Copymate

GDPR overview

Copymate makes no GDPR claim at all. A search across the collected pages returns neither GDPR nor its Polish equivalent RODO: the privacy policy, last updated March 2026, never names the regulation. That silence exempts nobody — Conti Sp. z o. o. is established in Zamość, Poland, therefore inside the European Union and squarely within the regulation's scope. No Article 27 representative is required for the same reason. Beyond that, the documentation is thin: no data protection officer is named, no dedicated mailbox exists (contact@copymate.app is the only channel), no legal basis for processing is cited and no retention period is quantified. The right to erasure is the one right actually operationalized, through account closure. Access, rectification, portability and objection are not described. No DPA is published or offered on request, and no subprocessor list exists.

Who owns the data?

The privacy policy names Conti Sp. z o. o. (NIP 9223061598, REGON 383022826, Łapiguz 10, 22-400 Zamość, Poland) as the administrator of personal data. What it collects is listed plainly: first and last name, company name and VAT number, postal address, telephone, email and IP address, gathered at sign-up, when a subscription is ordered, when extra tokens are bought and when an integration is activated. The document says nothing at all about who owns the articles the tool generates. Deletion is left in the user's hands: closing the account permanently removes all data, at any time. Questions about processing go to a single mailbox, contact@copymate.app.

Reuse rights

There are no terms of service on the site — tool.copymate.app/terms returns a 404 — so no published clause states whether a customer may reuse, resell or republish the articles Copymate produces. The only document available is the privacy policy, and it deals exclusively with personal data. It lists the purposes: fulfilling orders, administering the personal account, enabling the core functions of the application, answering questions, sending update notifications and invoicing. Third-party sharing is described as deliberately minimal — the least quantity of your personal information may be divulged to payment processors and accounting platform — without a single provider being named. Cookies and local storage measure page views, clicks and actions inside the service, and Google reCAPTCHA collects the IP address, browser information and interaction with the widget, which Google processes and does not reuse for other purposes unless the law requires it. Nothing in the document says whether customer content or data feeds model training.

Data retention & training

Hosting summary

The publisher declares nothing about where data is hosted: no country, no region and no provider is named on the site or in the privacy policy. That absence is itself the finding. The only technical clue, and it is not a statement by the publisher, is the domain's IP address, 178.211.137.104, which resolves to Warsaw, Poland, on LH.pl Sp. z o.o. (AS203417). It describes the hosting of the marketing site, not the storage of user accounts or generated content: the application itself runs on the separate tool.copymate.app subdomain, whose infrastructure is undocumented. What can be said with certainty is that the controller, Conti Sp. z o. o., is established in Zamość, Poland, inside the European Union, which places the processing under EU law wherever the servers happen to sit. No subprocessor list, no DPA and no transfer mechanism are published, so any cross-border flow — to payment processors, to the accounting platform, to OpenAI for generation — remains entirely undocumented.