← Back to home

Kopypasta — Privacy Policy

Effective date: March 12, 2026

1. General

This Privacy Policy (hereinafter — Policy) describes how the Kopypasta service (hereinafter — Service), accessible at https://app.kopypasta.ru, collects, stores, processes, and protects personal data of its users, in compliance with Russian Federal Law No. 152-FZ "On Personal Data."

Kopypasta is operated by Individual Entrepreneur Yusupov Radik Anasovich (OGRNIP 317169000076522).

2. Data We Collect

Kopypasta collects the following personal data:

  • Name and email address during registration
  • Access tokens for connected social networks (encrypted with AES-256-GCM)
  • Uploaded video files (stored temporarily for publication purposes)
  • Service usage logs

3. Platform-Specific Data Handling

Kopypasta integrates with the following third-party platforms. Below is a description of the data we collect and how we use it for each platform.

3.1. TikTok

When you connect your TikTok account to Kopypasta, we request the following permissions: user.info.basic, video.upload, and video.publish. Kopypasta stores your TikTok open_id and OAuth access/refresh tokens, encrypted using AES-256-GCM. We use this data solely to publish videos to your TikTok account on your behalf. We do not share your TikTok data with any third parties.

3.2. YouTube

When you connect your YouTube channel to Kopypasta, we request the following Google OAuth scopes: youtube.upload, youtube.readonly, and userinfo.profile. Kopypasta stores your Google OAuth access and refresh tokens, encrypted using AES-256-GCM. We use this data to upload videos and set thumbnails on your YouTube channel. We do not access any other YouTube data beyond what is necessary for video publishing.

You can revoke Kopypasta's access to your YouTube account at any time by either disconnecting your YouTube channel in the Kopypasta dashboard (Settings → Channels), which will permanently delete the stored tokens, or by revoking access directly through your Google Account → Security → Third-party apps. Kopypasta's use of YouTube API Services is subject to the Google Privacy Policy.

3.3. Instagram (via Meta)

When you connect your Instagram account to Kopypasta, we request the following Meta API permissions: instagram_basic, instagram_content_publish, pages_show_list, and pages_read_engagement. Kopypasta stores your Meta OAuth access token, encrypted using AES-256-GCM. We use this data solely to publish Reels to your Instagram account. We do not read your Instagram messages, comments, or follower data.

3.4. VK Clips

To publish VK Clips, Kopypasta uses community (group) access tokens. You provide the token manually by selecting your VK community in the Kopypasta dashboard. Kopypasta stores the community access token, encrypted using AES-256-GCM. We use this data solely to upload video clips to your VK community. We do not access personal VK profiles or messages.

3.5. Rutube

To connect your Rutube account, you provide your Rutube login and password directly in the Kopypasta dashboard. Kopypasta exchanges these credentials for a Rutube API token via the official token_auth endpoint. Only the resulting API token is stored (encrypted with AES-256-GCM); your password is never stored. We use this token solely to upload videos to your Rutube channel.

3.6. Dzen (Yandex)

When you connect your Dzen channel to Kopypasta, we use Yandex OAuth with PKCE (Proof Key for Code Exchange) for secure authorization. Kopypasta stores your Yandex OAuth access and refresh tokens, encrypted using AES-256-GCM. We use this data solely to publish videos to your Dzen channel. We do not access your Yandex email, disk, or other services.

4. Purposes of Data Processing

Kopypasta processes personal data for the following purposes:

  • Providing access to Kopypasta features
  • Publishing videos to social networks on behalf of the User
  • Processing payments
  • Sending service-related notifications

5. Data Storage

All personal data is stored on servers located in the Russian Federation (Yandex Cloud), in compliance with Federal Law No. 152-FZ. Social network tokens are encrypted using AES-256-GCM. Uploaded videos are stored temporarily and automatically deleted after successful publication or after a retention period expires.

6. Third-Party Sharing

Kopypasta does not share personal data with third parties, except as required by the laws of the Russian Federation, and except for transmitting content to social network platforms (TikTok, YouTube, Instagram, VK, Rutube, Dzen) for the purpose of publishing videos on behalf of the User.

7. User Rights

The User has the right to access, correct, and delete their personal data. To delete your Kopypasta account and all associated data, use the "Settings" section in your dashboard.

8. Data Deletion

When a User deletes their Kopypasta account, all personal data, social network tokens, and uploaded videos are permanently removed from our servers. Users may also disconnect individual social network accounts at any time, which will delete the associated tokens.

9. Contact

Individual Entrepreneur Yusupov Radik Anasovich, OGRNIP 317169000076522.

Email: support@kopypasta.ru