DM Copilot

Privacy Policy

Last updated: 26 October 2026

This policy explains what DM Copilot collects, how it handles that data, where it is stored, who it is shared with, how long it is kept, and how to have it deleted. It covers the DM Copilot Chrome extension, the dashboard at app.buyercreator.com, the Does Content Sell Check at app.buyercreator.com/check, and the server functions behind them (together, "the Service"). DM Copilot is operated by Stevan Savic, Tenerife, Spain. Contact: support@buyercreator.com.

In short. DM Copilot reads the conversations and profiles you open on Facebook, Messenger, Instagram and Skool so it can track your leads and suggest your next message. It sends that text to our servers and to two AI providers to produce the suggestion. It never sends a message on your behalf, never reads your browsing outside those four sites, and never sees your passwords for those sites. We do not sell your data and we do not use it to train AI models.

1. Roles

• For your own account data (your login, settings, billing, usage) we are the controller.
• For the conversation and profile data of the people you talk to, you are the controller and we are your processor, under the Data Processing Agreement. You are responsible for having a lawful basis to process your contacts' data and for following Meta's and Skool's terms.

2. What we collect

Account data

• Your email address and a password, which is stored hashed by our login provider. Or, if you sign in with a link, your email address only.
• Your settings: your offer (name, price, audience, problem it solves, link, next step, promise, deliverables, bonuses, proof), your pipeline columns and their descriptions, follow up rules, voice sample and voice rules, tags, colour scheme, and the names of your workspace and team members.
• If you add your own Anthropic or Google Gemini API key, that key, encrypted before it is stored. Only our server functions can decrypt it.
• Billing and membership: your plan, the dates it runs, and the Whop membership and plan identifiers that gave you access. If you are an affiliate, your affiliate username. We never see or store card numbers; payment runs on Whop.
• Your extension version and the time it last reported, so we can tell members to update.

Conversation data (read by the extension from the page you have open, only when you open a chat, press a button on the card, or run an import or inbox check)

• The text of the messages in that conversation, who sent each one, and when.
• The name, profile photo and profile link of the person you are talking to, and the link to the conversation. The photo is copied to our storage so it keeps showing after Facebook's link expires.
• Voice notes in the conversation: the audio is fetched by our server from the platform's own media address and sent to Google's Gemini API to be written out as text. We store the words, not the audio.
• From the chat list: each conversation's name, the preview line and the time of the last message, used to tell which chats have new replies.

Profile and lead finding data (read only when you press Research them, Add lead, Find high intent leads, or Collect leads)

• From a profile you open: the person's name, profile link and numeric profile id, bio and work line, recent public posts and their dates, the number of mutual friends, and whether you are friends.
• From a group or profile post you choose to scan: the post text and link, and the names, profile links and comments of the people who commented, saved as prospects.
• Our server does not log into any platform. Everything above is read from pages your own browser already shows you, with your own session.

What the AI produces and you add

• The analysis of each conversation: stage, column, buyer type, heat score, the suggested message, the reasoning, a short memory of the conversation, follow up times and reopen reasons, campaign messages, and comments and openers drafted for prospects.
• Notes, tags, events (for example "offer made", "call booked") and context you add to a lead.
• Questions you type into "Ask your pipeline" and the answers.
• Posts you paste into the Does Content Sell Check and the verdicts. The free version of that tool asks for your email address.

Usage and diagnostic data

• Counts of drafts, reads, questions and messages per month, so plan limits apply, and the AI cost of each, so we can cap spend.
• A diagnostic trail from the extension: which step ran, whether it succeeded, the error reason, the extension version, and the path of the page it ran on. It does not contain message text. You can view and copy it from the extension.
• Server logs with request references and timing. No message content.

3. What we do not collect

• Your Facebook, Instagram or Skool password, cookies or tokens. The extension never reads them and never sends them anywhere.
• Any page outside facebook.com, messenger.com, instagram.com and skool.com. The extension only runs on those sites.
• Your browsing history, your contacts outside the conversations you open, or your location.
• Payment card details. Whop handles payment.

4. How we use it

We do not use your data for advertising, we do not build profiles of you or your contacts for any purpose other than the features described, and we do not use it to train AI models. We only read conversations you open or import; the Service does not scan your inbox on its own.

5. Where it is stored and how it is protected

• All data lives in our Supabase project in the EU (Ireland): the database, login, file storage for profile photos, and the server functions. The dashboard files are served by Netlify.
• Every account's data is separated at the database level with row level security. A member can only read their own rows, or their workspace's rows if they are on a team.
• All traffic uses HTTPS. The extension talks only to our own Supabase project and to the pages you have open.
• Provider keys you add are encrypted at rest. Our own provider keys stay on the server and never reach the browser or the extension.
• Access to production systems is limited to the operator, with two factor login.
• If we learn of a breach affecting your data, we tell you without undue delay and within 48 hours of becoming aware.

6. Who it is shared with

We use a small number of sub-processors. Each one receives only what it needs for its purpose. We do not sell your data, share it with advertisers or data brokers, or give it to anyone else unless the law requires it.

Anthropic and Google receive data under their commercial API terms, which do not allow them to train on it. If you add your own Anthropic or Gemini key, your requests go to that provider under your own agreement with them. Transfers outside the EEA rely on the Standard Contractual Clauses in each provider's data processing terms.

Meta and Skool never receive anything from us. The extension reads their pages in your browser; it does not call their services on your behalf and does not send your data to them.

7. Chrome Web Store limited use

Our use of information received from the extension follows the Chrome Web Store User Data Policy, including the Limited Use requirements. The extension reads page content on facebook.com, messenger.com, instagram.com and skool.com only to provide the features in the listing: tracking your leads, reading the conversation you open, researching a profile you open, finding leads in posts you choose, and drafting your next message. That data is not sold, not used for advertising, not used for creditworthiness or lending, and not shared with anyone except the sub-processors above for the purposes above. Humans do not read your conversations, except with your permission for support, or where the law requires.

8. How long we keep it

• Leads, conversations, prospects, analyses, notes and photos: until you delete them, or until 90 days after your account closes.
• Account, settings and membership data: until 90 days after your account closes. Billing records stay as long as tax law requires.
• Usage counters: 13 months, so plan limits and spend reports work.
• Diagnostic trail and server logs: up to 30 days.
• Data sent to Anthropic and Google: deleted by them under their API retention terms, currently within 30 days.

9. Your choices and rights

• You can delete any lead or prospect from the dashboard at any time. Its conversation, analysis, notes and photo go with it.
• You can export all your leads from Settings.
• You can remove the extension at any time. Nothing more is read once it is gone.
• To delete your whole account and everything in it, email support@buyercreator.com with the subject "Delete my account". We do it within 30 days and confirm by email.
• Under the GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to its use, and take it with you. You can also complain to your data protection authority. In Spain this is the Agencia Española de Protección de Datos.
• If you are a person whose conversation was processed by one of our members and you want it removed, email us. We will tell the member and help them remove it.

10. Teams

If you add a team member or assistant to your workspace, they see the leads and conversations in that workspace. You are responsible for who you add. They are bound by these terms through you.

11. Children

The Service is for business use by adults. We do not knowingly collect data from anyone under 18.

12. Changes

When this policy changes, we update the date at the top and, for changes that matter, tell you by email or in the dashboard before they apply.

13. Contact

Stevan Savic, Tenerife, Spain. support@buyercreator.com