Privacy Policy

1. Introduction

Capsona (“we”, “us”, “our”) operates the capsona.com website and the Capsona cloud platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

Account Information: When you create an account, we collect your email address and password (encrypted).

Payment Information: Payment processing is handled by Razorpay. We do not store your credit card or bank details. We receive transaction confirmation and subscription status.

Server Data: Each user gets a dedicated server. Your AI conversations, messages, files, and configuration stay on your server. We do not access, read, or analyze the content of your AI interactions.

API Keys: Your API keys (e.g., for AI model providers) are stored encrypted on your dedicated server. We never have access to your API keys.

3. How We Use Your Information

• To create and manage your account
• To provision and maintain your dedicated server
• To process payments through Razorpay
• To send service-related communications (outage notices, billing, etc.)
• To improve our platform and develop new features

4. Data Isolation

Every Capsona user gets their own dedicated server. Your data is physically isolated from other users. We do not run shared or multi-tenant infrastructure. Your AI conversations, connected accounts (WhatsApp, Gmail, etc.), and files are stored exclusively on your server.

5. Capsona Box (Physical Device)

For Capsona Box users, all data remains on your physical device. No data is transmitted to our servers. The device operates independently — we have zero access to your conversations, files, or API keys.

6. Third-Party Services

We use the following third-party services:

• Supabase: Authentication and account management
• Razorpay: Payment processing
• Cloud hosting provider: Server infrastructure for cloud plans
• AI model providers: Accessed through your own API keys (we have no visibility into your AI usage)

7. Data Retention

Your account data is retained while your subscription is active. If you cancel, your server data is preserved for 30 days, after which the server and all data are permanently deleted. You can request immediate deletion by contacting us.

8. Security

We use industry-standard security measures including encrypted connections (TLS), encrypted storage for sensitive data, and isolated server infrastructure. Each server is firewalled and accessible only through authenticated channels.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your data from your dedicated server at any time

10. Contact

For privacy-related questions or requests, contact us at privacy@capsona.com.