Privacy Policy
Last updated: September 2025
This Privacy Policy explains how Copilot.sh ("Copilot.sh", "we", "us") collects, uses, and protects information when you use our website and services that transcribe audio and generate summaries and action items (collectively, the "Services"). By using the Services, you agree to the practices described here.
1. Information we collect
We collect the following categories of information:
- Account information: Email address and (optionally) name or profile details you choose to provide.
- Content: Audio you record or upload, screen recordings you create, transcripts generated from that audio and video content, and derived outputs such as summaries, action items, and embeddings.
- Integrations: If you connect third‑party services (e.g., Google, calendar or conferencing tools), we receive only the data needed to provide the integration you authorize.
- Usage and device data: Interactions with the app, timestamps, IP address, device/browser type, and basic diagnostic information to keep the Service reliable and secure.
- Cookies and similar technologies: Used for essential functionality, analytics, and support. See “Cookies” below.
2. How we use information
- Provide and operate the Services you request (record audio and screen content, transcribe, search).
- Generate summaries, action items, and other derived outputs you enable.
- Process screen recordings and audio to create transcripts for productivity and note-taking purposes.
- Maintain security, prevent abuse, and debug/monitor reliability.
- Improve product quality and accuracy using aggregated or de‑identified data.
- Communicate important updates and respond to support inquiries.
3. Recording consent and compliance
Important: Copilot.sh is a personal productivity tool. You are responsible for complying with all applicable laws regarding audio and video recording, including obtaining necessary consent from all parties before recording conversations. Many jurisdictions require consent from all participants before recording. We do not monitor or verify whether you have obtained proper consent. Failure to obtain required consent may expose you to legal liability.
By using our Services to record audio or video, you represent and warrant that:
- You have obtained all necessary consents from all participants in any recorded conversation.
- Your use of the Services complies with all applicable laws and regulations.
- You will not use the Services for any unlawful purpose or in violation of any person's rights.
4. Cookies
We use cookies and similar technologies for essential functionality and analytics (for example, Vercel Analytics) and to provide customer support (for example, Crisp chat). You can control cookies in your browser settings; blocking some cookies may impact functionality.
5. How we share information
- No selling of personal data.
- Service providers: We use trusted vendors to run our infrastructure and product (for example, Supabase for auth, database, and storage; Vercel for hosting; Stripe for payments; analytics/support tools). They are bound by contracts to protect your data and use it only to provide services to us.
- Legal: We may disclose information if required by law or to protect rights, safety, and the integrity of the Services.
- Business transfers: If we undergo a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.
6. Storage and retention
Audio files, screen recordings, transcripts, and derived outputs are stored in our infrastructure (for example, Supabase storage and databases) and retained while your account is active or as needed to operate the Services. Screen recording data is stored securely and encrypted both in transit and at rest. You can request deletion at any time, and we will delete or de‑identify data unless we need to retain it to comply with law, resolve disputes, or enforce agreements.
7. Your privacy rights
Depending on your location, you may have rights to access, correct, export, object to, restrict, or delete your personal information. You can also withdraw consent where we rely on consent. To exercise rights, contact us at privacy@copilot.sh.
8. Security
We use industry‑standard measures to protect data in transit and at rest. No method of transmission or storage is 100% secure, but we work to keep your information safe and review protections regularly.
9. Children
Our Services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided information, contact us to delete it.
10. International data transfers
We may process and store information in the United States and other countries where we or our service providers operate. When we transfer personal information internationally, we use appropriate safeguards as required by applicable law.
11. Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date above. If changes materially affect your rights, we will provide additional notice where required by law.
12. Contact
Questions or requests? Email privacy@copilot.sh.