Privacy Policy

1. Introduction

Capitor ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered social media caption and hashtag generation service (the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

• Name and email address when you create an account
• Profile information from third-party authentication providers (Google OAuth)
• Payment information when you subscribe to premium features
• Communication preferences and account settings

2.2 Content and Usage Data

• Images you upload for caption and hashtag generation
• Generated captions, hashtags, and other AI-created content
• Usage patterns, frequency of service use, and feature preferences
• Device information, IP address, and browser type

2.3 Technical Data

• Cookies, web beacons, and similar tracking technologies
• Analytics data through Vercel Analytics and SpeedInsights
• API usage logs and performance metrics
• Error logs and diagnostic information

3. How We Use Your Information

• Provide, maintain, and improve our AI-powered caption and hashtag generation services
• Process your uploaded images through AI models (Google Gemini, OpenRoute) to generate relevant content
• Authenticate your account and manage user sessions
• Process payments and manage subscriptions
• Send important service updates, security alerts, and support messages
• Analyze usage patterns to enhance user experience and develop new features
• Prevent fraud, abuse, and ensure service security
• Comply with legal obligations and enforce our Terms of Service

4. AI Processing and Third-Party Services

Our Service uses artificial intelligence to analyze your uploaded images and generate captions and hashtags. This processing involves:

• Sending your images to third-party AI providers (Google Gemini, OpenRoute/OpenAI)
• Analyzing image content to understand context, objects, and themes
• Generating relevant captions and hashtags based on AI analysis
• Temporary processing of image data by AI services (not permanently stored by providers)

We have contracts with our AI providers requiring them to protect your data and delete it after processing. However, please be aware that your content will be temporarily processed by these third-party services.

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party providers who assist in operating our Service (AI providers, payment processors, analytics services)
• Legal Requirements: When required by law, court order, or government request
• Safety and Security: To protect our rights, users' safety, or investigate fraud
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with proper notice)
• Consent: With your explicit consent for any other purpose

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure authentication systems with JWT tokens and HTTP-only cookies
• Regular security audits and vulnerability assessments
• Access controls and employee training on data protection
• Secure cloud infrastructure with industry-standard protections

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Information: Until you delete your account or request deletion
• Generated Content: Stored for your convenience; you can delete at any time
• Uploaded Images: Temporarily processed for generation; not permanently stored
• Usage Logs: Retained for up to 12 months for service improvement and security

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your information
• Objection: Object to certain types of processing

To exercise these rights, please contact us at privacy@capitor.tech. We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable. By using our Service, you consent to such transfers.

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to remove such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Significant changes will be communicated via email or prominent notice on our Service.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us: