Privacy Policy

Last updated: September 17, 2026.

ClearCopies scans connected cloud-drive metadata for exact duplicate candidates. File contents are not downloaded during normal scans.

The app stores account identifiers, encrypted OAuth tokens, scan status, file names, paths, sizes, hashes supplied by the connected provider, timestamps, and sharing indicators needed to review duplicate groups.

Your IP address is matched against a local country database to pick the currency prices are shown in. The lookup happens on our own server, the address is not sent to anyone else, and neither it nor the country is written to any log or record. You can change the currency at any time, and that choice is stored in a cookie so it is remembered; without one we work the default out again on each visit rather than keeping a guess about where you are.

In the ClearCopies iOS app, if you allow notifications, we also store the Apple push notification device token of your phone. It is used only to tell you when a scan finishes, is never shared with anyone but Apple's notification service, and is removed when you sign out, when the token becomes invalid, and when you delete your account.

How sensitive data is protected

ClearCopies protects data in transit with HTTPS/TLS. OAuth access and refresh tokens are encrypted at rest with authenticated AES-256-GCM encryption. The encryption key and provider credentials are kept in server-side environment configuration and are never exposed to browser JavaScript.

Production database and token access is limited to authorized server-side services and restricted administrative operations. Application routes validate input and verify that the signed-in user owns the account, scan, or cleanup record before returning or changing data. Routine operational logs must not contain OAuth tokens, cloud-provider account identifiers, or full file paths.

Normal scans process provider-supplied metadata without downloading file contents. Connecting a drive grants ClearCopies read and write access to its files. Write access is used only by a cleanup you have paid for, which revalidates each selected file immediately before acting. Supported cleanup actions move files to the provider's recoverable trash; ClearCopies does not permanently delete files.

Scan metadata is deleted 30 days after a scan completes: the indexed file names, paths and duplicate groups are removed, leaving only the run's aggregate totals. Users can delete scan data sooner from the scan page, unless it is linked to a payment or cleanup audit record that must remain consistent.

Paid cleanup stores the Stripe Checkout and Payment Intent identifiers or the PayPal order and capture identifiers, quoted amount, currency, cleanup authorization timestamp, and per-file execution outcome needed for payment reconciliation and audit. Payment details are handled by Stripe or PayPal and are not stored by ClearCopies.

Purchases in the ClearCopies iOS and Android apps are processed by Apple or Google. For each one we store the Apple transaction ID or the Google Play purchase token, the order ID and the product ID, to confirm and reconcile it. Your payment details stay with Apple or Google.

ClearCopies sends essential scan, payment, and cleanup status emails for actions requested by the user. Optional unpaid-scan follow-ups and annual reminders are sent only after explicit opt-in and can be disabled from account preferences or through the unsubscribe link in each lifecycle email. Delivery metadata is retained for reliability and audit; IONOS processes email delivery.

Optional Google Analytics is loaded only after consent. It measures page usage and aggregated product steps such as starting OAuth, completing a scan, opening checkout, and completing cleanup. ClearCopies does not send cloud filenames, paths, account emails, or scan identifiers to Google Analytics. You can change this choice through “Analytics preferences” in the site footer.

Metadata is not used for advertising or model training. The app is independent and is not endorsed or sponsored by Microsoft, Google, or Dropbox.

ClearCopies' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Drive data is used only to provide the scan, duplicate review, and user-requested cleanup features. It is not sold, used for advertising, or used to build advertising profiles.

Disconnecting a linked account deletes its stored access and refresh tokens from ClearCopies. ClearCopies also requests provider-side revocation for Google and Dropbox. This does not sign the user out of Google, Dropbox, Microsoft, or the browser.

To remove stored scan data or authorization, follow the steps on the data deletion page. Privacy and consent questions can be sent to support@clearcopies.com.