What we do with your data

Copy Dock ("we", "us") is a tool for writing and checking UX and marketing copy. It's run by Francis Nwani in Nigeria, who is responsible for your personal data under Nigeria's Data Protection Act 2023. You can reach us about anything in this policy at cesco.fn@gmail.com.

Your account. Your email address, a password (stored only as a secure hash by our sign-in provider) or, if you use Google sign-in, your name and email from Google. Your role in your workspace, and when you created your account and last signed in.

What you and your team put into Copy Dock. Your workspace's name, voice rules, glossary, product facts, audiences and approved examples; the briefs you write; the copy you generate, edit, save and review; strings, documents, comments and mentions; and a history of changes, with who made them.

From the Figma plugin. When you press Write, the selected layer's text, its layer, component and frame names, the component's settings (such as "State: Error"), and up to 12 lines of other text on the same screen, including the heading above it and the screen's buttons. The picture of the screen shown in the plugin is made inside Figma and never sent to us. When you check a design, the plugin sends only the IDs of Copy Dock strings that layers are linked to.

Usage and technical data. How many generations each person makes and what they cost, so admins can set limits; whether you've used the Figma plugin; and the request logs our hosting providers keep, which include IP addresses and browser details.

Website visits. When you visit copydock.design's public pages (the homepage, sign-in, privacy and terms), we count the visit ourselves: the page, the site that sent you, campaign tags in the link, your country and timezone, your device type and browser, and which buttons and links you press. We don't use cookies for this or store your IP address. A visitor is a code made from your IP address and browser with a key that changes every day, so we can count people without recognising you from one day to the next. Pages inside the app aren't counted this way.

We don't collect payment details, we don't use advertising trackers or third-party analytics, and we don't buy data about you from anyone.

• To run Copy Dock for you: sign you in, store your work and show it to your team.
• To write and check copy: your brief and your workspace's rules go to an AI model.
• To keep it working and secure: spend limits, fixing problems, stopping abuse.
• To contact you about your account, such as sign-in emails and replies to you.

We do this because it's needed to provide the service you signed up for, and, for security and limits, because we have a legitimate interest in keeping Copy Dock safe and affordable. We don't sell your data, we don't use it for advertising, and we don't use your content to train AI models.

To write copy, Copy Dock sends the brief, the context from your design (when it comes from the plugin) and the relevant parts of your workspace's foundation (rules, glossary terms, facts and examples) to the AI model your workspace uses. Today that is Groq, or Anthropic (Claude) if your workspace admin chooses one of its models. They process it to return the copy, under their own terms and privacy policies.

Please don't put passwords, client secrets or other people's personal data into briefs. Copy Dock reminds you of this next to the brief.

Only the services that run Copy Dock for us, each for its own part of the job and bound by their own data protection terms:

• Supabase: our database and sign-in, including account emails.
• Render: hosts the Copy Dock website and its servers.
• Groq and Anthropic: the AI models, as described above.
• Google: sign-in with Google, if you choose it, and the fonts the site loads (which shares your IP address with Google).
• Figma: the plugin runs inside Figma, under Figma's own terms.

Inside your workspace, your teammates see the work you share there, and admins can see usage and review history for everyone in it. We'll disclose data to authorities only when the law requires it, and we'll tell you if we're allowed to.

Our providers store and process data on servers that may be outside Nigeria, including in the United States and Europe. When data leaves Nigeria we rely on our providers' contractual safeguards, as the Data Protection Act 2023 allows.

• We keep your account and your workspace's data for as long as your account is active.
• When you delete your account, it's removed from our live systems straight away. Copies in backups are overwritten within 30 days.
• If you were the only person in your workspace, the whole workspace is deleted with your account.
• If you leave a shared workspace by deleting your account, your profile, sign-in, generation history, notifications and drafts sent to Figma are deleted. Strings, documents, comments and foundation changes you made stay with the workspace, because they're the team's work; they're no longer linked to your name.
• Figma sign-in requests expire after a few minutes and are then deleted.
• Website visit counts are kept for 13 months, then deleted.
• Our hosting providers' request logs are kept for their standard periods, then deleted.

Under Nigeria's Data Protection Act 2023 (and the GDPR, if you're in the European Union or UK), you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct it if it's wrong;
• delete it;
• stop or limit how we use it, or object to a use;
• give it to you in a format you can take elsewhere.

You can delete your account yourself at any time from Your account. For anything else, email cesco.fn@gmail.com. We'll reply within 30 days. If you're unhappy with how we've handled your data, you can complain to the Nigeria Data Protection Commission (NDPC), or your local data protection authority.

If your workspace is run by your employer, they control the work in it. Some requests about that work may need to go through your workspace admin.

Data is encrypted in transit, access to workspace data is limited to its members by database rules, passwords are stored only as hashes, and the Figma plugin signs in with a one-time code rather than your password. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.

Copy Dock doesn't use advertising or analytics cookies; website visits are counted without them. Your browser stores your sign-in session and a few preferences, such as light or dark mode, so the site works. The Figma plugin keeps its own sign-in in Figma's storage for plugins.

Copy Dock is a work tool and isn't meant for anyone under 18. We don't knowingly collect data from children; if you think we have, email us and we'll delete it.

When we change this policy, we'll update the date at the top. If a change affects how we use your data in a meaningful way, we'll tell you in Copy Dock or by email before it applies.

Francis Nwani, Copy Dock, Nigeria. Email cesco.fn@gmail.com.