Privacy Policy

This policy covers koppar.ai, the studio, the free tools, the documentation and the agent interfaces. It is part of the Terms of Service. Your designs are private to your account. We do not sell data, show ads or send marketing email.

1. Who is responsible

The operator of Koppar is the data controller. For any question or request about your data, write to hello@koppar.ai.

2. What we collect and why

• Your account: name, email address, profile picture and language, and the addresses you invite to a team. To sign you in, keep your designs and send invitations.
• Your designs: what you write, the files you upload, the files the service produces, and any keys you add. To run the service for you.
• Manufacturer orders: your board files and, where the manufacturer needs them, your shipping and contact details. To pass the order you confirmed to the manufacturer you chose.
• Security data: IP address and browser. To keep accounts safe and enforce usage limits.
• Audience measurement: pages viewed, clicks, device type, approximate location. Only if you accept analytics cookies.
• Messages and waitlist: what you write to us or give on the waitlist form. To answer you and tell you when access opens.

Most of this is needed to provide the service you asked for (GDPR art. 6(1)(b)). Security data relies on our legitimate interest in protecting the service (art. 6(1)(f)). Audience measurement and the waitlist rely on your consent (art. 6(1)(a)), which you can withdraw at any time.

The only email we send is what the service needs: sign-in links, notices about your designs and jobs, and team invitations. We make no automated decisions about you that have legal or similar effects.

3. Who else receives data

Only the providers that run the service for us: hosting, email, sign-in with Google, audience measurement (Google Analytics, with your consent), and AI model providers, which receive what you write and the parts of the design the model needs, never your name or email address.

Free allowance. Designs run on our free allowance may be processed by OpenAI with data sharing enabled on our account, which lets OpenAI use those requests to improve its models, under its own policies. If you add your own model key, your designs go to your own provider account instead. Koppar does not train models on your designs.

Manufacturers. When you confirm an order, your files go to the manufacturer you chose, which then holds them under its own privacy policy.

We may also disclose data when the law requires it, or to protect the service and its users from fraud or abuse. Some providers are outside the European Union, mainly in the United States. Those transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. A transfer to a manufacturer outside the EU happens only to place the order you asked for (art. 49(1)(b)).

4. Cookies

We use cookies to keep you signed in and to remember your language; these need no consent. Analytics cookies are set only if you accept them and last up to 13 months. You can withdraw that consent at any time from the cookie settings, and refusing them changes nothing else on the service. Your browser also keeps a few preferences locally, such as your currency, until you clear them.

5. How long we keep data

• Account and designs: until you delete them. A deleted design can be restored from the trash for 7 days, then it is erased. When you ask us to delete your account, we delete it and its designs within 30 days.
• Free tools: uploaded files and results are deleted after 24 hours.
• Security data and job records: up to 12 months.
• Analytics: up to 14 months.
• Messages and waitlist: as long as needed to answer you or until access opens, and at most 3 years.

6. Your rights

You can ask to see your data, correct it, delete it, receive a copy, restrict its use, or object to its use where we rely on legitimate interest. You can withdraw consent at any time, and give instructions on what happens to your data after your death. Write to hello@koppar.ai from your account’s address; we answer within one month. You can also complain to the data protection authority where you live.

7. Security

Data travels encrypted, the keys you add are stored encrypted, and each account sees only its own designs. Your designs are looked at only to run them, fix a problem, answer you, or investigate abuse. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

8. Children

Koppar is not meant for children under 16. If you think a child has created an account, tell us and we will delete it.

9. Changes

If we change this policy in a way that matters, we will email account holders before the change takes effect and post the new version here with its date.