Privacy policy

1. Who we are

CapturedIt is a product operated by Rumble Built, Inc. (“Rumble Built”, “we”, “our”). Rumble Built provides a context hub to capture, organize, and search your content and, for the purposes of applicable privacy laws, acts as the data controller for the personal data described in this policy. This policy describes how we collect, use, and protect your personal data when you use our service.

2. Data we collect

• Account data: email, password (hashed), and profile preferences when you sign up or update your profile.
• Content you add: items (links, notes, files, photos, voice notes, etc.), categories, and metadata. We may generate embeddings for search if you enable AI processing.
• Usage and technical data: session information, API usage (e.g. endpoint, method, timestamp) for connected apps, and security-related logs.
• Cookies and analytics: we use essential cookies for authentication and session management. With your consent, we send anonymous page paths (not your email or account id) to Rumble-operated analytics for product improvement. You can manage this in Profile → Privacy & preferences or via the cookie banner.
• Browser extension (Chrome & Safari): if you install our browser extension, it stores your connection settings (API endpoint and auth token) locally in the browser. When you trigger a capture—popup, keyboard shortcut, context menu, or email Save button—the extension sends only the content you chose (e.g. page URL/title, selection, screenshot, file, recording, or open email subject/sender/body) to our API over HTTPS. The extension does not collect your browsing history in the background or read tabs except when you initiate a save. See section 8 for Chrome Web Store Limited Use.

3. How we use your data

We use your data to provide and improve the service: storing your content, powering search, applying AI categorization (only when you enable it and for non-private items), transcribing voice notes to text, managing sharing and integrations, and keeping the service secure. We do not sell your personal data.

4. Third-party services

We use the following service providers to operate CapturedIt. Each processes data in accordance with their own privacy policies and our instructions:

• Supabase — authentication, database, and file storage. Your account and content data are stored in Supabase infrastructure.
• Stripe — payment processing for subscriptions. Card details are handled by Stripe; we do not store full card numbers.
• OpenAI — voice notes are sent to OpenAI’s Whisper API for transcription to text. Only the audio you record for transcription is sent; OpenAI’s usage policies apply.
• Cloud connections (e.g. Google Drive): if you connect a third-party account, we use that provider’s APIs to sync or export content you choose. Data shared with those providers is governed by their terms and privacy policies.

5. Your rights (e.g. GDPR)

You can manage your data and choices as follows:

• Access & transparency: In the dashboard, go to Security → “What CapturedIt knows” to see a summary of your stored data.
• Preferences: Profile → Privacy & preferences lets you control AI processing, cookie consent, and marketing emails.
• Data export: Security page → “Download my data” to receive a copy of your data in a portable format.
• Account deletion: Security page → “Delete account” to permanently remove your account and data (right to erasure).

If you are in the EEA/UK, you also have the right to lodge a complaint with your supervisory authority.

6. Data retention and security

We retain your data while your account is active. After account deletion, we remove your data in accordance with our retention policy. We protect your data with encryption in transit and at rest, access controls, and row-level security where applicable. Subprocessors listed in section 4 process personal data only on our instructions and for the purposes described here.

7. Contact

For privacy-related questions or to exercise your rights, contact Rumble Built, Inc. at the email address provided in the app or on our website.

8. Browser extension — data use & Chrome Web Store Limited Use

The CapturedIt browser extension (Chrome Web Store and Safari) exists solely to save content you choose into your CapturedIt library using your account.

• Local storage: connection settings are kept in browser storage on your device until you disconnect or uninstall.
• Transmitted data: only user-initiated captures are sent to api.capturedit.app (or your configured API base in development builds).
• Gmail / Outlook web: a Save control appears on supported webmail pages; email fields are read only when you click Save (or if extraction fails, an optional screenshot fallback you trigger).
• No sale of data: we do not sell extension-collected data or use it for personalized advertising.

Limited Use (Google Chrome Web Store): CapturedIt's use of information received from Google APIs and extension permissions complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use extension data only to provide and improve user-facing features in your CapturedIt account; transfer it only as necessary to operate the service, comply with law, or as part of a merger or acquisition; and we do not use it for ads, creditworthiness, or selling to data brokers.

In-product summary: open the extension popup → Privacy, or visit our Chrome extension page.