GDPR & Data Rights
Last updated: June 2026
Copac AI is built to respect your data-protection rights. This page explains how we handle personal data and how you can exercise your rights under the GDPR and similar regulations.
Our commitments
- Read-only integrations — we never change your store or ad accounts
- Platform access tokens are never stored
- Data encrypted in transit and at rest
- We never sell customer data
Your rights
You have the right to access, correct, export, and delete your personal data, and to object to or restrict certain processing.
- Access & portability — export your organization's data on demand
- Erasure — request permanent deletion of your organization and all associated data
- Rectification — correct inaccurate account information
How to exercise your rights
You can export or permanently delete your data directly from your account settings. Account actions are recorded in an audit log for accountability.
Data processing & retention
We process your data only to provide the service. Aggregated reporting data is retained per your plan (90 days on Essentials, 365 days on Growth AI), and raw source data is retained for up to 12 months unless you request earlier deletion.