Legal

Privacy Policy

Effective date: April 18, 2026  ·  Last updated: April 18, 2026

Copia Software LLC ("Copia," "we," "us," or "our") operates the website copia.farm and the Copia Shopify application. This Privacy Policy explains how we collect, use, and protect information when you use our services.

1. Who we are

Copia Software LLC is a software company based in San Diego, California. We build CSA membership management software for farms using Shopify. You can reach us at [email protected].

2. Information we collect

Information you provide directly:

  • Name, email address, and farm name when you contact us or join our waitlist
  • Billing information processed through Shopify's payment infrastructure (we do not store payment card details)
  • Communications you send us by email or through our contact form

Information collected through our Shopify app:

  • Farm store data including products, orders, and customer records, accessed through Shopify's API with your permission
  • CSA member data including share types, pickup locations, delivery schedules, and billing history
  • Usage data about how you interact with the Copia admin dashboard

Information collected automatically:

  • Standard web analytics including pages visited, time on site, and referring URLs
  • Device and browser information
  • IP address

3. How we use your information

We use the information we collect to:

  • Provide, operate, and maintain the Copia software and services
  • Process CSA member signups and batch billing through your Shopify store
  • Send transactional emails on behalf of your farm (welcome emails, billing confirmations, pickup reminders)
  • Respond to your questions and support requests
  • Improve our software based on how farms use it
  • Send you updates about Copia when you have opted in to receive them
  • Comply with legal obligations

We do not sell your data. We do not sell your members' data. We do not use your farm data or your members' data for advertising purposes.

4. Your data stays yours

When a member signs up for your CSA through Copia, they become a native Shopify customer in your store. Their data — including contact information, payment methods, and order history — lives in your Shopify account, not in a separate Copia database. If you stop using Copia, your member data remains in your Shopify store.

Your farm data stored in Copia (seasons, share types, harvest plans, pickup locations) can be exported at any time by contacting us at [email protected]. We will provide your data in a standard format within 30 days of your request.

5. How we share information

We do not sell or rent your information to third parties. We share information only in the following circumstances:

Service providers: We work with third-party services to operate Copia, including Railway (hosting), Supabase (database), and Resend (email delivery). These providers access your data only to perform services on our behalf and are bound by confidentiality obligations.

Shopify: Copia operates as a Shopify Partner application and shares data with Shopify as necessary to provide our services. Shopify's privacy policy governs their use of that data.

Legal requirements: We may disclose information if required by law, court order, or government authority.

Business transfers: If Copia is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6. Data security

We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. Your data is stored on encrypted servers. Access to customer data within our team is limited to what is necessary to provide support.

No method of transmission over the internet is completely secure. We cannot guarantee absolute security but we take the protection of your data seriously.

7. Data retention

We retain your farm data for as long as your account is active. If you cancel your Copia subscription, we retain your data for 90 days in case you wish to reactivate. After 90 days we delete your farm data from our systems. Your members' data remains in your Shopify store regardless of your Copia subscription status.

8. GDPR and Shopify data requests

Copia complies with Shopify's mandatory GDPR webhooks. If a customer submits a data access or deletion request through your Shopify store, Copia will process that request in accordance with Shopify's requirements and applicable law.

If you are located in the European Economic Area you have the right to access, correct, or delete your personal data. Contact us at [email protected] to make a request.

9. California privacy rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect, the right to request deletion of your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your rights contact us at [email protected].

10. Cookies

Our marketing website (copia.farm) uses cookies for basic analytics. We do not use advertising cookies or tracking pixels on our marketing website. The Copia Shopify app uses cookies as required by Shopify's embedded app framework.

11. Children's privacy

Copia is a business-to-business software product intended for use by farm operators. We do not knowingly collect personal information from children under 13.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify active Copia customers of material changes by email. The effective date at the top of this page reflects the date of the most recent update. Continued use of Copia after changes are posted constitutes acceptance of the updated policy.

13. Contact us

Copia Software LLC
San Diego, California
[email protected]
copia.farm