Privacy Policy

Last updated: September 18, 2026. This starter policy describes how the CopyRaid application is designed to handle account, case, evidence, registry, and billing data. Have counsel review and adapt it before commercial launch.

Information the service stores

CopyRaid can store account information, copyright-case details, claimant contact details, URLs, private evidence files, file fingerprints, content-registry records, case activity, notice-delivery metadata, and subscription information. Payment card details are handled by Stripe rather than stored directly by CopyRaid.

How information is used

The application uses submitted information to create and manage cases, prepare copyright notices, route notices to configured recipients or platform workflows, maintain evidence and registry records, provide public verification when the account owner enables it, and operate billing and account security.

Public information

Public case tracking intentionally excludes claimant identity, private evidence, notice contents, and private URLs. Public registry verification is available only for records the account owner marks public. A public registry record may display its CopyRaid ID, title, content type, rights owner, original source reference, timestamp, status, and source-file fingerprint.

Third-party processors

This implementation is designed to use Supabase for authentication, database, and private file storage; Resend for outbound email notices; Stripe for subscriptions and billing; and Vercel for hosting and serverless functions. Each provider processes information under its own terms and privacy commitments.

Retention and deletion

Account owners can delete evidence and registry records from the application. A production policy should define retention periods for legal notices, delivery logs, billing records, security logs, and closed cases based on your business and legal requirements.

Security

Private database records are protected with row-level security tied to the authenticated user. Evidence and registry source files are stored in private buckets with user-scoped storage policies. Server-side service credentials must remain in Vercel environment variables and must never be exposed to the browser.

Contact

Before launch, replace this section with CopyRaid’s actual privacy contact and business address.