Privacy Policy

Last updated: 27 June 2026

1. Who We Are

CapraBrand is operated by CapraWorks. This policy explains how we collect, use, and protect your personal information when you use caprabrand.com (“Service”).

2. Data We Collect

Account data: email address (used for authentication via magic link).

Brand data: brand names, taglines, descriptions, colours, fonts, social handles, and uploaded assets that you provide.

Platform credentials: API keys and tokens you enter to connect third-party platforms. These are stored encrypted in our database and used solely to publish content on your behalf.

Usage data: page views and feature usage collected via CapraLens (our first-party analytics). We do not use third-party tracking pixels or advertising cookies.

Payment data: handled entirely by Stripe. We store your Stripe customer ID and subscription ID but never your card details.

3. How We Use Your Data

We use your data to: provide and improve the Service; publish content to connected platforms on your behalf; process payments; send transactional emails (magic links, support replies); and respond to support requests.

4. AI Processing

When you use AI features (social package generator, blog drafting, SEO schema), your brand data is sent to Anthropic’s Claude API for processing. Anthropic does not use API inputs to train models. Generated content is returned to you and not stored by Anthropic.

5. Data Sharing

We do not sell your data. We share data only with:

  • Supabase — database hosting and authentication (EU region)
  • Stripe — payment processing
  • Anthropic — AI content generation (when you use AI features)
  • Vercel — application hosting
  • Third-party platforms — only the content you explicitly choose to publish

6. Data Storage & Security

Your data is stored in Supabase (PostgreSQL, EU West region) with row-level security policies. Platform credentials are stored in encrypted JSONB columns. All connections use TLS. API tokens are hashed with SHA-256 and never stored in plaintext.

7. Your Rights

You can: access and export your data at any time via the dashboard; update or correct your information; delete your account and all associated data by contacting support. Under GDPR, you also have the right to data portability and to lodge a complaint with a supervisory authority.

8. Cookies

We use only essential cookies: Supabase authentication session cookies and a brand selection cookie (cb_brand). We do not use advertising or tracking cookies.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data and brand content is permanently deleted within 30 days. Anonymised usage statistics may be retained indefinitely.

10. Changes

We may update this policy from time to time. Material changes will be communicated via email. The “Last updated” date at the top reflects the most recent revision.

11. Contact

For privacy questions or data requests, contact support@capraworks.com.