Privacy

Last updated October 30, 2026.

Copyboy is an AI employee you invite into your own software. This policy covers the marketing site at copyboy.ai and the console at app.copyboy.ai. It says what we collect, what we do with it, and who else sees it.

Copyboy is operated by Pneumatic Software Inc., 8350 N Central Expy, Suite 1900, Dallas, Texas 75206, United States. Questions and requests go to [email protected].

The account

When you create a company account we store the name, email address and password of each person on it, the company they belong to, and their role. The password is stored as a hash. We also store whether the email address has been confirmed, and the messages we send about the account: verification, invites to the team, and notices that a Copyboy needs a person.

The Copyboy and the work

For each Copyboy we store the name you give him and the email address we issue him. To do the work you assign, he handles the content of those tasks: messages, comments, form fields and files in the products you invited him to. We keep an activity record of what he attempted, whether it worked, how long it took and what it cost, so the report can show it.

Passwords, API keys and signed-in browser state for those products are stored encrypted. A key is only ever shown masked. We do not write them in plaintext.

A connected Google account

An owner or administrator can connect a Google account to one Copyboy. Google then tells us the verified email address of the account that person chose. We store that address on the Copyboy. We do not receive the Google password, and we do not store it.

That address is how the Copyboy signs in to a product that offers Google and has no email sign-up of its own. He uses it only for that sign-in. The token Google issues merely to confirm the address is discarded once the address is read.

The same consent can also ask permission to read mail in that Google account and to send mail as that address. When those permissions are granted, we use them only so the Copyboy can read that mailbox and reply from it while doing the tasks the company assigned. We do not read or send mail in that account for any other reason.

Google user data from this connection is used only to provide that feature. We do not sell it. We do not use it for advertising. We do not use it to train a general-purpose model. We do not use it, or any Google API, to create or distribute intimate imagery of a person without that person's consent. We do not transfer it to others except to the providers below, and only as far as they need it to run this feature, to keep the service secure, or to meet a legal duty. People who operate the service do not read the contents of a connected mailbox unless that is required to fix a problem you asked us to look at, to investigate abuse, or to comply with the law.

Disconnecting the Google account, or deleting the Copyboy, removes the stored address and any token that could read or send that mail.

The model key

You paste in a model key so your Copyboys can call a model. We store that key encrypted and show it masked. The text of a task and the tools he calls are sent to the model provider you chose. That provider's terms apply to that processing.

Payment

The fee is $30 per Copyboy per month. Our payment provider collects it and holds the card number. We do not store the full card number.

This website

copyboy.ai is a static site. It does not run analytics and it does not set its own cookies. Loading it asks Google for the Archivo font, and the request passes through Cloudflare and Netlify, which see the IP address and the usual request logs. The console, which does have accounts, records the technical data needed to keep a session and to investigate abuse: IP address, browser, and server logs.

Why we use it

We use this data to run the account, to let a Copyboy do the tasks you assign, to sign him in with a Google account you connected, to bill the subscription, to show the report, to answer support, and to keep the service secure. We do not sell personal data, and we do not use the content of your tasks, or data from a connected Google account, to train a model of our own.

Who else handles it

• Our payment provider collects the monthly fee.
• The model provider you choose processes the prompts and tool calls.
• Mailgun sends the account and Copyboy email.
• Fly.io hosts the application and the database.
• Skyvern runs the browser session when a Copyboy signs up or signs back in.
• Netlify and Cloudflare serve this website.
• Google confirms the address of a connected account, and, when you grant it, holds the mailbox that account reads and sends from. Google also serves the font on this website.

The products you invite a Copyboy into are yours. He shows up there as a member you added, and those products process the work under their own terms.

A current list of these providers is available from the address above.

How long we keep it

We keep the account, the Copyboys and the activity record while the account is open. Encrypted credentials, including a token that can read or send a connected Google mailbox, are removed when that connection is removed or the Copyboy is deleted. The verified Google address is removed at the same time. Billing records are kept for as long as tax and accounting rules require. Server logs are kept for security and then deleted.

You can ask us to delete the company account. We will delete it unless we have to keep a specific record for a legal reason, in which case we say what and why.

Security

Secrets are encrypted. Access to a company's data is limited to the people on that account and to the staff who need it to operate the service. No method of storage is perfect. If we learn of a breach that affects you, we will tell you.

Your requests

You can ask to see the personal data we hold about you, to correct it, to delete it, or to receive a copy. Email [email protected]. If you are in the EEA, the UK or Switzerland, you can also complain to your local data protection authority. Our processing of account and billing data is necessary to perform the contract. Processing of task content is necessary to do the work you asked for.

We transfer data to the United States, where we are based and where the service is hosted.

Children

Copyboy is a business product. Do not register if you are under 18.

Changes

When this policy changes, we update the date at the top. If a change is material we will say so by email to the account owner.