Privacy Policy

Effective [date]. Short version: your files never leave your device unless you choose our filing service, we don't sell anything about you, and we collect only what you choose to send us.

What stays on your device

Your files never leave your device, unless you order the copyright filing service and upload your deposit file: they are fingerprinted in your own browser, and your drafts and catalog list are stored there too. Clearing your browser's site data erases your drafts, so save your record and agreements.

What leaves your device, and where it goes

• Fingerprints you stamp go to CopyRise's server, which sends them to public OpenTimestamps servers and into the Bitcoin blockchain. In Bitcoin they are public and permanent. They reveal nothing about your file's content.
• The CopyRise proof database: when you stamp a work, we keep your email address, the details you entered (title, names, place, dates, license, and whether AI was used), file names, sizes, fingerprints, and the proofs, so we can email you the proof now and the final proof later, and give you back a lost proof. It's private: only you (signed in with that email) and Rebel Shed can see your records. If someone drops in the exact original file on Check a proof, they get that file's proof and stamp date, never your name, title, or email. We email your proof files and record, through Resend, only to an address that's been confirmed: you're signed in, or you tapped the confirmation link we sent. Before that, the only email we send is a short confirmation request.
• Checking a proof asks timestamp servers and public block explorers (mempool.space, blockstream.info) for blockchain data. They can see your device's internet address.
• Attorney review requests send what you type (name, email, country, and message) to Rebel Shed by email, through FormSubmit.
• Forms on artists' license pages send what the buyer types to that artist, through FormSubmit. The artist, not Rebel Shed, receives it.
• CopyRise Pro tools: when you build a paid license agreement, a license page, or a catalog site, the details of your work (titles, names, license terms, fingerprints, and any catalog pictures and logo you added, but never your files) go to CopyRise's server, which builds the result and sends it straight back. We don't store them. Your Pro key goes with them so the server can check your purchase.
• The copyright filing service: if you order it, your answers (names, citizenship, year of birth if you give it, contact details, mailing address, and details of the work), your typed signature, the time you signed, and your internet address are stored on CopyRise's server with your order, because the Copyright Office application needs them and we must be able to show you authorized the filing. Your deposit file goes only through the upload link we give you, a Dropbox file request, and is stored in Rebel Shed's Dropbox. We send this information to the U.S. Copyright Office to file your application. The Office makes registration records public, including names, the title, and the claimant's address if you list it there.
• Takedown notices: when you write takedown notices, your work's details, the links to the copies you found, and your name, address, phone, email, and typed signature go to CopyRise's server, which writes the notices and sends them straight back. We don't store them. The evidence packet is made in your browser and never leaves your device unless you send it.
• Your account: if you sign in, your email address and your saved work (titles, names, answers, license choices, file names, fingerprints, timestamp proofs, and your catalog list and pictures, but never your original files) are stored on CopyRise's server, run by Netlify. We use your email to send sign-in links, order updates, and the deadline reminders you choose. Emails are sent through Resend.
• The AI helper: when you use it, your work's title, names, AI authorship record (steps, tool names, plans, file names), and any notes you add are sent to Anthropic, which runs Claude, to draft the text, and the result comes back to you. Your files are never sent. Anthropic's commercial terms say it does not train its models on this data. We don't store the drafts. Anthropic may keep this data for a limited time under its own policies.
• The CopyRise guide: what you type into the guide chat, plus the answers already on your page (title, kind of work, names, dates, place, license choices, and how many files you've fingerprinted), is sent to Anthropic to write the reply. Your files are never sent. We don't store the chat; this browser keeps it until you close the tab.
• Copy watch: the image links and site names you add are stored with your account and sent to Google Cloud Vision once a week, or when you tap Scan now, to find pages showing the same image. We store the matching page links it returns so we can tell you what's new. Google handles this data under its own terms.
• Buyer assistant: the facts and price list you give it are stored with your account. When someone uses the assistant on your license page, their messages go to Anthropic to write the answers. If they send a request, we store their name, email, organization, what they asked for, and their last few messages with your account, email it to you, and email them once to confirm their address. When you send a reply, we email it to them from CopyRise with your email address as the reply address. We use a scrambled version of their internet address to limit misuse, and keep it no longer than a day.
• Your account activity: we keep a short record of what you do with your account (when you first signed in and last used CopyRise, and what you bought and when, with the amount) so we can support you, answer billing questions, and see how CopyRise is used. Rebel Shed gets an email when someone creates an account, buys something, or orders a registration, with the email address and what was bought.
• Buying a stamp, a plan, or Pro: checkout is run by Stripe, which receives your payment details and email. Rebel Shed sees your purchase, the plan, and the email Stripe gives us, never your card number.
• Payments for artists' own licenses are handled by Stripe, Shopify, PayPal, or whichever service the seller chooses. Rebel Shed never sees card numbers.
• Hosting and fonts: this site is hosted by Netlify, and text fonts load from Google Fonts. Like any website, they receive your internet address and basic browser information.
• The Internet Archive keeps a public copy of any page you choose to save there.

How we use what you send us

Only to answer you and provide what you asked for. We don't sell, rent, or share your information for advertising, and we don't use tracking or analytics cookies.

How long we keep it

We keep your saved work until you delete it or ask us to, or until your account has been unused for two years. We keep filing orders and deposit files as long as needed to complete your registration and answer questions from the Copyright Office, and signed authorizations as long as tax and legal record-keeping rules require. We keep proof database records as long as CopyRise runs, because proofs are meant to last; ask us and we'll delete yours, though Bitcoin itself can't be changed. We keep copy watch results and buyer assistant requests with your account until you delete them or your account; daily usage counters expire on their own. We keep emails from you as long as needed to help you and to meet legal and tax record-keeping rules, then delete them.

Your choices and rights

Do it yourself: sign in and open Your plan. Download my data gives you a file with everything CopyRise keeps about you. Delete my account and data erases your account, saved work, copy watch and buyer assistant settings, proofs in the CopyRise database, and your activity record. We keep copyright filing orders as long as the Copyright Office may need them, records of takedown notices and blocks so our copyright policy still works, and a one-way code (not your email) that marks your free work as used.

You can also ask what we have about you, ask us to correct or delete it, or object to how we use it. Depending on where you live (for example, the European Union, the United Kingdom, or California), the law may give you more rights. Write to trisharutten@gmail.com and we'll respond within 30 days. We can't remove fingerprints from the Bitcoin blockchain or copies saved at the Internet Archive.

Children

CopyRise isn't meant for children under 13, and we don't knowingly collect information from them. Anyone under 18 should use it with a parent or guardian.

International use

Rebel Shed is based in the United States. Information you send us is handled in the United States.

Contact

Rebel Shed LLC, 414 N Broadway, Pelican Rapids, MN 56572 · trisharutten@gmail.com