Privacy Policy

Klaas Krüger Ventures UG (haftungsbeschränkt) Schloßstraße 12 14467 Potsdam Deutschland

Email: legal@copykit.ai

Because our seat is in Brandenburg, the competent authority is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg Stahnsdorfer Damm 77 14532 Kleinmachnow E-Mail: poststelle@lda.brandenburg.de

Account data: the email address and authentication data you provide when registering.

Usage data: your projects, the sources you select, your research question and profile, and settings such as language, explanation level, and briefing length.

Content data: the retrieved content of the sources you choose, its transcripts, and the resulting relevance scores and briefings.

Payment data: on a paid plan, Stripe processes your payment details. Full payment instrument data never reaches us and is not stored by us.

Technical data: server log data generated when the application is accessed.

Providing the service, managing your account, retrieving and evaluating your chosen sources, and generating briefings: Art. 6(1)(b) GDPR (performance of the contract). This is the principal contractual service.

Payment processing and invoicing: Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR (compliance with commercial and tax law obligations).

Operation, security, and abuse prevention, including server logs and usage limits: Art. 6(1)(f) GDPR (legitimate interest in a functioning service that is not abused).

Sending digest emails you have configured: Art. 6(1)(b) GDPR, as delivery is part of the service you set up.

CopyKit retrieves publicly available content from the sources you select — in particular videos, podcasts, newsletters, and articles. That content is retrieved, transcribed where it is audio, scored for relevance against your research question, and stored in your account so that briefings can be generated from it.

Rights in that content remain with its respective author. Briefings are summaries with timestamps back to the source; they are not a substitute for it.

Rights holders may request removal of their content: legal@copykit.ai.

Transcripts of the content you select are stored in your account. They are the basis for relevance scoring and for generating briefings.

Storage is per account: transcripts are not shared or reused across user accounts. If two users select the same source, each account holds its own copy.

Transcripts are not exposed to you as a separate view; they exist only as processing input.

We retain transcripts for as long as your account exists. There is currently no automatic deletion after a fixed period. Deleting your account technically deletes the associated content, transcripts, and briefings. You can delete individual projects or items yourself at any time.

To score relevance and generate briefings, we transmit the retrieved content together with your research question and profile to the AI model providers listed in section 8. Audio content is transcribed automatically beforehand.

The legal basis is Art. 6(1)(b) GDPR, since generating the briefings is the principal contractual service.

Output is machine-generated and may be incomplete or incorrect. No automated decision-making producing legal effects or similarly significant effects within the meaning of Art. 22 GDPR takes place.

We use the following service providers, each under a data processing agreement pursuant to Art. 28 GDPR:

Supabase — Database, authentication

Vercel — Web application hosting

Hostinger — Server infrastructure for processing

Anthropic — Briefing generation (AI)

OpenAI — Audio transcription

Stripe — Payment processing

Resend — Email and digest delivery

Cloudflare — Inbound email forwarding

Webshare — Proxy for retrieving public content

Apify — Retrieval of certain public sources

Beyond this we disclose data only where we are legally required to do so.

Some of the providers named above are established outside the European Economic Area, in particular Supabase, Vercel, Anthropic, OpenAI, Stripe, Resend, Cloudflare, Webshare. Personal data is therefore transferred to third countries.

We base those transfers on an adequacy decision of the European Commission or, where none applies, on the European Commission’s Standard Contractual Clauses under Art. 46(2)(c) GDPR together with supplementary measures.

A current overview of the providers used and the basis for each transfer is available on request at legal@copykit.ai.

We use only the technically necessary cookies required for sign-in and to maintain your session. Under § 25(2) TDDDG these do not require consent. We do not use analytics or marketing cookies.

The application is served exclusively over TLS. Access to your data is restricted to your account and enforced at the database level.

Account, usage, and content data are retained for as long as your account exists (see section 6).

Data subject to commercial or tax retention obligations — invoices in particular — is retained for the statutory period of up to ten years and otherwise restricted from further processing.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20).

Under Art. 21 GDPR you have the right to object, on grounds relating to your particular situation, to processing we base on a legitimate interest.

A message to legal@copykit.ai is enough to exercise any of these rights.

Independently of this, you may lodge a complaint with a supervisory authority, such as the one named in section 2.

An email address is required to create an account; without it the service cannot be provided. Everything else — your research question, profile, and sources — is voluntary, though it determines the quality of the results.

The service is not directed at children. Accounts should only be created by people aged 16 or over.

We update this policy when our processing changes. The current version is published on this page and carries a date.

For any data protection question: legal@copykit.ai

This policy is provided in German and English. The German version governs; the English version is provided for ease of understanding.