Privacy Policy
Effective date: August 26, 2026 · Applies to the BetterCopy desktop app and bettercopy.app
The short version: your text is yours. We process it to enhance it, we don't sell it, and we don't train on it without your explicit optional consent. Below is the long version, written to be actually readable.
Who we are
BetterCopy is operated by Luis Fernando Grigolon Rodrigues Ltda, a Brazilian limited liability company (CNPJ 55.808.001/0001-59), registered at Rua José Corazza, 76 – Jardim Corazza – Itu, São Paulo, 13301-252, Brazil. For any privacy question or request, email us at help@bettercopy.app. We respond to all requests within 30 days.
1. What we collect
- Account data, your email address and a hashed password (we never store passwords in plain text). Optionally your name if you provide it.
- Text you enhance, when you trigger an enhancement, the selected text is transmitted securely (TLS) to our servers, processed, and returned. See section 2 for retention and section 3 for on device options.
- Usage data, credit consumption, feature usage counts, mode preferences, error reports, and app version. This tells us what to fix and what to build.
- Payment data, handled entirely by Stripe. We store your Stripe customer reference and subscription status; we never see or store your card number.
- Rewards data, XP, reward credits, and streaks associated with your account.
We do not log your keystrokes, monitor what you type outside an enhancement, read your clipboard in the background, or collect the contents of your screen.
2. Legal bases we rely on
We process personal data only where we have a legal basis to do so:
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account data (email, hashed password, optional name) | Create and manage your account | Contract performance (GDPR art. 6(1)(b); LGPD art. 7, V) | While your account is active |
| Website analytics (GA4, Clarity, and Mixpanel if enabled) | Measure website performance, the download funnel, and usability | Explicit consent (GDPR art. 6(1)(a); LGPD art. 7, I) | According to the applicable provider's retention settings; consent can be withdrawn |
| Text you enhance | Provide the enhancement you request | Contract performance | Deleted within 30 days of processing; your enhancement history stays on your device |
| Usage data (credit usage, features, errors, app version) | Fix bugs and improve the product | Legitimate interest (GDPR art. 6(1)(f); LGPD art. 7, IX) | Up to 12 months, then deleted or anonymized |
| Payment data (handled by Stripe) | Process your payment | Contract performance | As required by law |
| Rewards data (XP, streaks, credits) | Operate the rewards program | Contract performance | While your account is active |
| Training samples (only if you opt in) | Improve our models | Explicit consent (GDPR art. 6(1)(a); LGPD art. 7, I) | Revocable anytime in Settings |
3. What happens to the text you enhance
Enhanced text is processed to produce your result and is not used for anything else by default. Specifically:
- No training without consent. Your text is never used to train models unless you explicitly enable the training consent toggle in Settings. It is off by default, and you can turn it off again at any time.
- Short-lived processing. Text is retained only as long as needed to complete the enhancement and provide features you've enabled (such as your enhancement history in the app).
- No selling, no ads. We do not sell your data or share your text with advertisers. Ever.
4. Privacy tools built into the product
- Privacy Shield (Pro), automatically detects emails, names, phone numbers, and keys in your text and replaces them with placeholders before processing. The real values never leave your machine and are restored locally in the result.
- Local LLM (Pro), runs enhancement entirely on your own hardware. With Local LLM active, your text is never transmitted anywhere.
- Smart Word Guard (Pro), your guarded words are stored with your account so they survive every enhancement; they're treated as account data, not shared content.
5. Third parties we rely on
- AI providers, cloud enhancement requests are processed by our AI infrastructure providers under agreements that prohibit them from using your content to train their models.
- Stripe, payment processing. Stripe's own privacy policy governs the payment data they collect.
- Render, application and website hosting.
- Email delivery, transactional emails (verification, password resets, receipts, low-credit warnings) are sent through our email provider.
- Google Drive (optional), if you enable Drive backup, we store the OAuth tokens needed to write your backup to your own Drive. You can revoke this at any time from your Google account or inside the app.
- Google, analytics and tag management (Google Analytics 4, Google Tag Manager), processing website interaction data only after you grant measurement consent.
- Microsoft (Clarity), session replay analytics, with text inputs masked; it is loaded only after measurement consent.
- Mixpanel, product analytics. If enabled in our website GTM container, it receives consent-gated website interaction events only after measurement consent. The desktop app and backend also send product telemetry such as account or device identifiers, feature and mode usage, app version, errors, IP address, and related operational metadata; some account or referral workflows may include additional event metadata. We do not send the text you enhance or your clipboard contents as Mixpanel usage data. The website consent choice does not automatically control desktop-app telemetry.
- Meta (planned), advertising pixels — only with your explicit consent, and only after this policy is updated accordingly.
6. Data retention & deletion
Account data is kept while your account is active. If you delete your account (inside the app: toolbar menu → Account → Delete account, or by contacting support), we delete your personal data within 30 days, except records we're legally required to keep (such as invoices).
7. Your rights
Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, contact us from the app (toolbar menu → Help → Contact) or email us at help@bettercopy.app. We respond to all requests within 30 days. If a data breach occurs that puts your personal data at risk, we will notify the relevant authorities and affected users within 72 hours, as required by LGPD art. 48 and GDPR art. 33.
8. Cookies & tracking
We use cookies and similar technologies only for the purposes below:
- Strictly necessary — login sessions and core functionality. Always on.
- Website analytics — Google Analytics 4, Google Tag Manager, Clarity (Microsoft), and Mixpanel if enabled in the GTM container may measure page performance, usability, and the download funnel. These optional tools are loaded only after you accept the measurement/analytics category; website Mixpanel events contain interaction data, not the text you enhance or your clipboard contents.
- Desktop product analytics — the BetterCopy app and backend send product usage and operational events to Mixpanel separately from the website cookie banner. The website consent choice does not automatically control this app telemetry; its data categories and available rights are described above.
- Advertising — we do not run advertising cookies today. If we launch ads (for example, Meta Pixel), advertising cookies will only be set with your explicit consent, and we will update this policy before they go live.
You can change your website choices anytime from the cookie banner or Privacy settings control. Withdrawing measurement consent does not affect processing that already occurred lawfully, but it prevents future website analytics from being intentionally loaded through our consent gate. You can also contact us to request access, deletion, or restriction of analytics data.
9. Children
BetterCopy is not directed at children under 16. Users under 18 in Brazil must have parental or guardian consent (LGPD art. 14). If you believe a child has created an account, contact us at help@bettercopy.app and we will delete it.
10. Changes to this policy
If we make material changes, we'll notify you in the app and by email before they take effect. The effective date at the top always reflects the current version.
11. Data Protection Officer / Encarregado
For LGPD (Brazil) and GDPR purposes, our data protection officer is Luis Fernando Grigolon Rodrigues, reachable at help@bettercopy.app. You can also use this address to exercise your rights: access, correction, export, deletion, objection, restriction, and consent withdrawal.
12. Contact
Questions about privacy? Reach us at help@bettercopy.app, or inside the app via toolbar menu → Help → Contact. You can also visit the help center.