Workflow & Automation · runcopycat.comCopyCat
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
“If you provide suggestions, ideas, or feedback regarding the Services ("Feedback"), you grant CopyCat AI an unrestricted, perpetual, irrevocable, royalty-free license to use, modify, and incorporate such Feedback into the Services without obligation to you.”
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: subprocessors data sharing
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Restricts the sale of personal information and Customer Data, then enumerates permitted sharing categories — service providers under confidentiality obligations and professional advisors — thereby limiting disclosure to specific, bounded purposes with protective confidentiality requirements attached to subprocessors.
Obligates the provider to retain information only as long as necessary for service provision, specifies that automation execution logs are kept for the subscription duration with early deletion available on request, and requires deletion of account data within thirty days of termination unless law or contractual obligations require longer retention.
Reserves CopyCat AI's right to suspend or terminate accounts it reasonably believes are compromised or used in violation of the Terms, and imposes an obligation on the Customer to ensure organizational users comply with the Terms.
How to read this page: Overall risk rates what CopyCat's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 16 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 16 citationsLast captured 2026-07-20
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Grants CopyCat AI an unrestricted, perpetual, irrevocable, royalty-free license to use, modify, and incorporate user-submitted feedback into the Services, explicitly stating no obligation is owed to the user in return — user-unfavorable broad IP grant over feedback.
" If you provide suggestions, ideas, or feedback regarding the Services ("Feedback"), you grant CopyCat AI an unrestricted, perpetual, irrevocable, royalty-free license to use, modify, and incorporate such Feedback into the Services without ..."
Imposes an obligation on the Customer to create an account with accurate information and to maintain the confidentiality of account credentials and API keys.
" To use the Services, you must create an account and provide accurate, complete, and current information. You are responsible for: Maintaining the confidentiality of your account credentials and API keys"
Establishes the procedure for data portability and deletion upon account termination: the Customer may request export of Customer Data within thirty days of termination, after which CopyCat AI will delete Customer Data in accordance with its data retention policies unless retention is legally required.
" We implement industry-standard technical and organizational measures to protect Customer Data, including encryption in transit and at rest, access controls, audit logging, and regular security assessments. For customers processing Protecte..."
Restricts the sale of personal information and Customer Data, then enumerates permitted sharing categories — service providers under confidentiality obligations and professional advisors — thereby limiting disclosure to specific, bounded purposes with protective confidentiality requirements attached to subprocessors.
" We do not sell your personal information or Customer Data. We may share information with: Service providers who assist in operating our platform (hosting, analytics, communication tools), subject to confidentiality obligations Profession..."
Establishes the procedure governing data transfer during a business merger, acquisition, or asset sale, requiring that notice be provided to affected users, thereby creating a procedural safeguard for that disclosure scenario.
" Business transfers in connection with a merger, acquisition, or sale of assets, with notice to affected users"
Obligates the provider to enter into a Business Associate Agreement with customers who process Protected Health Information, establishing a compliance commitment and a contractual obligation triggered by that specific data category.
" For customers processing Protected Health Information (PHI), CopyCat AI is HIPAA compliant and will enter into a Business Associate Agreement (BAA) as required."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" We do not sell your personal information or Customer Data. We may share information with: Service providers who assist in operating our platform (hosting, analytics, communication tools), subject to confidentiality obligations Professional advisors (lawyers, accountants, auditors) as needed for business operations"
Restricts the sale of personal information and Customer Data, then enumerates permitted sharing categories — service providers under confidentiality obligations and professional advisors — thereby limiting disclosure to specific, bounded purposes with protective confidentiality requirements attached to subprocessors.
AI-generated interpretation, not legal advice.
" If you provide suggestions, ideas, or feedback regarding the Services ("Feedback"), you grant CopyCat AI an unrestricted, perpetual, irrevocable, royalty-free license to use, modify, and incorporate such Feedback into the Services without obligation to you."
Grants CopyCat AI an unrestricted, perpetual, irrevocable, royalty-free license to use, modify, and incorporate user-submitted feedback into the Services, explicitly stating no obligation is owed to the user in return — user-unfavorable broad IP grant over feedback.
AI-generated interpretation, not legal advice.
" Ensuring that all users within your organization comply with these Terms We reserve the right to suspend or terminate accounts that we reasonably believe have been compromised or are being used in violation of these Terms."
Reserves CopyCat AI's right to suspend or terminate accounts it reasonably believes are compromised or used in violation of the Terms, and imposes an obligation on the Customer to ensure organizational users comply with the Terms.
AI-generated interpretation, not legal advice.
" We retain your information for as long as necessary to provide the Services and fulfill the purposes described in this policy. Automation execution logs are retained for the duration of your subscription unless you request earlier deletion. Upon termination of your account, we will delete your data within thirty (30) days, unless retention is required by law or our contractual obligations."
Obligates the provider to retain information only as long as necessary for service provision, specifies that automation execution logs are kept for the subscription duration with early deletion available on request, and requires deletion of account data within thirty days of termination unless law or contractual obligations require longer retention.
AI-generated interpretation, not legal advice.
