Privacy Policy

Account information. Your name, work email address and email domain. If you sign in with Google or Microsoft, we receive your name, email address and, where provided, your profile picture from that provider. We never receive your password for those services.

What you do in the service. The addresses you submit, the reports we produce for them, any edits you make to report values, and a record of each report run (time, status, and processing statistics) so we can apply the monthly allowance.

Contact and plan requests. When you use the contact form we store your name, email, company, role, expected volume, your message and the IP address the request came from. We use the IP address to prevent spam and abuse.

Technical information. Our hosting provider records standard request logs, including IP address, browser type, the pages requested and timestamps, to operate and secure the service.

We use the information above to:

• create and secure your account and keep you signed in;
• research properties, build your reports and save your edits;
• count report runs against the monthly free allowance;
• reply to contact and plan requests;
• send service messages, such as sign-in links and notice of changes to our terms or this policy;
• detect, prevent and investigate abuse, fraud and security incidents; and
• meet legal obligations.

We do not use your information for advertising, we do not sell it, and we do not share it for cross-context behavioral advertising. We do not use the content of your reports or edits to train AI models.

To compile parts of a report, we send the property address and our research instructions to AI models through Vercel AI Gateway. The models search the public web and return values with the sources they found. We do not send your name, email address or other account details to the AI providers.

Reports can include information drawn from public records and public websites, such as the name and mailing address of a property’s owner. We collect this only as part of researching a property at a user’s request, and show it alongside the public source it came from. If you are a property owner and believe information in a report is inaccurate, or you want to exercise a privacy right over it, contact us using the details below.

We share information only with service providers that help us run COPEData, under contracts that limit their use of it to providing services to us:

We may also disclose information if required by law or legal process, to protect the rights, property or safety of COPEData, our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

Reports you export or print are shared by you, not us, and are your responsibility once they leave the service.

We use only what the service needs to work:

• Session cookies that keep you signed in. They are strictly necessary and cannot be turned off without signing out.
• Browser storage that remembers your light or dark theme, and briefly holds an address you typed on the home page while you sign in.

We do not use advertising cookies, cross-site tracking or third-party analytics.

• Account information, reports and edits: for as long as your account is open, then deleted within 30 days of account closure.
• Report run records used for the monthly allowance: up to 24 months.
• Contact and plan requests: up to 24 months after our last correspondence.
• Hosting request logs: according to our hosting provider’s retention, generally no more than 30 days.

Data is encrypted in transit with TLS and at rest by our database provider. Access to production systems is limited to people who need it to run the service. Sign-in uses one-time email links or your Google or Microsoft account, so we never store a password for you. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as required by law.

You can view and edit your reports in the app at any time. You can also ask us to give you a copy of your information, correct it, delete specific reports, or close your account and delete your information. Depending on where you live, you may have further rights under laws such as the California Consumer Privacy Act or the EU and UK GDPR, including the right to object to or restrict processing.

To make a request, use the contact form and send it from the email address on your account so we can verify it’s you. We respond within 30 days. We will not treat you differently for exercising your rights. You may also complain to your local data protection authority.

Legal bases (EEA and UK). We process account and report data to perform our contract with you; contact requests, request logs and abuse prevention on the basis of our legitimate interests in running a secure service; and information required by law to meet legal obligations.

COPEData is operated from, and its data is stored in, the United States. If you use the service from outside the U.S., your information will be transferred to and processed in the U.S. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses with our providers.

COPEData is a business service for adults. We do not knowingly collect information from anyone under 18.

We will update the effective date above whenever we change this policy, and tell you in the app or by email before any material change takes effect.

For privacy questions or requests, use our contact form and mention “privacy” in your message.