COPYPASTEY is a product of Nomos Industries, Inc. This Privacy Policy explains how Nomos Industries, Inc. collects, uses, stores, shares, and protects information when you use the COPYPASTEY app, website, and related services. In this Policy, "Nomos," "we," "us," and "our" mean Nomos Industries, Inc.
We designed COPYPASTEY to be useful without treating your library as advertising inventory. Your content is never sold, never used for advertising, and never used to train AI models. AI acts only when you choose an AI feature. You can export or delete your data, and you can use COPYPASTEY without allowing AI to touch your library.
Please read this Policy carefully. If you do not agree with it, please do not use COPYPASTEY.
1. The important storage fact
Captured content is stored on Nomos servers, in a cloud-hosted PostgreSQL database. Your library is not held only on your phone or computer. Nomos holds a copy so that COPYPASTEY can keep your library available and sync it across every device where you use the service.
This server-based storage is a core part of how COPYPASTEY works. It is what lets you capture something on your phone and find it later on your laptop, and it is what makes search, organization, and optional AI actions possible.
We want to be straightforward about what that means: a copy of your library exists on our servers, and it is technically possible for us to access it. We restrict that access to what is genuinely needed to operate, secure, and support the service, and we never use your content for advertising or to train AI models. We would rather tell you this plainly than imply a privacy guarantee we cannot make.
2. Information we collect
We collect information needed to provide COPYPASTEY and to keep it working.
Content you provide
We collect the content you capture, create, upload, submit, organize, and store in COPYPASTEY. This may include snippets and associated information that you add to your library. We call this your "content" in this Policy.
Content is stored on our servers. It is used to provide the library, syncing, searching, organizing, exporting, and deletion functions you request. We do not sell it, use it for advertising, or use it to train AI models.
Account information
We collect the account information you provide to create and use COPYPASTEY, along with records needed to administer your account and provide customer support. We use this information to maintain your account, respond to requests, communicate about the service, and protect the service from misuse.
Subscription and billing information
If you subscribe on the web, Stripe processes the payment. Stripe receives payment and billing information needed to process the transaction. Nomos does not receive your full card number. We receive the purchase and subscription information needed to provide your plan, such as whether your subscription is active and the billing status.
If you subscribe through iOS, Apple handles the in-app purchase. Apple receives the purchase and subscription information needed for that transaction. Nomos receives purchase and subscription records needed to provide your paid features. Apple does not receive your library content through this role.
Basic diagnostics and crash information
We collect basic diagnostic and crash information necessary to keep COPYPASTEY working, identify errors, and improve reliability. This never includes the content of your snippets. We do not use it to build advertising profiles or to track you across other apps and websites.
Communications
If you contact us, we collect the information in your message and the information needed to respond. Please avoid sending sensitive information that is not needed for your question.
Website launch list
If you join the iPhone launch list on our website, we collect your email address through our website host, Netlify, so we can send TestFlight invitations and App Store launch updates. We do not sell this address or use it for advertising. You can ask us to delete it at support@copypastey.co.
3. Information we do not collect or use in certain ways
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use your content for advertising. We do not use your content to train AI models.
We do not receive full payment-card numbers when you pay through Stripe. We do not receive your library content from Apple merely because you purchase a subscription through the App Store. We do not run AI over your library unless you choose an AI feature.
COPYPASTEY does not use your captured content as an advertising audience, and we do not make your content available to data brokers. We do not knowingly collect personal information from children under 13.
4. How we use information
- to provide, maintain, and secure COPYPASTEY;
- to store and sync your library across the devices where you use the service;
- to make search, organization, export, deletion, and optional AI features work;
- to process and administer subscriptions and keep appropriate purchase records;
- to respond to support requests and communicate with you about the service;
- to diagnose crashes, fix errors, and protect against fraud, abuse, and security incidents;
- to comply with legal obligations and enforce our Terms of Use; and
- to improve the reliability and operation of COPYPASTEY without using your content for advertising or AI-model training.
We use only the information reasonably needed for these purposes. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
5. Optional AI processing
AI features are optional. COPYPASTEY may use AI to explain content, organize it, create a weekly synthesis, or support semantic search. These features are provided using OpenAI models. OpenAI is our only AI provider.
When you trigger an AI action, the content relevant to that action is sent from our servers to OpenAI to fulfil your request. We use our own OpenAI account; you do not supply an API key. AI does not run on your device. That is the content necessary for OpenAI to perform the AI action you asked for. For example, an explanation action sends the content you ask to have explained; an organization action sends the content needed for the requested organization; and semantic search uses the relevant content to support the search function.
OpenAI processes this content as a service provider to provide the requested AI function. Nomos does not use your content to train AI models. You control whether to use AI features. If you choose not to use them, AI does not touch your library. Because you control what you submit for an AI action, please do not use an AI feature for material that you are not allowed to share.
6. When we share information
We share information only as needed to run COPYPASTEY, process a transaction, comply with law, or protect rights and safety. Our current subprocessors are listed below.
| Subprocessor | Role | Information received |
|---|---|---|
| OpenAI | Provides the server-side AI functions you choose to use. | The content submitted for the AI action you request. |
| DB_HOST_PROVIDER | Hosts the production PostgreSQL database and API. | Captured content and the information required to host and operate the service. |
| Stripe | Processes web subscription payments. | Payment and billing information. Stripe does not receive your content through this role. |
| Netlify | Hosts the public website and processes launch-list forms. | Email address and form metadata you submit through the launch list. |
| Apple | Distributes the iOS app and processes in-app purchases. | Purchase and subscription records. Apple does not receive your content through this role. |
The current list of subprocessors is maintained at copypastey.co/subprocessors. We will notify users of changes to that list.
