Privacy Policy

1Information We Collect

1.1 Information You Provide

• Email address and profile information when you create an account
• Website domains and associated metadata when you register sites
• Content modifications and version history made through our service
• Payment information (processed securely by third-party providers)
• Support communications and feedback
• API keys and integration settings

1.2 Automatically Collected Information

• Usage analytics and feature interaction data
• IP addresses
• Browser and device information for compatibility
• Session data and authentication tokens
• Performance metrics and error logs
• Security event logs and access patterns

1.3 Website Integration Data

• Website structure and content elements (for editing functionality)
• Edit session tokens and authentication data
• Script integration status and configuration

2How We Use Your Information

2.1 Service Delivery

• Provide secure content editing and management capabilities
• Maintain user accounts and authentication systems
• Process and store content modifications with version control
• Generate AI rewrite suggestions
• Ensure cross-browser and device compatibility

2.2 Security

• Monitor for security threats and unauthorized access
• Prevent fraud, abuse, and malicious activities
• Implement access controls and session management

2.3 Service Improvement

• Analyze usage patterns to enhance user experience
• Optimize performance and reduce loading times
• Develop new features based on user needs
• Send important service notifications and security updates
• Provide customer support and technical assistance

3Information Sharing & Data Transfers

3.1 Limited Sharing Circumstances

We may share information only in these strictly limited circumstances:

• With your explicit, informed consent
• To comply with valid legal processes (subpoenas, court orders)
• To protect against immediate threats to safety or security
• In connection with business transfers (with continued privacy protection)
• With the service providers listed below, who process data on our behalf to run the Service

3.2 Service Providers & Processors

We use these service providers to run ReCopyFast:

• Vercel — hosts the website, the API and the ReCopyFast script
• Supabase — database, sign-in and image storage
• Fly.io — the real-time editing server
• Stripe — payments
• OpenAI — generates AI rewrite suggestions from the text you submit
• Resend — transactional email
• Upstash — rate limiting
• Sentry — error monitoring

3.3 International Transfers

Some of these providers process data in the United States. Our real-time server runs in Fly.io's US-East region.

4Data Security & Protection

4.1 Encryption & Data Protection

• AES-256 encryption at rest for our database (Supabase)
• TLS encryption for data in transit
• Encrypted database connections

4.2 Access Controls & Authentication

• Passwordless sign-in: a one-time email link for account owners, a one-time code for invited editors
• Per-site permissions for invited editors: view, edit, publish or admin

4.3 Monitoring

• Automated rate limiting on the API
• Error monitoring with Sentry

5Your Privacy Rights & Controls

5.1 Your Data Protection Rights

You have the right to:

• Access: Request copies of your personal data and understand how it's processed
• Rectification: Correct inaccurate or incomplete personal information
• Erasure: Request deletion of your personal data (“right to be forgotten”)
• Portability: Export your data in a structured, machine-readable format
• Restriction: Limit the processing of your personal information
• Objection: Object to processing based on legitimate interests
• Opt-out: Withdraw consent or opt out of marketing communications

5.2 Exercising Your Rights

To exercise any of these rights, contact us at privacy@recopyfa.st. We will respond within 30 days and may require identity verification for security.

6Cookies & Tracking

Types of Cookies We Use

• Essential: Required for authentication and basic functionality
• Functional: Remember your preferences and settings

You can control cookies through your browser settings.

7Data Retention

• Account Data: Retained for the duration of your account
• Content Data: Retained as long as needed for service delivery