Privacy Policy

1. Personal Data Controller

Capsule Labs LLC. is the controller of your personal data.

2. Categories of Personal Data We Collect

• Data you provide: includes email address, password, and any information shared while using the Product.
• Automatically collected data:
  • Referring URL
  • Cookies and usage tracking (see Cookie Policy)
  • Device/browser data including IP, OS, settings, and advertising IDs (IDFA/AAID)
  • Transaction metadata (time, date, type of payment)
  • Usage patterns and engagement (without storing chat content)

3. Purposes of Data Processing

• To provide and maintain the Product
• To analyze and improve the Product
• To personalize your experience
• To process payments (via third-party processors)
• To prevent fraud and enforce terms
• To communicate with you (e.g. notifications, support)
• To send marketing emails (you can unsubscribe)
• To provide customer support
• To personalize ads
• To comply with legal obligations

4. Legal Basis for Data Processing (EEA Only)

We process personal data under:

• Your consent
• Our contractual obligations to you
• Our legitimate interests (e.g., improvement, communication, marketing, fraud prevention)
• Legal compliance

5. California Privacy Rights

California residents can request:

• Disclosure of personal data shared for direct marketing
• Deletion of personal data
• Details about personal data collected in the past 12 months. Requests should be submitted to support@capsulelabs.co with "California Privacy Rights Request" in the subject line.

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined here, or to comply with legal obligations. Even if you delete your profile, some data may be retained to fulfill obligations like fraud prevention or chargeback handling.

7. Data Sharing

• Service providers: Hosting (e.g. Vercel), analytics (e.g. Amplitude, Google), payments, email delivery
• Law enforcement or regulatory authorities if required
• In corporate transactions (e.g., acquisition, bankruptcy)

8. International Data Transfers

If transferring data outside the EEA, we use appropriate safeguards such as:

• Standard Contractual Clauses
• EU-U.S. Data Privacy Framework
• Adequacy decisions

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified in the Product. Continued use after updates means you accept the changes.

10. Age Limitation

We do not knowingly process personal data from persons under 18 years of age. If you learn that anyone younger than 18 has provided us with personal data, please contact us at support@capsulelabs.co.

11. Your Rights

• Access, correct, or update your data
• Delete your data (unless legally required to retain it)
• Restrict or object to processing
• Request data portability
• Lodge a complaint with a data protection authority

All requests should be submitted to support@capsulelabs.co.

12. Do Not Track

We do not support "Do Not Track" signals. Refer to third-party policies for their handling of such requests.