How CopyPasta protects data
Hokia Labs doesn't sell personal data or use it for advertising.
CopyPasta sends copied text only when you request an AI rewrite.
CopyPasta doesn't change or send clipboard data that another app marks as sensitive. It removes recognized credentials, such as API keys, before it sends copied text for an AI rewrite.
CopyPasta doesn't include your text in reports about whether a paste worked.
On your machine
Standard formatting runs on your machine.
When you use a spoken instruction, CopyPasta sends the recording to turn it into text. The service keeps the text of your instruction with the rewrite it produced. It doesn't keep the recording.
The paste journal stores paste metadata on your machine. If outcome sharing is on, the app also stores the source text, delivered text, and outcome on your machine.
A report that fails to send stays on your machine. CopyPasta doesn't retry it automatically. You can retry or delete it from the CopyPasta menu in the menu bar.
AI rewrites
When you open the paste picker while signed in, CopyPasta can use Cloudflare's AI service to rank suggestions. It sends redacted clipboard text, eligible noodle instructions, app and website metadata, text near the caret, and visible text from the focused destination window. CopyPasta excludes hidden text, password fields, terminal content, and other windows. CopyPasta doesn't store this ranking context or include it in analytics. If ranking is unavailable, the picker uses local suggestions.
AI rewrites and suggestions can send copied text, nearby field or conversation text, and visible text from the destination window.
When you request an AI rewrite, CopyPasta sends the copied text and your instruction. The request can also include nearby field text, app details, website details, and window titles.
Auto, Email, Reply, Prompt engineer, and written or spoken instructions can also send visible text from the focused destination window. CopyPasta doesn't read other windows.
CopyPasta sends rewrite requests through OpenRouter to the selected model provider.
CopyPasta uses AI providers with Zero Data Retention. They process requests but don't retain prompts or responses.
If you use Link, CopyPasta sends the public page address. Text from that page can become rewrite source text.
CopyPasta stores each successful rewrite. Stored data includes copied text, rewritten text, instructions, target details, model details, token counts, and an account ID.
CopyPasta shares the rewrite request, relevant context, and rewrite result with PostHog for diagnostics. Nearby field text, Auto source details, and focused-window text aren't stored with the successful rewrite record.
Locations and retention
CopyPasta doesn't restrict rewrite processing to one country. It doesn't promise processing or storage only in the United States.
CopyPasta deletes submitted reports 30 days after upload.
PostHog processes CopyPasta data in its United States cloud project. It keeps session replays for up to 30 days and operational logs for 14 days by default.
CopyPasta has no fixed automatic deletion period for rewrite records, certain analytics data, or support tickets.
Reports you send
You must sign in to send a report. Thumbs up sends that paste. Thumbs down opens the Report Last Paste form and sends nothing until you confirm it. You can also use this form for a later problem. Share outcomes doesn't authorize a report or block a report that you submit.
A report includes the allowed plain-text, HTML, and RTF bytes from the source and the exact content that CopyPasta delivered. It also includes your answer, safe paste metadata, and an optional note from Report Last Paste. It can contain private information. It excludes nearby document text, window titles, separate URL and site-path fields, images, file URLs, and private pasteboard formats.
CopyPasta stores the report for 30 days. A successful upload removes the local copy. A failed upload keeps one local copy until you retry or delete it.
PostHog records report-prompt interactions and accepted reports. These events include the report answer and an anonymous identifier for the paste. They don't include clipboard content, the optional note, formatting data, a title, or a URL.
Outcome sharing
Share limited information about your pastes to help improve CopyPasta. These reports never include your text.
Outcome sharing is off until you turn it on. When sharing is on, CopyPasta sends one outcome report for each paste with:
- Which app the paste went to, which rewrite ran, and how long it took.
- Whether you kept, edited, undid, or replaced the result, and how many words changed.
- Which noodles CopyPasta offered and which one you chose.
- That an automatic paste hit a case CopyPasta doesn't handle yet.
Routine outcome reports exclude:
- Copied, pasted, rewritten, field, and page text.
- Window titles, page addresses, and document names.
- Your name or email. Reports use an account ID instead.
Turning sharing off stops later reports. It doesn't delete reports already sent.
Crash reports
Crash reports can include the crash message, stack trace, and loaded binary details. CopyPasta doesn't intentionally attach copied text.
Website analytics
PostHog can record page views, interactions, browser and device details, approximate location, errors, console messages, performance details, and session replay.
PostHog can also record website network request details. The site masks form inputs in session replays. Session replays remain for 30 days. Other website events have no enforced fixed deletion period.
Email support
Cloudflare and PostHog Support process email sent to support@trycopypasta.com. PostHog sends replies to your email address.
PostHog stores the sender name, email address, subject, message body, attachments, and ticket replies.
Companies that handle service data
| Company | Purpose | Location statement |
|---|---|---|
| Cloudflare | Service infrastructure, data storage, AI suggestion ranking and résumé field selection, public page reading, and support email forwarding | Global (storage location isn't restricted) |
| OpenRouter | AI request routing | Global (CopyPasta doesn't use in-region routing) |
| Selected model provider | AI model processing | Varies by selected provider |
| PostHog | Diagnostics, analytics, crash reports, session replay, and support tickets | United States |
| WorkOS | Sign-in and account management | United States |
| Stripe | Payments, invoices, and subscriptions | Global |
| GitHub | Optional connector and repository access | Global |
Delete your data
Email support@trycopypasta.com from the address on your account. CopyPasta verifies the request before deleting account-linked service data.
Deleting an account also deletes its submitted feedback.
Hokia Labs can keep records needed for billing, fraud prevention, security, or legal obligations.