Privacy Policy

Last updated: 10/08/2025

Who We Are

CapyDocs is responsible for the processing of your personal data. For any privacy-related inquiries or to exercise your data rights, you may contact us at privacy@capydocs.com.

What Data We Collect

• Your Google account identifier, email address, and display name when you sign in with Google.
• A session identifier stored in a cookie, which references your authentication tokens in our secure database.
• Your purchase history and subscription status, stored in a products_and_subscriptions record tied to your Google account.
• A mapping between your email address and your Google account identifier to support gifting and account management.
• An installationID generated by the CapyDocs application and associated with your account when you log in.
• Stripe transaction data related to your purchases, retained as part of our business records.

Why We Collect Your Data (Legal Basis)

• To provide and manage access to CapyDocs services (contractual necessity).
• To comply with legal and financial obligations (legal requirement).
• To maintain and secure your session and purchases (legitimate interest and security).

By signing in, you acknowledge that you have read and accepted this Privacy Policy. The date and version of your acceptance are recorded when you log in.

How Long We Keep Your Data

Your personal data is retained for as long as your account is active or as needed to provide our services. If you close your account, your personal data will be deleted within 30 days unless we are required to retain it for legal or business purposes.

How We Protect Your Data

• All communications are encrypted using HTTPS.
• Your data is stored on Cloudflare D1, which uses industry-standard encryption at rest and in transit.
• Access to your data is restricted to authorized personnel only.
• Backups are encrypted.

International Data Transfers

We use Cloudflare for secure hosting and data processing. Cloudflare's DPA ensures compliance with the GDPR and other international regulations. Data may be processed outside the European Economic Area, but always with adequate safeguards.

Your Rights

You have the right to:

• Access your personal data.
• Rectify or update your information.
• Request the deletion (“right to be forgotten”) of your data.
• Object or restrict how your data is processed.
• Request a copy of your data (data portability).

To exercise any of these rights, contact us at privacy@capydocs.com.

Cookies and Tracking

We use cookies only for session management and authentication. We do not use cookies for advertising or analytics.

Disclosure to Third Parties

We do not share your personal data with third parties except for payment processing via Stripe or if required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting an update on this page. Please review it regularly.