CAPTUVICS

Privacy Policy

Last updated: October 2025

Captuvics ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and the choices you have. If you have questions, email [email protected].

1. Information we collect

We collect three categories of data:

  • Account data — your email, display name, and (if provided) profile photo. Used to authenticate you and identify your contributions.
  • Event content — photos, videos, captions, and metadata you upload. Stored encrypted at rest and in transit.
  • Usage data — IP address, device type, browser, and pages visited. Used to operate the service and detect abuse.

2. How we use your data

  • Operate the platform: deliver media, send notifications, and process payments.
  • Improve the service: aggregate analytics on feature usage. We do not sell personal data.
  • Communicate with you: transactional emails (security, billing) and — only if you opt in — product updates.
  • Comply with law: respond to lawful requests and enforce our terms.

3. Sharing

We do not sell or rent your data. We share data only with:

  • Subprocessors we contract with to operate the service (e.g. cloud hosting, payment processing). They are bound by strict data protection agreements.
  • Other event participants — content you upload to a shared event is visible to others in that event, per the event's privacy settings.
  • Authorities when legally required.

4. Your rights

You can:

  • Access and export all data we hold about you (Settings → Data Management → Export).
  • Delete your account and all associated content at any time.
  • Opt out of non-essential email.
  • Request that we correct inaccurate data.

Residents of the EEA, UK, and California have additional rights under GDPR and CCPA respectively. Email [email protected] to exercise them.

5. Retention

We keep your data while your account is active. Free-tier event content older than 90 days of last activity may be deleted; paid-tier content is kept indefinitely. After account deletion we keep minimal logs (≤30 days) for security audit, then erase everything.

6. Security

We use TLS 1.2+ for all transit, AES-256 for storage at rest, and isolate per-tenant data. We run regular security audits and maintain an incident response plan. We cannot guarantee absolute security; we will notify affected users without undue delay if a breach occurs.

7. Children

Captuvics is not directed at children under 13. If you believe we have collected data from a minor, contact us and we will delete it.

8. Changes

We will notify users of material changes by email and post the updated policy here. The "Last updated" date above always reflects the current revision.