Privacy policy

1. Who we are

CapturedIt (“we”, “our”) provides a context hub to capture, organize, and search your content. This policy describes how we collect, use, and protect your personal data when you use our service.

2. Data we collect

• Account data: email, password (hashed), and profile preferences when you sign up or update your profile.
• Content you add: items (links, notes, files, photos, voice notes, etc.), categories, and metadata. We may generate embeddings for search if you enable AI processing.
• Usage and technical data: session information, API usage (e.g. endpoint, method, timestamp) for connected apps, and security-related logs.
• Cookies: we use essential cookies for authentication and session management. If we use optional cookies (e.g. analytics), we will ask for your consent and let you manage preferences in Profile → Privacy & preferences.

3. How we use your data

We use your data to provide and improve the service: storing your content, powering search, applying AI categorization (only when you enable it and for non-private items), transcribing voice notes to text, managing sharing and integrations, and keeping the service secure. We do not sell your personal data.

4. Third-party services

We use the following service providers to operate CapturedIt. Each processes data in accordance with their own privacy policies and our instructions:

• Supabase — authentication, database, and file storage. Your account and content data are stored in Supabase infrastructure.
• Stripe — payment processing for subscriptions. Card details are handled by Stripe; we do not store full card numbers.
• OpenAI — voice notes are sent to OpenAI’s Whisper API for transcription to text. Only the audio you record for transcription is sent; OpenAI’s usage policies apply.
• Cloud connections (e.g. Google Drive): if you connect a third-party account, we use that provider’s APIs to sync or export content you choose. Data shared with those providers is governed by their terms and privacy policies.

5. Your rights (e.g. GDPR)

You can manage your data and choices as follows:

• Access & transparency: In the dashboard, go to Security → “What CapturedIt knows” to see a summary of your stored data.
• Preferences: Profile → Privacy & preferences lets you control AI processing, cookie consent, and marketing emails.
• Data export: Security page → “Download my data” to receive a copy of your data in a portable format.
• Account deletion: Security page → “Delete account” to permanently remove your account and data (right to erasure).

If you are in the EEA/UK, you also have the right to lodge a complaint with your supervisory authority.

6. Data retention and security

We retain your data while your account is active. After account deletion, we remove your data in accordance with our retention policy. We protect your data with encryption in transit and at rest, access controls, and row-level security where applicable.

7. Contact

For privacy-related questions or to exercise your rights, contact us at the email address provided in the app or on our website.