Privacy Policy

CopyJump (“CopyJump”, “we”, “us”, or “our”) operates the websites located at https://copyjump.com and https://app.copyjump.com, the related applications, APIs, integrations, free tools, and services (together, the “Service”). This Privacy Policy explains what personal information we collect, how we use and share it, the choices you have, and the rights available to you.

This Privacy Policy is incorporated into our Terms of Service. By using the Service, you confirm you have read and understood this Privacy Policy. If you do not agree, do not use the Service.

1. Who We Are and How to Contact Us

CopyJump is operated from Western Australia, Australia, and is bound by the Australian Privacy Principles (the “APPs”) set out in the Privacy Act 1988 (Cth) (the “Privacy Act”). We are the “APP entity” responsible for handling personal information described in this Privacy Policy. We make the Service available to users worldwide and apply the protections set out in this Privacy Policy to everyone who uses the Service, regardless of where they live.

You can contact us about privacy matters, request access to or correction of your personal information, or make a privacy complaint at hello@copyjump.com or through our contact page.

2. Key Definitions

“Personal Information” has the meaning given to it in the Privacy Act 1988 (Cth) — broadly, information or an opinion about an identified individual, or an individual who is reasonably identifiable.
“User Content” means information you submit to the Service (for example, brand details, prompts, drafts, URLs, files, or chat messages).
“Generated Content” means output produced by the Service’s AI models in response to your inputs.
“Subprocessor” means a third party engaged by us to handle Personal Information on our behalf.

3. Information We Collect

We collect information in the following categories:

3.1 Information you give us

Account information. Name, email address, password (stored in hashed form), profile photo, organization name, role, and similar registration details.
Billing information. When you purchase a Subscription, we and our payment processor collect billing name, email, billing address, country, tax identifiers, and a payment method token. We do not store full payment card numbers. Card details are processed and stored by Stripe, Inc.
Brand profile data. Information you provide about your brands, including brand names, voices, audiences, positioning, messaging frameworks, value propositions, websites, and any other brand attributes you configure.
User Content and prompts. Documents, drafts, outlines, briefs, chat messages, instructions, prompts, images, files, URLs, sitemaps, and any other material you upload or submit to the Service.
Source material you direct us to access. Public web pages, sitemaps, files, and other reference material you ask the Service to fetch, scrape, audit, or analyse on your behalf.
Support communications. Messages you send through our contact form, email, in-app chat, or other support channels, including any attachments and metadata.
Survey and marketing responses. Information you choose to share when responding to surveys, feedback requests, testimonials, or marketing communications.

3.2 Information collected automatically

Device and usage data. IP address, browser type and version, operating system, device identifiers, language, time zone, referring URLs, the pages and features you use, the actions you take, the time and duration of your visits, and similar diagnostic information.
Log data. Server logs, error reports, request and response metadata for AI calls, API requests, rate-limit data, and security events.
Cookies and similar technologies. See Section 8 for details on the cookies and tracking technologies we use.
Analytics events. We use first-party and third-party analytics to understand how the Service is used and to improve it.

3.3 Information from third parties

Single sign-on providers. If you sign in with a third-party identity provider, we receive basic profile information from that provider, such as your email and name, in accordance with the permissions you grant.
Payment processor. Stripe sends us limited information about your transactions, such as the last four digits of your card, expiration date, country, and transaction status.
Data and SEO providers. When you ask the Service to research keywords, perform SEO audits, or scrape pages, third-party providers return data about URLs, domains, and search behaviour; this is associated with your Account.
Referral and affiliate platforms. If you sign up through a referral or affiliate link, we may receive information about the source of the referral.
Public sources. We may collect information from public web pages, sitemaps, search engines, and similar sources at your direction or to operate the Service.

3.4 Information you should not give us

CopyJump is a content and marketing tool. It is not designed, certified, or intended for the storage or processing of sensitive information, and we strongly recommend that you do not upload sensitive information to the Service. As a best practice, you should treat anything you submit to the Service as if it could be reviewed by our personnel, our subprocessors, or, where you choose to share it, by anyone with a public Share Link.

In particular, please do not upload, paste, type, or otherwise submit (whether as User Content, prompts, brand profile data, attachments, source material, chat messages, or otherwise) any of the following: government identifiers (passport, driver’s licence, tax file number, etc.); full payment card numbers, CVV codes, or banking credentials; health or medical records; biometric data; precise location data of identifiable individuals; information about children under 18; login credentials, secrets, API keys, or private keys; classified or export-controlled information; trade secrets or confidential information of third parties that you are not lawfully entitled to share; or any other category of “sensitive information” as defined under the Privacy Act 1988 (Cth). Your obligation not to upload sensitive information is also set out in the Terms of Service.

If you accidentally submit sensitive information, please contact us at hello@copyjump.com as soon as possible so that we can help you remove it. To the extent permitted by law, we will not be liable for any consequences arising from sensitive information that you submit in breach of this section.

