Privacy Policy

1. Introduction

Copy and Funnel Accelerator LLC ("we," "us," or "our"), located at 1180 N Town Center Drive, Suite 100, Las Vegas, Nevada 89144, United States, operates StefanBrain, an AI-powered marketing assistant. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

2. Information We Collect

Account Information

• Email address (for authentication and communication)
• Account preferences and settings

Usage Data

• Chat messages and conversations with the AI assistant
• Uploaded files and attachments (images, documents, URLs)
• Generated content and AI outputs
• Feature usage patterns and interaction history

Connected Account Data

• Connector account identity and workspace metadata
• Encrypted OAuth access and refresh tokens for connected services
• Messages, calendar data, files, documents, spreadsheets, presentations, property metadata, and report results returned from connected services when you request them

Technical Data

• IP address and approximate location
• Browser type and version
• Device information and operating system
• Pages visited and features used
• Session duration and interaction timestamps

Cookies and Tracking

• Session cookies for authentication
• Analytics cookies (PostHog) for product improvement
• Functional cookies for user preferences

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To authenticate your identity and manage your account
• To process your requests and generate AI-powered responses
• To analyze usage patterns and improve the user experience
• To send service-related communications
• To detect and prevent fraud, abuse, or unauthorized access
• To comply with legal obligations

4. Google User Data and Connected Google Services

If you choose to connect a Google account to StefanBrain, we access and use Google user data only to provide the Google connector features you request inside the Service.

Google scopes we may request

• openid, https://www.googleapis.com/auth/userinfo.email, and https://www.googleapis.com/auth/userinfo.profile to identify your Google account and complete account linking
• https://www.googleapis.com/auth/gmail.readonly, https://www.googleapis.com/auth/gmail.labels, https://www.googleapis.com/auth/gmail.compose, and https://www.googleapis.com/auth/gmail.send for Gmail connector features you trigger
• https://www.googleapis.com/auth/drive, https://www.googleapis.com/auth/documents, https://www.googleapis.com/auth/spreadsheets, and https://www.googleapis.com/auth/presentations for Google Drive, Docs, Sheets, and Slides features you trigger
• https://www.googleapis.com/auth/calendar for Google Calendar listing, event lookup, and user-requested calendar event changes
• https://www.googleapis.com/auth/analytics.readonly for Google Analytics 4 property discovery, metadata lookups, compatibility checks, and read-only reporting

How we use Google user data

• To authenticate and maintain your Google connection
• To execute user-requested Gmail, Drive, Docs, Sheets, Slides, Calendar, and Google Analytics actions inside StefanBrain
• To return the requested emails, calendar events, files, metadata, and analytics results in your chat history and generated outputs
• To secure the Service, investigate abuse, and comply with applicable law

Storage and sharing of Google user data

• We store encrypted OAuth tokens and connector metadata needed to keep your connection active
• We may store Google-derived content or metadata when it becomes part of your chat history, generated outputs, connector state, or security and audit records needed to provide the feature you requested
• We do not sell Google user data
• We do not use Google user data for advertising or marketing personalization
• We do not use Google user data to train generalized artificial intelligence or machine learning models
• We only use and transfer Google user data as needed to provide the user-facing features you requested, keep the Service secure, comply with law, or with your consent

5. Third-Party Services

We share data with the following third-party service providers to operate the Service:

• Anthropic — AI model provider. Chat messages are sent to Anthropic's API for processing. Subject to Anthropic's usage policies.
• AssemblyAI — Audio/video transcription. Video URLs may be sent for transcript generation.
• Amazon Web Services (AWS) — Cloud infrastructure and file storage (S3).
• Google — Connected account provider for Gmail, Google Drive, Docs, Sheets, Slides, Calendar, and Google Analytics when you enable those connectors.
• PostHog — Product analytics for understanding usage patterns.
• Browserless — Headless browser service for web page rendering and screenshot capture.

We do not sell your personal information to third parties.

6. Data Retention

We retain your account information and chat history for as long as your account is active or as needed to provide the Service. You may request deletion of your data by contacting us. We may retain certain information as required by law or for legitimate business purposes.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit (TLS/SSL), secure database access controls, and authentication safeguards. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing activities
• Request a copy of your data in a portable format

To exercise these rights, contact us at support@copyaccelerator.com.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these jurisdictions.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or your personal data, contact us at: