Privacy Policy

Overview

UnderCopy ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This policy explains what data we collect, why we collect it, and how we handle it.

UnderCopy is operated as an independent product. Our registered address is Wyoming, United States of America.

What data we collect

Account information: When you create an account, we collect your name, email address, and authentication credentials. If you sign in via Google, we receive your name and email from Google — we do not receive or store your Google password.

Workspace content: Brands, campaigns, messages, ideas, pairings, and other creative content you produce while using UnderCopy. This content is yours and is stored to provide the service.

AI interaction data: When you use AI-assisted features (tag suggestions, idea generation, feedback), we log the prompts sent and responses received. This data is used to improve the quality of AI assistance and is not shared with third parties. AI processing is handled through Anthropic's Claude API — your content is sent to Anthropic for processing and is subject to Anthropic's usage policies.

Usage analytics: We collect anonymous usage data (pages visited, features used, session duration) through PostHog to understand how the product is used and improve the experience. This data is not linked to your creative content.

Technical data: IP address, browser type, device information, collected automatically for security and service operation.

How we use your data

To provide the service: Your workspace content is stored and processed to deliver UnderCopy's functionality — creating brands, campaigns, running creative methods, generating AI suggestions.

To improve the product: Anonymized usage patterns help us understand which features work well and which need improvement. We do not read your creative content for product development purposes.

To communicate with you: Account-related emails (password reset, approval notifications). We do not send marketing emails without your explicit consent.

To ensure security: Technical data is used to detect and prevent unauthorized access or abuse.

AI and your content

When you use AI features in UnderCopy, your content (campaign brief, locked message, accepted tags, pairings) is sent to Anthropic's Claude API for processing. Anthropic processes this data to generate responses and may retain it according to their data policies. We recommend reviewing Anthropic's privacy policy at anthropic.com/privacy.

We do not use your creative content to train AI models. Your ideas remain yours.

Data storage and security

Your data is stored on Supabase (cloud infrastructure) with encryption at rest and in transit. Our application is hosted on Vercel. Both providers maintain industry-standard security certifications.

We implement row-level security policies to ensure users can only access their own data. Team workspace data is accessible only to team members with appropriate roles.

Data retention

Your workspace content is retained as long as your account is active. If you delete a brand, campaign, or idea, it is soft-deleted (marked as deleted) and permanently removed after 30 days.

If you close your account, all your data is permanently deleted within 30 days.

Your rights

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your workspace content
• Withdraw consent for optional data processing

To exercise any of these rights, contact us at info@undercopy.com.

Cookies

See our Cookie Policy for details on how we use cookies and similar technologies.

Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via email or an in-app notification. The "last updated" date at the top indicates the most recent revision.

Contact

For privacy-related questions: info@undercopy.com