Privacy Policy
Last updated: March 5, 2026
Welcome to CopyZai (copyzai.com). We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights for both the CopyZai web platform and the Chrome browser extension "CopyZai - AI Proposal Writer".
By using CopyZai, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.
1. Scope of This Policy
This policy applies to:
- The CopyZai web application at copyzai.com
- The Chrome browser extension "CopyZai - AI Proposal Writer", which automatically generates AI-written bid proposals on Freelancer.com and Upwork
- The CopyZai API at api.copyzai.com
2. What the Chrome Extension Does
The CopyZai - AI Proposal Writer extension helps freelancers save time by automatically generating tailored bid proposals. When you open a project or job listing page on Freelancer.com or Upwork, the extension reads the project description, sends it to the CopyZai API (api.copyzai.com), and fills the bid text field with an AI-generated proposal.
The extension operates only on Freelancer.com, its regional domain variants, and Upwork.com. It does not run on or interact with any other websites.
3. Data We Collect
We collect only the minimum data necessary to provide our service.
3.1 Authentication Information
When you log in to CopyZai, a JWT (JSON Web Token) is issued and stored locally on your device using chrome.storage.local. This token is sent to api.copyzai.com with each API request to verify your identity. It is never shared with any third party and never leaves your device except to communicate with the CopyZai API.
To keep you logged in without manual re-entry, the extension may read your login token from the localStorage of an open copyzai.com tab. Only copyzai.com tabs are ever accessed for this purpose no other websites or tabs are read.
3.2 Website Content (Project Descriptions)
When you open a project page on Freelancer.com or Upwork, the extension reads the project description text from that page and sends it to api.copyzai.com solely to generate a proposal. No other content from those pages is read, stored, or transmitted.
Project descriptions are used in real-time to generate your proposal and are not stored on our servers beyond the duration of that API request.
3.3 User Preferences
The extension stores the following preferences locally on your device using chrome.storage.local:
- Your selected AI model preference
- Optional portfolio text you provide to personalise proposals
These preferences remain on your device and are not transmitted to our servers unless they are needed as part of a proposal generation request.
4. Data We Do NOT Collect
We want to be explicit about what we do not collect. The CopyZai extension does not collect any of the following:
- Personally identifiable information (such as your full name, address, or date of birth)
- Health or medical information
- Financial or payment information
- Personal communications (emails, chats, messages)
- Precise or approximate location data
- Web browsing history
- User activity data (clicks, keystrokes, mouse movements, or scroll behaviour)
- Content from any website other than the active Freelancer.com or Upwork job page
5. How We Use Your Information
The data we collect is used exclusively for the following purposes:
- Proposal generation: Project description text is sent to our API to produce an AI-written bid proposal tailored to that specific project.
- Authentication: Your JWT token is used to verify your identity and authorise API requests on your behalf.
- Service improvement: Aggregated, anonymised usage metrics may be used to improve the quality and accuracy of generated proposals.
We certify that user data is never used for purposes unrelated to proposal generation, and is never used to determine creditworthiness or for lending purposes.
6. How Your Data Is Stored and Secured
Data stored locally on your device (JWT token, AI model preference, portfolio text) is held in Chrome's chrome.storage.local API, which is isolated to the extension and inaccessible to other extensions or websites.
All communication between the extension and our API is encrypted in transit using HTTPS/TLS. We do not persist project descriptions or proposal content on our servers after a request is fulfilled.
We implement appropriate technical and organisational measures to protect the data we process against unauthorised access, loss, or disclosure.
7. How We Share Your Data
We do not sell, rent, or share your data with any third party. Your data is transmitted only between your device and the CopyZai API (api.copyzai.com), which is operated exclusively by CopyZai.
We may disclose information if required to do so by law or in response to valid legal process, but we will notify you where permitted before doing so.
8. Chrome Extension Permissions Explained
The extension requests the following browser permissions, each used for a specific, limited purpose:
storage
Saves your JWT token, selected AI model preference, and optional portfolio text locally on your device. Nothing stored here is shared externally.
tabs
Used to detect whether you have a copyzai.com tab open so your login token can be automatically synced. Only copyzai.com tab URLs are queried no other tabs are inspected.
scripting
Reads your login token from the localStorage of an open copyzai.com tab for automatic login synchronisation. No scripts are injected into any other websites for data-collection purposes.
contextMenus
Reserved for a planned future feature. This permission is not currently active and no context menu actions collect any data.
Host Permissions
The extension is granted access to the following hosts:
- api.copyzai.com to send proposal generation requests to the CopyZai API
- copyzai.com / www.copyzai.com to sync your login token
- freelancer.com and 30+ regional domains to inject the proposal UI into project pages
- upwork.com to inject the proposal UI into job application pages
9. Third-Party Services
CopyZai integrates with Freelancer.com and Upwork by injecting UI elements into their pages. We only read the project description text from those pages we do not interact with, access, or transmit any data to Freelancer or Upwork on your behalf.
Your use of Freelancer.com and Upwork is subject to their own privacy policies and terms of service, which are independent of CopyZai.
10. Your Rights
You have the following rights regarding your data:
- Access: You may request a copy of any personal data we hold about you.
- Correction: You may request that inaccurate data be corrected.
- Deletion: You may request deletion of your account and associated data at any time by contacting us.
- Portability: You may request your data in a structured, machine-readable format.
- Objection: You may object to certain types of processing, including profiling.
- Local data removal: You can remove all locally stored extension data at any time by uninstalling the extension or clearing Chrome extension storage via your browser settings.
To exercise any of these rights, please contact us using the details in Section 12.
11. Children's Privacy
CopyZai is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide a more prominent notice (such as an in-app notification or an email if you have an account with us).
Continued use of CopyZai after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:
Fazeel Khalid
Email: [email protected]
LinkedIn: linkedin.com/in/fazeel-khalid
GitHub: github.com/fazeelkhalid
Website: copyzai.com