" When generating proposals, comparing carrier quotes, or running risk analysis on your behalf, we process the carrier PDFs, policy documents, and supplemental files you upload ("Customer Data"). This data is processed solely to perform the requested service (extraction, analysis, proposal rendering) and is handled in accordance with our agreements with you. Customer Data is not used to train foundation models."
Defines Customer Data as the carrier PDFs, policy documents, and supplemental files uploaded by users; restricts processing of that data to performance of the requested service (extraction, analysis, proposal rendering); and explicitly prohibits use of Customer Data to train foundation models — user-favorable, protective direction.
AI-generated interpretation, not legal advice.
" You retain all rights, title, and interest in and to any data, content, or information that you provide to or process through the Services ("Customer Data"). CopyCat AI does not claim ownership of your Customer Data."
Affirms that the Customer retains all rights, title, and interest in Customer Data provided to or processed through the Services, and explicitly states that CopyCat AI makes no ownership claim over Customer Data — user-favorable.
AI-generated interpretation, not legal advice.
" You agree to use the Services only for lawful purposes and in accordance with these Terms. You shall not: Use the Services to violate any applicable law, regulation, or third-party rights Attempt to gain unauthorized access to any systems, networks, or data connected to the Services"
Restricts the Customer to lawful use of the Services and prohibits violating laws, regulations, or third-party rights, and prohibits unauthorized access to connected systems, networks, or data.
AI-generated interpretation, not legal advice.
" Use the Services to transmit malware, viruses, or other malicious code Resell, sublicense, or redistribute the Services without our prior written consent Use the Services to scrape, collect, or harvest data in violation of applicable laws or third-party terms of service Interfere with or disrupt the integrity or performance of the Services Use the Services to process data in a manner that violates applicable data protection laws"
Prohibits transmitting malware, unauthorized resale or sublicensing, unlawful data scraping or harvesting, interference with Service integrity, and processing data in violation of applicable data protection laws.
AI-generated interpretation, not legal advice.
" CopyCat AI maintains SOC 2 Type II certification, demonstrating our commitment to security, availability, and confidentiality controls. Audit reports are available upon request under NDA."
States that the provider maintains SOC 2 Type II certification covering security, availability, and confidentiality controls, and obligates availability of audit reports upon request under a non-disclosure agreement, establishing an audit access right with a confidentiality condition.
AI-generated interpretation, not legal advice.
" The Services, including all software, algorithms, models, interfaces, documentation, and related intellectual property, are and remain the exclusive property of CopyCat AI. These Terms do not grant you any rights to our intellectual property except the limited right to use the Services as described herein."
Grants the Customer a license to use Custom Automations developed specifically for their workflows in connection with the Services during the subscription term, while reserving ownership of the underlying technology, frameworks, and methodologies to CopyCat AI.
AI-generated interpretation, not legal advice.
" CopyCat Technologies, Inc. ("CopyCat AI," "we," "our," or "us") provides an AI workspace for commercial insurance brokers: proposal generation, quote comparison, and risk analysis built on top of carrier quote PDFs and supplemental documents. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the platform and related services (collectively, the "Services"). By accessing or using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the Services."
Defines the company and the scope of the Services, identifies the purpose of the Privacy Policy as explaining data collection, use, disclosure, and safeguarding, and establishes user assent to the policy as a condition of accessing the Services — thereby incorporating the policy's obligations into the terms of use.
AI-generated interpretation, not legal advice.
" Proposal templates, brand assets (logo, color palette, fonts), and template configuration Carrier quote PDFs, supplemental documents, loss runs, and statements of value you upload"
Defines proposal templates, brand assets, carrier quote PDFs, supplemental documents, loss runs, and statements of value as categories of data that users upload to the platform.
AI-generated interpretation, not legal advice.
" Usage data, including proposal generation logs, extraction telemetry, and performance metrics"
Defines usage data — including proposal generation logs, extraction telemetry, and performance metrics — as categories of automatically collected information.
AI-generated interpretation, not legal advice.
" To communicate with you about your account, support requests, and service updates"
Identifies communication with users about account matters, support, and service updates as a stated use of collected information, establishing an operational obligation.
AI-generated interpretation, not legal advice.
" We implement industry-standard technical and organizational measures to protect your information, including:"
Establishes a general obligation to implement industry-standard technical and organizational measures to protect user information, framing the specific measures enumerated below.
AI-generated interpretation, not legal advice.
" Depending on your location, you may have the right to:"
Establishes that users may have data-subject rights depending on their location, framing the conditional scope under which the enumerated rights in subsequent segments apply.
AI-generated interpretation, not legal advice.
" To exercise any of these rights, please contact us at the address below. We will respond to your request within thirty (30) days."
Establishes the procedure for exercising data-subject rights by directing users to contact the provider, and obligates the provider to respond to such requests within thirty days.
AI-generated interpretation, not legal advice.
" Where applicable, we process data in accordance with relevant data protection regulations, including CCPA and GDPR. We honor Do Not Track signals and similar mechanisms where required by law."
Obligates the provider to process data in accordance with applicable data protection regulations and to honor Do Not Track signals and similar mechanisms where legally required, establishing a compliance-driven processing obligation.