We may also disclose information if we reasonably believe it is necessary to comply with applicable law, a lawful request, or legal process; protect the security or integrity of COPYPASTEY; enforce our Terms of Use; or protect the rights, safety, and property of Nomos, users, or others. If Nomos is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its business, information may be transferred as part of that transaction, subject to applicable law.
7. Legal bases for people in the EEA, UK, and Switzerland
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under one or more of these legal bases:
- Contract. We process account information, content, subscription records, and support information as needed to provide COPYPASTEY and carry out our agreement with you.
- Legitimate interests. We process limited information to secure the service, diagnose faults, prevent abuse, improve reliability, and defend our legal rights. We balance these interests against your rights and expectations.
- Consent. Where consent is required, we will ask for it. You can withdraw consent at any time, though that does not affect processing already completed before withdrawal.
- Legal obligation. We process or retain information when needed to meet legal, tax, accounting, or other legal obligations.
When you choose an AI feature, processing the content relevant to the requested action is necessary to provide that feature to you. You can choose not to use AI features.
8. Your privacy rights
Depending on where you live and subject to applicable law, you may have rights to request access to, correction of, deletion of, or a portable copy of your personal information. You may also have the right to restrict or object to certain processing, withdraw consent, and complain to a data-protection authority.
To exercise a right, email support@copypastey.co. Tell us what you are requesting and the account information we need to verify and respond to the request. We may need to confirm your identity before acting. We will not discriminate against you for exercising a privacy right.
Rights for people in the EEA, UK, and Switzerland
You may request access to your personal data, correction of inaccurate data, deletion in certain circumstances, restriction of processing, or data portability. You may object to processing based on legitimate interests. You may withdraw consent where we rely on consent. You may also lodge a complaint with the data-protection authority where you live, work, or believe an infringement occurred.
California privacy rights
California residents have the right to know the categories and specific pieces of personal information we collected, used, disclosed, and retained; to request deletion of personal information, subject to legal exceptions; and to request correction of inaccurate personal information. California residents may also have the right to limit certain uses and disclosures of sensitive personal information if applicable.
Nomos does not sell personal information. Nomos does not share personal information for cross-context behavioral advertising. We do not use captured content for advertising or data-broker purposes. Because we do not sell or share personal information in those ways, we do not provide a separate opt-out mechanism for sale or sharing.
You may submit a verified California privacy request at support@copypastey.co. An authorized agent may submit a request for you when permitted by law, but we may ask for proof of authorization and verify your identity directly. We will respond within the time required by California law. If we need more time, we will tell you why and how long we expect the extension to be.
9. Export and deletion
You can export your content and request deletion of your data at any time. Use the available service tools or email support@copypastey.co for help. Account deletion and subscription cancellation are separate actions. Canceling a subscription stops future renewal charges but does not by itself delete your account or content.
When you request deletion, we will delete the information associated with your request from our active systems, subject to information we must keep for legal obligations, dispute resolution, enforcing agreements, fraud prevention, or security. We may retain limited records for those purposes only. Deletion does not require you to stop using a free account, but deleting an account ends access to the information removed with it.
10. Retention
We retain content and account information while your account is active and as needed to provide COPYPASTEY. We retain subscription and transaction records as needed to administer a subscription and meet legal, tax, accounting, and dispute-related obligations. We retain support communications and diagnostic information only for as long as reasonably needed for support, safety, reliability, and legal purposes.
When information is no longer needed for these purposes, we delete it or take steps to make it no longer reasonably linked to you. Retention can vary based on the type of information, the reason it was collected, and legal obligations.
11. International transfers
Nomos and its service providers may process information in the United States and other countries where they operate. Those countries may have data-protection laws that differ from the laws where you live.
When we transfer personal data from the EEA, UK, or Switzerland to a country without an adequacy decision, we use appropriate safeguards as required by applicable law, such as standard contractual clauses or another valid transfer mechanism. You may contact us at support@copypastey.co for more information about the safeguards relevant to your personal data.
12. Security and incidents
We use reasonable administrative, technical, and organizational measures designed to protect information from unauthorized access, loss, misuse, alteration, and disclosure. These measures cannot guarantee absolute security. You also play a role by protecting your account credentials and notifying us promptly if you suspect unauthorized account access.
If we become aware of a security incident affecting personal information, we will investigate and take appropriate steps to contain and address it. We will provide notice to affected people and regulators when required by applicable law. If you believe there has been a security issue involving your account or information, contact support@copypastey.co.
13. Children
COPYPASTEY is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact support@copypastey.co. We will take appropriate steps to delete the information as required by law.
14. Changes to this Policy
We may update this Privacy Policy from time to time. If a change is material, we will provide reasonable notice before it takes effect, such as through COPYPASTEY, by email, or on our website. The updated Policy will state its effective date. Your continued use of COPYPASTEY after the effective date means you acknowledge the updated Policy, subject to any rights you have under applicable law.
15. Contact us
For questions, privacy requests, export or deletion help, or a concern about this Policy, contact us at support@copypastey.co.