Privacy Policy

Capto ("Capto," "we," "us") operates Capto and related applications (the "Service"). Contact: founders@chromie.dev.

Account and profile

• Email address, name, and authentication identifiers (for example via Google sign-in)
• Company profile details you provide (domain, capabilities, past performance, team info)

Service and usage data

• Content you upload or generate in the Service (documents, opportunities, notes, workflows)
• Product usage events, device/browser information, and approximate location derived from IP
• Log data needed for security, debugging, and reliability

Payment

• Billing details processed by our payment providers; we do not store full card numbers on our servers

We use:

• Essential cookies — authentication, session continuity, and security (for example Supabase auth and short-lived redirect cookies). These are required for the Service to work.
• Analytics cookies — product analytics via PostHog to understand feature usage and improve Capto.

We use service providers that may process data on our behalf, including:

• PostHog — product analytics
• Cloudflare — CDN, security, and infrastructure
• Supabase — authentication and database hosting
• Cloud / AI providers — to run application workloads and generate AI-assisted features you request
• OpenAI / ChatGPT — when you connect the Capto plugin, ChatGPT sends the prompts and tool inputs you choose and receives the minimum tool results needed for your request
• Browser automation providers — when you use automation features that open remote browser sessions
• YouTube — embedded demo videos (privacy-enhanced embeds where available; interacting with a video may allow YouTube/Google to set cookies)

These providers process data under their own terms and privacy policies. We configure them to support the Service and do not sell personal information.

• Provide, secure, and maintain the Service
• Authenticate users and manage accounts
• Personalize workflows and improve product quality
• Communicate about the Service, security, and support
• Comply with law and enforce our Terms

• We do not sell your personal information
• We do not share your Customer Content with third parties except as needed to operate the Service or as required by law
• We do not use your Customer Content to train general-purpose AI models for unrelated third parties

We retain intentionally saved source documents until you delete them or close the account. Quarantined upload copies are deleted within 24 hours. After an account or document deletion request, active copies are deleted within 30 days and backup copies expire within 90 days, unless law requires longer retention. Redacted security metadata is generally retained for 180 days; high-impact and administrative audit events may be retained for one year.

We use industry-standard administrative, technical, and organizational measures appropriate to the nature of the Service. No method of transmission or storage is completely secure; please use strong account protections and notify us of suspected incidents.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To exercise these rights, email founders@chromie.dev.

Disconnecting the ChatGPT plugin revokes future plugin access. Content you deliberately saved in Capto remains in your account until you delete it or request account deletion.

The Capto Gov plugin supports public acquisition information and ordinary proprietary company, capture, pricing, and proposal data. Do not submit classified information, Controlled Unclassified Information (CUI), export-controlled data, credentials, health information, payment-card data, or other regulated information through the plugin. Uploaded files and public web results are treated as untrusted content and cannot authorize actions.

We may process information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

The Service is not directed to children under 16, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Material changes will be communicated by reasonable means when practicable.

Privacy questions: founders@chromie.dev.

Related: Terms of Service.