Privacy Policy – CopyDNA
Last updated: October 20, 2026
1. Who is responsible for the data
Ventura Internet Marketing Services (ונטורה שירותי שיווק באינטרנט), a sole proprietor (Osek Patur) registered in Israel, Kibbutz Ashdot Ya'akov Meuhad, Israel, trading as CopyDNA ("we", "us"), decides how and why the data in this policy is processed (the "database owner" / controller).
For any privacy question: support@copydna.app
2. What data we collect, and why
| Type of data | What exactly | Why | Legal basis |
|---|---|---|---|
| Account details | Email, name, password (stored hashed, never as plain text), Google ID for those who sign in with Google, site language | Opening an account, signing in, sending account emails (for example password reset) | Performance of the agreement |
| Content you enter | Questionnaire answers, writing samples, facts about your business, requests to change a text | Writing the texts | Performance of the agreement |
| Texts written | Every text and every version of it, and internal processing data created from the answers | Showing history, changes to a text | Performance of the agreement |
| Usage data | How many texts were written, when, in which language, and the processing cost | Managing quotas, billing, preventing abuse, improving the Service | Performance of the agreement and legitimate interest |
| Technical data | IP address, browser type, server logs | Security, rate limiting, troubleshooting | Legitimate interest |
| Payment data | Plan, subscription status, payment history. Credit card details never reach us: Paddle processes them | Managing the subscription | Performance of the agreement and legal obligation |
| Support requests | The content of the email | Answering the request | Performance of the agreement and legitimate interest |
We do not sell personal data, and we do not use users' content to train AI models.
3. Who receives the data
We share data only as needed to operate the Service:
| Recipient | Role | What data |
|---|---|---|
| Anthropic (Claude) | The AI provider that writes the texts | The content you enter and the writing requests |
| Paddle.com | Merchant of Record: billing, invoices, taxes, refunds | Email, country, payment details, plan |
| Sign-in with a Google account (only for those who choose it) | Identity verification and email | |
| Resend | Sending system emails (for example password reset) | Email address and message content |
| Cloudflare | Domain management and routing emails to support@ | Emails sent to us |
| Google Cloud | Hosting the server and the database | All data in the Service |
| Professional advisers | Accountant, lawyer | As needed |
| Authorities | Only when required by law | As requested |
Some providers are located outside Israel (for example in the United States and the European Union). Data is transferred to them in accordance with the law, and where needed under standard contractual clauses (SCC) or an adequacy decision.
4. How long data is kept
- Active account: as long as the account is open.
- After account deletion: the data is deleted within 30 days, including the texts. Backups are deleted within 90 days.
- Payment data and accounting records: as long as the law requires (in Israel usually 7 years). Some of it is kept by Paddle.
- Server logs and technical data: up to 12 months.
5. Your rights
Under the law that applies to you (in Israel: the Protection of Privacy Law; in the EU and the UK: the GDPR), you can:
- Get a copy of your data.
- Correct inaccurate data.
- Delete your account and your data.
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent you have given.
- File a complaint with the Israeli Privacy Protection Authority, or with the supervisory authority in your country.
To exercise a right, write to support@copydna.app. We will respond within 30 days at most.
6. Data security
Data is transmitted over an encrypted connection (HTTPS). Passwords are stored only as a hash (scrypt). Access keys to providers are kept only on the server. Access to data is limited to those who need it. No security is perfect, but we follow common industry practice, and we will report a security incident as required by law.
7. Cookies
We use only cookies that are necessary for the Service to work:
| Cookie | Why | How long |
|---|---|---|
| Sign-in cookie | Keeping you signed in to your account | Up to 30 days |
| Google sign-in cookie | Securing the sign-in process | A few minutes |
On the checkout page, Paddle may use its own cookies, under its own privacy policy. We have no advertising or tracking cookies.
8. Emails
- Account emails (password reset, receipt, reminder before renewal, change in terms): sent to every user, as they are part of the Service.
- Marketing emails (news, offers): sent only to those who explicitly agreed, in accordance with the Israeli Communications Law (section 30A, the "anti-spam law"). Every such email includes a one-click unsubscribe link.
9. Children
The Service is intended for people aged 18 or over. We do not knowingly collect data about minors.
10. Changes to this policy
We will notify you by email at least 30 days before any material change takes effect.
11. Contact
support@copydna.app · Ventura Internet Marketing Services (CopyDNA), Kibbutz Ashdot Ya'akov Meuhad, Israel
This is an English translation. The Hebrew version is the binding version.