AI-generated interpretation, not legal advice.
Common questions about CopyCat's policies
- Does CopyCat train its AI models on your data?
- No training on your content by default — based on 1 verified finding from CopyCat's published policy. Informational only, not legal advice.
- Can you use CopyCat's output commercially?
- Commercial use allowed — based on 1 verified finding from CopyCat's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from CopyCat's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in CopyCat's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in CopyCat's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat CopyCat requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in CopyCat's published policies yet.
What the policies actually cover
0 topicsNone of CopyCat's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, § 6 (Data Retention) addresses how long content is retained, and the Privacy Policy, Privacy Policy › “Customer Data” addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The policy document, AI Addendum › “Feedback” describes rights the platform takes in user content, and the Privacy Policy, § 5 (Data Sharing and Disclosure) describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain your information for as long as necessary to provide the Services and fulfill the purposes described in this policy. Automation execution logs are retained for the duration of your subscription unless you request earlier deletion. Upon termination of your account, we will delete your data within thirty (30) days, unless retention is required by law or our contractual obligations.”Open source citation
The clause includes sublicensable, transferable, or assignable rights.
“Use the Services to transmit malware, viruses, or other malicious code Resell, sublicense, or redistribute the Services without our prior written consent Use the Services to scrape, collect, or harvest data in violation of applicable laws or third-party terms of service Interfere with or disrupt the integrity or performance of the Services Use the Services to process data in a manner that violates applicable data ...”Open source citation
The clause grants a broad content license.
“You grant CopyCat AI a limited, non-exclusive, worldwide license to access, use, and process your Customer Data solely to the extent necessary to provide, maintain, and improve the Services, and as otherwise described in our Privacy Policy .”Open source citation
The clause grants a broad content license.
“If you provide suggestions, ideas, or feedback regarding the Services ("Feedback"), you grant CopyCat AI an unrestricted, perpetual, irrevocable, royalty-free license to use, modify, and incorporate such Feedback into the Services without obligation to you.”Open source citation
The clause appears to reserve or claim ownership rights for the platform.
“Ensuring that all users within your organization comply with these Terms We reserve the right to suspend or terminate accounts that we reasonably believe have been compromised or are being used in violation of these Terms.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | conditional | MEDIUM | 1 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 2 |
| All applicable tiers | prompt ownership | improves | LOW | 1 |
| All applicable tiers | training use | conditional | MEDIUM | 3 |
| Free | prompt ownership | conditional | MEDIUM | 1 |
| Team / Business | subprocessors data sharing | worsens | HIGH | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: indefinite or necessity based on data retention
“We retain your information for as long as necessary to provide the Services and fulfill the purposes described in this policy. Automation execution logs are retained for the duration of your subscription unless you request earlier deletion. Upon termination of your account, we will delete your data within thirty (30) days, unless retention is required by law or our contractual obligations.”Open timeline citation
Latest stance: sale or sell on subprocessors data sharing
“We do not sell your personal information or Customer Data. We may share information with: Service providers who assist in operating our platform (hosting, analytics, communication tools), subject to confidentiality obligations Professional advisors (lawyers, accountants, auditors) as needed for business operations”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We do not sell your personal information or Customer Data. We may share information with: Service providers who assist in operating our platform (hosting, analytics, communication tools), subject to confidentiality obligations Professional advisors (lawyers, accountants, auditors) as needed for business operations”Open timeline citation
Latest stance: no training claim on training use
“When generating proposals, comparing carrier quotes, or running risk analysis on your behalf, we process the carrier PDFs, policy documents, and supplemental files you upload ("Customer Data"). This data is processed solely to perform the requested service (extraction, analysis, proposal rendering) and is handled in accordance with our agreements with you. Customer Data is not used to train foundation models.”Open timeline citation
Latest stance: user retains rights on prompt ownership
“You retain all rights, title, and interest in and to any data, content, or information that you provide to or process through the Services ("Customer Data"). CopyCat AI does not claim ownership of your Customer Data.”Open timeline citation
Latest stance: sublicensable or transferable on moderation enforcement
“Use the Services to transmit malware, viruses, or other malicious code Resell, sublicense, or redistribute the Services without our prior written consent Use the Services to scrape, collect, or harvest data in violation of applicable laws or third-party terms of service Interfere with or disrupt the integrity or performance of the Services Use the Services to process data in a manner that violates applicable data protection laws”Open timeline citation
Latest stance: no training claim on training use
“CopyCat AI does not use your Customer Data, including policy documents, carrier quotes, client information, or any data you process through the Services, to train, fine-tune, or improve any generative AI or large language model. This is a contractual guarantee. Customer Data is processed solely to deliver the Services to you and is never aggregated into model training datasets, sold to third parties, or used for any purpose other than fulfilling your use of the Services.”Open timeline citation
Latest stance: broad license on training use
“You grant CopyCat AI a limited, non-exclusive, worldwide license to access, use, and process your Customer Data solely to the extent necessary to provide, maintain, and improve the Services, and as otherwise described in our Privacy Policy .”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-20· verified 2026-07-20verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
28 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of CopyCat's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified CopyCat's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from CopyCat's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.