4. How We Use Information

We use the information we collect to:

Provide, operate, maintain, secure, and improve the Service;
Authenticate you, manage your Account and Organization, and remember your preferences;
Process payments, manage Subscriptions, and prevent fraudulent transactions;
Process your User Content through our AI subprocessors to generate Generated Content for you;
Crawl, scrape, and analyse URLs and source material that you direct us to access, in order to populate Brand Profiles, perform SEO audits, conduct keyword research, and ground Generated Content in real sources;
Provide customer support and respond to your inquiries;
Send you transactional communications about your Account, Subscription, security, billing, and other operational matters;
Send you marketing communications about features, tips, content, and offers, where permitted by law or with your consent (you can opt out at any time);
Personalise and improve the Service, including measuring feature usage, debugging issues, and developing new features;
Detect, investigate, prevent, and respond to fraud, abuse, security incidents, violations of our Terms, and illegal activity;
Comply with legal obligations and respond to lawful requests by public authorities; and
Establish, exercise, or defend legal claims.

5. AI Processing of Your Content

The Service uses third-party large language models and other AI providers (currently including Anthropic and Fireworks AI) to generate Content. When you use AI features, your User Content (including prompts, documents, brand profile data, source material, and chat history) is transmitted to our AI subprocessors so they can generate a response for you.

We rely on the commercial terms and data-handling commitments of our AI subprocessors to restrict how they may use your data. Under those terms, our AI subprocessors are not authorised to use your User Content, Generated Content, or any data we send to them on your behalf to train, fine-tune, or improve their general-purpose AI models. At least one of our AI providers operates a zero data retention policy for the models we use, meaning your prompts and the generated outputs are not stored on that provider’s systems beyond the time required to return a response to you. We may use aggregated, anonymised, and de-identified data to operate and improve the Service.

Generated Content can be inaccurate, incomplete, biased, outdated, fabricated, or otherwise unsuitable. See our AI-Generated Content Disclaimer in the Terms of Service for important information about your responsibility to review and verify Generated Content before using it.

6. Web Crawling, Scraping and Source Material

Some features of the Service let you ask us to fetch, scrape, audit, or analyse web pages, sitemaps, domains, and files (for example, to learn your brand voice, generate keyword lists, build internal link maps, run SEO audits, or visualise sitemaps). When you provide a URL or other source material:

You confirm that you have all rights and authorisations necessary to direct us to access and process that material;
We may store the fetched content, metadata, and any extracted data within your Account so you can use it in the Service;
We may use third-party scraping, search, and SEO data providers to perform these operations on our behalf; and
You are responsible for ensuring that your use of the resulting data complies with applicable law, the rights of third parties, and the terms of service of the websites involved.

We do not sell your personal information. We share information only as described below.

7.1 With your Organization

If you are part of an Organization, your Account information, activity, and Content within that Organization may be visible to other members of that Organization (in particular, to Owners and administrators) according to their roles and permissions. Owners and administrators may have the ability to access, modify, export, or delete Content created by other members.

7.2 With subprocessors

We engage trusted third parties to host, operate, secure, and improve the Service. These subprocessors only handle Personal Information on our behalf, under our instructions, and subject to appropriate contractual safeguards. Categories of subprocessors include:

AI model providers — to generate Content from your inputs (currently including Anthropic and Fireworks AI).
Cloud hosting and infrastructure providers — to host the Service, store data, and operate our backend.
Payment processors — to process payments and manage Subscriptions (Stripe, Inc.).
SEO and keyword data providers — to retrieve search-volume data, ranking data, and similar information at your request.
Web scraping and content extraction providers — to fetch and process web pages on your behalf.
Analytics providers — to understand how the Service is used and improve it.
Customer support and communications platforms — to operate our support inbox, in-app chat, email notifications, and CRM.
Email and notification providers — to deliver transactional and marketing emails and operational notifications.
Security, fraud prevention, logging, and monitoring providers — to keep the Service safe and reliable.

7.3 For legal reasons

We may disclose Personal Information when we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation, court order, subpoena, or lawful government request; (b) enforce our Terms of Service; (c) detect, prevent, or address fraud, security, or technical issues; (d) protect the rights, property, or safety of CopyJump, our users, or others; or (e) respond to claims of infringement.

7.4 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or transition of service to another provider, your information may be transferred as part of the transaction. We will provide notice (for example, by email or by a prominent notice on our website) of any such change in ownership or control of your Personal Information.

7.5 With your consent

We may share information for any other purpose with your consent or at your direction, such as when you choose to publish, export, or send Content through the Service.

7.6 Through public Share Links you create

The Service includes an optional “Share Link” feature that lets you (or other members of your Organization) create a public, unauthenticated URL for a piece of Content. When you create a Share Link, the Content behind that link — including any personal information you have placed in it — becomes accessible to anyone in possession of the URL, without logging in to the Service. This is the intended behaviour of the feature, and it means that:

The Content may be viewed, downloaded, copied, screenshotted, forwarded, archived, scraped, indexed by search engines, or used by third-party AI crawlers, regardless of any technical measures we apply to discourage indexing;
Any personal information of you or third parties contained in the Content is published to the open internet for as long as the Share Link remains active, and you are responsible under the Privacy Act 1988 (Cth) and any other applicable law for that publication;
Revoking or disabling a Share Link prevents future access through that URL but does not delete or recall any copies of the Content that were already viewed, downloaded, cached, indexed, or otherwise stored by third parties; and
You are solely responsible for choosing what Content to share via Share Links and for ensuring that you have all necessary rights, consents, and lawful bases to publish it.

