PrivacyPolicy

Introduction

At Coopa.ai ("we", "us", "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI marketing chatbot services.

This policy applies to all users of our services and is compliant with the General Data Protection Regulation (GDPR) and Austrian data protection law.

Data Controller

Information We Collect

Personal Information

We may collect the following personal information:

• Name and email address when you create an account
• Payment information when you purchase credits
• Usage data and interaction with our services
• Communication preferences and marketing consent

Usage Data

We automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our website
• Error logs and performance data

How We Use Your Information

We use your personal data for the following purposes:

• To provide and maintain our AI marketing services
• To process payments and manage your account
• To improve our services and develop new features
• To communicate with you about service updates
• To comply with legal obligations
• To prevent fraud and ensure security

Third-Party Services

OpenAI API

We use OpenAI's API to power our AI content generation features. When you use our services, your content may be processed by OpenAI's systems. OpenAI's privacy policy applies to their processing of your data.

Pirsch Analytics

We use Pirsch Analytics to understand how visitors interact with our website. Pirsch is a privacy-friendly analytics service that does not use cookies and respects user privacy.

Other Third-Party Services

We may also use other third-party services for payment processing, email communication, and customer support. These services have their own privacy policies that govern how they handle your data.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect our rights, property, or safety
• With service providers who assist in operating our services
• In connection with a business transfer or merger

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Limit how we process your data
• Right to Portability: Receive your data in a structured format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. The retention period depends on the type of data and the purpose for which it was collected:

• Account data: Retained while your account is active
• Usage data: Retained for up to 2 years for analytics
• Payment data: Retained as required by law (typically 7 years)
• Marketing data: Retained until consent is withdrawn

Cookies and Tracking

We use minimal cookies and tracking technologies to improve your experience:

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: Help us understand website usage (Pirsch Analytics)
• Preference Cookies: Remember your settings and preferences

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that such transfers comply with GDPR requirements through appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions.

Children's Privacy

Our services are not intended for persons under 18 years of age. We do not knowingly collect personal information from persons under 18. If you believe we have collected such information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, sending you an email notification. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: