C
CapsuleBack to Home

Privacy Policy

Effective date: February 1, 2026 · Last updated: February 22, 2026

Capsule Technology, Inc. ("Capsule," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you subscribe to a paid plan, our payment processor (Stripe) collects billing information on our behalf. We do not store credit card numbers on our servers.

Usage Data

We collect information about how you interact with our service, including pages visited, features used, capsules created, and sharing activity. This data helps us improve the product and diagnose technical issues.

Document Content

Documents uploaded to Capsule are encrypted client-side using AES-256-GCM before transmission. We store only the encrypted data and cannot access, read, or process the content of your documents.

Device and Log Information

We automatically collect device type, browser type, operating system, IP address, and access timestamps. This information is used for security monitoring and to provide analytics features to capsule senders.

2. How We Use Your Information

  • Provide, maintain, and improve our services
  • Process transactions and send related notices
  • Send service updates and security alerts
  • Provide analytics to capsule senders about document views
  • Detect, prevent, and address fraud and abuse
  • Comply with legal obligations
  • Respond to support requests

We do not sell your personal information. We do not use document content for advertising, training, or any purpose other than delivering the service you requested.

3. Data Storage and Security

Your data is stored on infrastructure provided by cloud providers that maintain SOC 2 Type II certification (e.g., Vercel, AWS). All data is encrypted at rest and in transit. Document content is additionally encrypted client-side before it reaches our servers.

We retain your account data for as long as your account is active. Expired capsule content is automatically purged from our servers. You may request deletion of your account and all associated data at any time.

4. Data Sharing and Disclosure

We do not share your personal information with third parties except in the following circumstances:

  • Service providers: We share data with vendors who assist us in operating our platform (e.g., hosting, payment processing, email delivery), under strict data processing agreements.
  • Legal requirements: We may disclose information when required by law, subpoena, or government request.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.
  • With your consent: We may share information when you explicitly direct us to do so.

5. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We use analytics cookies to understand how our service is used and to improve the user experience. You can control cookie preferences through your browser settings.

We do not use third-party advertising cookies or sell data to ad networks.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing of your data for certain purposes.
  • Restriction: Request restriction of processing in certain circumstances.

GDPR (European Economic Area)

If you are in the EEA, you have rights under the General Data Protection Regulation. See our GDPR compliance page for detailed information.

CCPA (California)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

7. Children's Privacy

Capsule is not directed at children under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Continued use of our service after changes constitutes acceptance of the revised policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: