Privacy Policy

Last updated: 19 October 2026

This Privacy Policy explains how Kaptureflo ("we", "us", or "our"), operated by [LEGAL ENTITY NAME], collects, uses, stores, and protects your information when you use our website, application, and related services.

1. Data We Collect

We collect only the information necessary to provide and operate the service:

• Account Information: Your account email and profile data gathered through Supabase Auth when you sign in or create an account.
• Brand and Workspace Content: Your brand profile details and generated content, including generation history, saved tasks, and marketing calendar items stored in Supabase.
• Shopify Store Data: When you connect your Shopify store, we access products, orders, and customer records. We use this data for personalisation, CRM customer segments, and campaign sends.
• Meta Account Data: When you connect your Meta ad account, we access access tokens, campaign data, and advertising insights. If you connect an Instagram page, we also access your Instagram page token.
• First-Party Storefront Events: When merchants install our Signals snippet on their own online store, we collect first-party storefront events such as page views, product views, add-to-cart actions, and checkout events. These events are tied only to the merchant's own known customers. This tracking is strictly single-store only. We do not perform cross-store tracking and we do not use device fingerprinting. If a merchant chooses to opt in to benchmarks, we combine funnel counts across opted-in stores into anonymous averages. These averages are shown only to opted-in merchants and only when enough stores contribute, so no single store or shopper can be identified.
• Messaging Provider Credentials: API keys and credentials you supply for third-party messaging services, specifically WhatsApp (AiSensy) and email (Resend). We also record delivery and opt-out status for messages you choose to send.
• Payment Details: All subscription and credit payments are processed securely by Razorpay. We do not collect or store your credit card or debit card details.
• Usage and Billing Logs: Logs of your tool usage, feature activity, and credit consumption.

2. How We Use Your Data

We use your data strictly to run and improve our services, including to:

• Generate the marketing copy, ad concepts, images, and content you request.
• Personalise marketing materials and recommendations to your brand guidelines.
• Deliver and execute marketing campaigns that you approve.
• Score campaign outcomes and deliver performance insights.
• Track usage and bill platform credits.

3. Service Providers and Processors

We share data only with third-party service providers who help us operate the platform. We do not sell your personal data.

Our processors include:

• Anthropic: AI generation and text processing.
• Supabase: Cloud database storage and user authentication.
• Vercel: Application hosting and cloud deployment.
• Razorpay: Payment processing and subscription management.
• Apify and ValueSERP: Public ad research and search data lookups (search queries only).
• AICredits, OpenAI, and Google: Image generation services (prompts only).
• Meta, Shopify, AiSensy, and Resend: Integrated only when you actively connect your external accounts or supply API keys.

4. Data Retention and Deletion

We retain your data as long as your account remains active. You can disconnect your connected accounts and revoke tokens at any time within the application settings.

You may request complete deletion of your account and associated personal data at any time by sending an email to [CONTACT EMAIL]. We will delete your data within 30 days of receiving your verified request.

5. Your Rights Under India's DPDP Act 2023

In accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), you have rights regarding your personal data:

• Right to Access: You may request a summary of the personal data we process about you.
• Right to Correction: You may request correction or updating of inaccurate or incomplete personal data.
• Right to Erasure: You may request that we erase personal data that is no longer necessary for the purpose it was collected.
• Right to Grievance Redressal: You may register complaints or grievances regarding data processing.

For any privacy inquiries, data requests, or grievances under the DPDP Act, contact our Grievance Officer:

Grievance Officer: [GRIEVANCE OFFICER NAME]
Email: [CONTACT EMAIL]
Address: [REGISTERED ADDRESS]

6. Merchant Responsibilities and End-Customer Consent

If you are a merchant using our Shopify CRM, Signals snippet, or messaging integrations, you are responsible for obtaining all necessary consents from your customers before processing their data or sending them messages.

Merchants must honour all customer unsubscribe and opt-out requests. Kaptureflo records opt-out status and stops sending to contacts who have opted out.

7. Security Summary

We implement reasonable and appropriate administrative, technical, and physical safeguards to protect your data. All data is encrypted in transit using industry-standard protocols. We enforce role-based access controls to internal databases, and external service tokens are stored securely server-side. While we take standard security measures to protect your information, no transmission over the internet is completely infallible.

8. Children's Privacy

Kaptureflo is intended solely for businesses and individuals aged 18 and older. We do not knowingly collect personal data from anyone under the age of 18. If you become aware that a minor has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make updates, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.

10. Contact Us

If you have questions, comments, or concerns about this Privacy Policy, please contact us at:

[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Email: [CONTACT EMAIL]