Privacy Policy

CopyAware is operated by Mockupnest Inc., 600 N Broad Street, Suite 5 #3414, Middletown, DE 19709, United States (“CopyAware”, “we”, “us”). We are the data controller for the personal data described in this policy. For any privacy question, or to exercise your rights, contact us at privacy@copyaware.com.

Your account email; the baskets of eToro Popular Investors you choose to analyze; and basic usage and billing metadata. CopyAware reads eToro's public data — it never connects to your eToro account, and it never places a trade. We do not sell your data.

To provide the service — computing the correlation, holdings overlap, and concentration of your baskets, generating plain-language insights, and billing your subscription — and to keep the product secure and reliable.

We process your personal data on these legal bases (GDPR Article 6): to provide the account and service you signed up for — performance of our contract with you (Art. 6(1)(b)); to bill your subscription and keep the accounting and tax records the law requires — contract and legal obligation (Art. 6(1)(b), (c)); to keep the service secure, prevent abuse, and improve reliability — our legitimate interests (Art. 6(1)(f)); and to send you any optional product or marketing email — your consent (Art. 6(1)(a)), which you can withdraw at any time. Product analytics (a sign-up event and a checkout-started event, recorded on our servers) runs only with your consent (Art. 6(1)(a)). You can withdraw it at any time under Cookie settings, in the site footer, under the data pages, on the sign-in pages and on your account page; no further events are recorded after you do.

These providers process personal data on our behalf (processors) to run CopyAware:

Supabase

Database and authentication.

Resend

Transactional email, if enabled.

Anthropic

The AI provider that writes our plain-language insights, if enabled.

Vercel

Our hosting provider.

Google

Identity provider, only if you choose Sign in with Google.

PostHog

Product analytics, only if you accept it in our consent banner. Our servers then send it a sign-up event and a checkout-started event (with the plan you picked), keyed to your account ID. It sets no cookies in your browser.

eToro public API

For reads only: the market data we analyze.

When you buy Pro, you buy it from Paddle.com, our online reseller and merchant of record. Paddle collects your payment and billing details directly and processes them as an independent controller under its own privacy notice (paddle.com/legal/privacy). We receive only what we need to run your subscription: your Paddle customer and subscription IDs, the plan you chose and its status. Paddle keeps its own transaction and tax records after you delete your CopyAware account, as the law requires.

To generate an insight, the computed figures for your basket — trader names and correlation numbers — are sent to Anthropic; we never send it your identity or account details. If we later enable error monitoring, we will name the provider here. We are not affiliated with eToro and never connect to your eToro account. We share only what each provider needs to do its job.

Some of our providers process data outside your country, including in the United States. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards — the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), together with any adequacy decision or certification the provider holds (for example the EU–US Data Privacy Framework). You can request detail about a specific transfer at privacy@copyaware.com.

We use strictly-necessary cookies to keep you signed in, plus one cookie (ca_consent) that remembers your privacy choice. We do not set advertising, analytics, or cross-site tracking cookies. The product analytics described above runs on our servers, only if you accept it, and sets no cookie in your browser. You can change your choice at any time under Cookie settings, in the site footer, under the data pages, on the sign-in pages and on your account page. See our Cookie Policy (/cookies) for details.

You can access and export your data, and permanently delete your account and all associated data at any time from your account settings (a self-serve GDPR erasure). If you are in the EU/UK, you have the rights afforded by the GDPR/UK GDPR — access, rectification, erasure, restriction, portability, and objection — and the right to lodge a complaint with your local data-protection supervisory authority (in the UK, the Information Commissioner's Office).

We keep your data while your account is active. When you delete your account, we erase your data, including your saved baskets, from our systems, and ask PostHog to delete any product-analytics events recorded with your consent. If that request ever fails, we follow it up by hand. We keep the minimal billing and tax records the law requires for the required period.

Questions about privacy, or to exercise a right? Email privacy@copyaware.com. Our postal address is Mockupnest Inc., 600 N Broad Street, Suite 5 #3414, Middletown, DE 19709, United States.