deleted for good | 30 days |
| A deleted account or organisation, before the purge starts | 30 days |
| Point in time recovery held by the database provider | 2 days |
| Our own portable copy of the database | 30 days |
| An upload you started and never finished | 7 days |
| A stored file with no record pointing at it, held in quarantine | 7 days |
| Server logs | 14 days |
| The receipt proving a deletion ran | 30 days |
| Expired invitations and review links | 30 days |
| Expired sign-in credentials, such as a password reset link | 30 days |
| The detail of a finished deletion job | 90 days |
| A record of what an administrator did | 730 days |
Deleting something in the product takes effect straight away. An encrypted backup can still hold a residual copy until that backup expires, which is inside the windows above. That is the honest version. Anyone who tells you deletion is instant and total everywhere is wrong.
Deleting something starts a 30 days window in which you can change your mind, after which it is permanently removed. Deleted material can persist in encrypted backups for up to 30 days beyond that, because backups are taken on a schedule and are not edited after the fact.
How it is kept safe
Passwords are stored hashed, never in a form anyone can read back. Traffic runs over HTTPS. The sign-in cookie is marked HttpOnly and Secure, so page scripts cannot read it. Every read and write goes through one permission check rather than each page deciding for itself, sign-in attempts are rate limited, and backups are encrypted.
No system is perfectly secure, and this page does not claim a certification, an external audit or a promised notification window, because none of those exists yet.
Cookies
Cookies are used only to make the product work. We do not use advertising cookies, analytics cookies or third-party trackers, and we do not track you across other websites. There are three, and none of them follows you anywhere:
- A sign-in cookie, which is what keeps you signed in. Because it is what keeps you signed in, blocking it will sign you out.
- A short-lived cookie set only while you reset your password, remembering which address asked for the code so the reset page never has to put it in the page or the address bar.
- A cookie for a shared or review link you have unlocked with a password, so you are not asked again on every page. It lasts at most 7 days, or until the link expires.
Links to other websites
You can save web pages into Copywork and pages in the product can link out. This policy covers Copywork only. Once you follow a link, or once a captured page points somewhere else, you are on a site with its own privacy policy, and we are not responsible for what it does.
Who inside Copywork can see your work
The intended model is that an operator can read your account details without asking, but cannot read your content without a grant that is narrow, time limited, revocable and recorded, with every read logged.
That is now how it works. An operator cannot open your work without a grant you approved, and every read made under one is recorded against that grant. An operator who has not re-confirmed their password in the last 12 hours cannot reach the administrative pages at all, and no level of administrative access can change or delete your work.
There is one exception, and it is deliberate. In an emergency an operator can take read access without waiting for you. It is called break-glass, it is built, and these are its limits. It is available for four reasons only: a credible report of illegal content, a legal or law-enforcement demand, an active security incident, or an investigation into abuse that asking you about would defeat. Nothing else qualifies.
The operator has to write down why before the access exists, not afterwards. It covers your account alone, it can only read, and it stops by itself after 4 hours. Within 24 hours you are emailed that it happened and what the reason was, and you can reply to be told exactly which pages were opened. The only thing that stops that email is a legal order forbidding it, and the order itself is then recorded in its place. Every invocation is re-read at the next quarterly review.
What you can do with your own data
You can edit or delete anything you have saved. You can download the original file of anything you uploaded, on every plan including the free one. You can delete your whole account, which starts a 30 days window during which your workspace stays readable to you and the deletion can still be called off.
You can also ask us directly: for a copy of what is held about you, for a correction, or for deletion of something you cannot delete yourself. Write to hello@copyworkstudio.com and you will get an answer within 30 days. You can also take a copy yourself at any time, without asking: Settings, then Export your work. It lists everything you have saved and links to each of your files.
Your account data and content are stored in Singapore (AWS ap-southeast-1). If you are in the UK, the EU or elsewhere, your data is transferred there to provide the Service.
Contact
Questions about this page, or a request about your own data, go to hello@copyworkstudio.com. You will get an answer within 30 days.
Changes to this page
This page changes when the product does, and it is meant to describe what the software does today rather than what is planned. If something here starts to affect you differently, you will be told inside the product or by email before the change takes effect.