Privacy Policy
Last updated: July 25, 2026
1. Introduction
CopZon (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered Amazon listing generation service (collectively, the “Service”). By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Information We Collect
We collect the following types of information:
2.1 Information You Provide Directly
- Account information: your name, email address, and authentication credentials when you create an account.
- Product data: product details, descriptions, keywords, images, and other content you submit for listing generation.
- Payment information: billing details processed securely through our payment processor (Stripe). We do not store full credit card numbers on our servers.
- Communications: content of messages you send to us, such as support inquiries or feedback.
2.2 Information Collected Automatically
- Usage data: pages visited, features used, generation history, and interaction patterns within the Service.
- Device information: IP address, browser type, operating system, and device identifiers.
- Cookies and similar technologies: essential cookies for authentication and session management, as well as analytics cookies to understand usage patterns (see Section 6).
3. How We Use Your Information
We use your information for the following purposes:
- Service delivery: to generate, optimize, and deliver Amazon listing drafts based on your inputs.
- Account management: to create and maintain your account, process payments, and manage subscriptions.
- Communications: to send transactional emails (account notifications, purchase confirmations), support responses, and product updates. You may opt out of marketing communications at any time.
- Improvement and analytics: to analyze usage patterns, improve our AI models, and enhance the user experience.
- Security: to detect, prevent, and investigate fraudulent activity, abuse, and security incidents.
- Legal compliance: to comply with applicable laws, regulations, and legal requests.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for processing your personal data depends on the specific context:
- Contractual necessity: to perform the contract we have with you (e.g., providing the Service, processing payments).
- Legitimate interests: for purposes such as improving our Service, ensuring security, and preventing fraud, where those interests are not overridden by your data protection rights.
- Consent: where you have given clear consent for a specific purpose (e.g., optional marketing communications).
- Legal obligation: to comply with applicable laws and regulations.
5. Data Storage and Security
Your data is stored on secure servers hosted by our cloud service providers. We implement industry-standard security measures, including:
- Encryption of data at rest and in transit (TLS/SSL).
- Regular security assessments and monitoring.
- Role-based access controls limiting employee access to personal data.
- Secure authentication mechanisms for all user accounts.
While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach affecting your personal information, as required by applicable law.
6. Cookies
We use the following types of cookies:
- Essential cookies: required for authentication, session management, and core Service functionality. These cannot be disabled.
- Analytics cookies: help us understand how you interact with the Service, which features are most used, and where we can improve the experience.
You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect your ability to use parts of the Service.
7. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share data in the following limited circumstances:
- Service providers: trusted third-party vendors who assist in operating our Service (including cloud hosting, AI model providers, payment processing, and email delivery), bound by data processing agreements.
- Legal compliance: when required by law, subpoena, court order, or governmental authority.
- Business transfers: in connection with a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. You will be notified before your data is transferred and becomes subject to a different privacy policy.
- With your consent: for any purpose not covered above, with your explicit authorization.
8. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy, or as required by law. When you delete your account, we will delete or anonymize your personal data within 30 days, except for information we are legally required to retain (such as transaction records for tax purposes).
9. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: request a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure:request deletion of your personal data (“right to be forgotten”).
- Portability: receive your data in a structured, machine-readable format.
- Restriction: limit how we process your data in certain circumstances.
- Objection: object to processing based on legitimate interests or direct marketing.
- Withdraw consent: withdraw previously given consent at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.
10. Third-Party Services
Our Service may integrate with or link to third-party services (including payment processors, AI providers, and analytics tools). This Privacy Policy does not cover the practices of those third parties. We encourage you to review the privacy policies of any third-party services you interact with through our platform.
11. Children's Privacy
Our Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it. If you believe a child has provided us with personal information, please contact us immediately.
12. International Data Transfers
Your information, including personal data, may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy, including standard contractual clauses where applicable.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes via email or through a prominent notice on our platform. The “Last updated” date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
14. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Contact form: copzon.com/contact
We strive to respond to all privacy-related inquiries within 48 hours.