We strongly recommend that you do not place sensitive information (see Section 3.4) or third-party personal information behind a Share Link unless you have a clear lawful basis to publish it. The terms that govern your use of Share Links are set out in the Terms of Service.

8. Cookies and Similar Technologies

We and our service providers use cookies, local storage, pixels, beacons, tags, and similar technologies to operate the Service, remember your preferences, authenticate sessions, understand how the Service is used, and measure the effectiveness of our marketing.

The categories of cookies we use include:

Strictly necessary cookies — required to provide core functionality such as login, security, fraud prevention, and load balancing. These cannot be disabled.
Preference cookies — remember your settings, such as theme and language.
Analytics cookies — help us understand how visitors use our website and product.
Marketing cookies — help us measure the effectiveness of advertising and show you relevant content.

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the Service.

9. Data Retention

We retain Personal Information for as long as your Account is active and for as long as is reasonably necessary to provide the Service, comply with our legal obligations (including for tax, accounting, fraud prevention, and dispute resolution purposes), enforce our agreements, and protect our and others’ rights.

When you delete Content from the Service, we will remove it from active systems within a commercially reasonable period. Backup copies, audit logs, and aggregated analytics may persist for additional limited periods. Generated Content may also remain referenced in chat history, agent runs, or Organization-level archives unless you or an administrator deletes it.

When you close your Account, we will delete or anonymise your Personal Information within a commercially reasonable period, except where retention is required by law or for legitimate business purposes.

10. Security

We implement administrative, technical, and physical safeguards designed to protect Personal Information against unauthorised access, disclosure, alteration, and destruction. These include encryption in transit, restricted access controls, secret management, secure development practices, monitoring, logging, and regular review of our subprocessors.

No method of transmission over the internet or method of electronic storage is one hundred percent secure, and we cannot guarantee absolute security. You are responsible for keeping your password and API keys confidential, using strong unique credentials, and notifying us immediately of any suspected unauthorised access to your Account.

Data breach notification.If we become aware of an “eligible data breach” involving your personal information within the meaning of Part IIIC of the Privacy Act 1988 (Cth) (the Notifiable Data Breaches scheme), we will assess the breach and, where required, notify you and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.

11. Overseas Disclosure of Personal Information

CopyJump is operated from Australia and serves users worldwide. To provide the Service, we and our subprocessors may store, access, and process Personal Information in countries other than Australia, including the United States and other jurisdictions where our subprocessors are located.

Where we disclose Personal Information to overseas recipients (for example, our AI model providers, hosting providers, payment processor, support tools, and analytics providers), we take reasonable steps to ensure those recipients handle the information in a manner consistent with the APPs. By submitting Personal Information to the Service, you acknowledge and consent to your Personal Information being disclosed to overseas recipients for the purposes described in this Privacy Policy. To the extent permitted by APP 8.2, we are not accountable for any acts or practices of an overseas recipient that breach the APPs, where we have obtained your consent under that exception.

12. Your Privacy Rights

You have rights regarding the personal information we hold about you. These include the right to:

Access the personal information we hold about you;
Correct inaccurate or incomplete personal information;
Request deletion of your personal information, subject to certain exceptions;
Withdraw consent at any time where we process personal information on the basis of your consent (without affecting the lawfulness of processing carried out before the withdrawal);
Opt out of marketing communications by clicking the unsubscribe link in any marketing email or by emailing us; and
Make a complaint about how we have handled your personal information.

We do not sell your personal information. To exercise any of these rights, contact us at hello@copyjump.com. We may need to verify your identity before fulfilling your request, and we may decline a request where permitted by law.

Australian users. If you are in Australia, you have the right under the Privacy Act 1988 (Cth) to access and seek correction of the personal information we hold about you, and to make a complaint about how we have handled your personal information. We will respond to access and correction requests within a reasonable time and at no cost (other than reasonable charges for supplying access). If you make a privacy complaint, please contact us first at hello@copyjump.com; we will investigate and respond within a reasonable period (generally within 30 days). If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

13. Children’s Privacy

The Service is not directed to children under the age of 18, and we do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected personal information from a child under 18 without verified parental consent, we will delete that information as soon as possible. If you believe a child has provided us with personal information, please contact us at hello@copyjump.com.

14. Third-Party Links and Services

The Service may contain links to third-party websites, services, and integrations that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of any third-party service you use.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If a change is material, we will provide additional notice (for example, by email to the address associated with your Account or by a prominent notice in the Service). Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

16. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our handling of personal information, please contact us at hello@copyjump.com or via our contact page.

By using CopyJump, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and share information.