Acaption ("we", "us", "our") is operated by a sole trader registered in Spain. We operate the website acaption.com and the SaaS service described herein. For privacy-related enquiries contact us at hello@acaption.com.
As a business registered in Spain and operating within the European Union, we process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law.
Account data: When you register, we collect your email address and, where applicable, your name. This is stored in our database (Supabase, EU region).
Payment data: Payment transactions are processed entirely by our third-party payment processor. We do not store credit card numbers, bank details, or full payment credentials on our servers. We receive only transaction confirmations and subscription status.
Uploaded files: Images and videos you upload are processed temporarily in memory solely to generate captions. Files are not stored permanently on our servers and are discarded immediately after processing.
Usage data: We may collect anonymised usage data (e.g. number of captions generated, plan type) for service improvement purposes. This data is not linked to individually identifiable users.
Communications: If you contact us by email, we retain that correspondence to handle your enquiry.
We do not use your data for advertising, profiling, or any purpose beyond operating the Service.
We use the following sub-processors to operate the Service:
We ensure all sub-processors provide adequate data protection guarantees consistent with GDPR requirements.
As a data subject under GDPR you have the following rights:
To exercise any of these rights, contact us at hello@acaption.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD) at aepd.es.
We use only strictly necessary cookies required for authentication and session management. We do not use advertising, tracking, or analytics cookies. No cookie consent banner is required for strictly necessary cookies under GDPR.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data in transit is encrypted via HTTPS/TLS. Database access is restricted and authenticated.
Your data is stored within the EU (Supabase EU region). Where sub-processors operate outside the EU/EEA, we ensure adequate transfer mechanisms are in place (Standard Contractual Clauses or equivalent).
We may update this Privacy Policy from time to time. We will notify active subscribers of material changes by email. Continued use of the Service after changes constitutes acceptance of the updated policy.
For any privacy-related questions or to exercise your rights, contact us at hello@acaption.com.