Legal

Privacy Policy

Last updated: June 1, 2025

CaptionAI ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and what rights you have over it.

1. Information We Collect

Account Information

When you create an account, we collect your email address, name, and password (stored as a secure hash). If you sign up via Google or another OAuth provider, we receive your name and email from that provider.

Content You Upload

Photos and videos you upload are sent to our AI processing pipeline to generate captions. We do not permanently store your original media files after processing is complete. Generated captions are stored in your account history.

Usage Data

We collect data about how you use CaptionAI — including pages visited, features used, generation count, platform and tone selections, and timestamps. This helps us improve the product.

Payment Information

Payments are processed by Stripe. We never store your full credit card number or CVV. We retain billing records (plan, amount, date) for accounting and support purposes.

2. How We Use Your Information

To Provide the Service

We use your uploaded content solely to generate captions on your behalf. Your content is processed by our AI provider (Google Gemini) under strict data processing agreements.

To Improve CaptionAI

Aggregated, anonymized usage data helps us understand how features are used and where to invest improvement effort. We do not use individual caption content to train AI models.

To Communicate with You

We may send transactional emails (receipts, password resets, plan changes). With your consent, we may send product updates. You can unsubscribe from non-transactional emails at any time.

3. Data Sharing and Third Parties

AI Processing

Images and video frames are sent to Google Gemini API for caption generation. Google processes this data under their data processing addendum. We recommend not uploading content that contains sensitive personal information.

Infrastructure

We use Supabase for database hosting, Vercel for application hosting, and Stripe for payments. Each is bound by data processing agreements consistent with applicable privacy law.

No Selling of Data

We do not sell, rent, or share your personal data with third parties for their marketing purposes. Ever.

4. Data Retention

Account Data

Your account data is retained as long as your account is active. You can delete your account at any time from Settings — this permanently removes your profile, history, and all associated data within 30 days.

Generation History

Generated captions are stored according to your plan. All-in-One plan retains history indefinitely. Other plans may have history limits as described in your plan details.

Uploaded Media

Original photos and videos are not stored after caption generation is complete. They are held in temporary memory during processing only.

5. Cookies and Tracking

Essential Cookies

We use cookies necessary to keep you logged in and maintain your session. These cannot be disabled without breaking core functionality.

Analytics

We may use privacy-respecting analytics to understand aggregate usage patterns. We do not use advertising trackers or fingerprinting.

6. Your Rights

Access and Portability

You can access your data at any time through your account dashboard. To request a full data export, contact us at privacy@captionai.app.

Correction and Deletion

You can update your profile information in Settings. You can delete individual generations from your history, or delete your entire account to remove all data.

GDPR and CCPA

If you are located in the EU or California, you have additional rights under GDPR and CCPA respectively, including the right to object to processing and the right to non-discrimination. Contact us to exercise these rights.

7. Security

How We Protect Your Data

All data is transmitted over HTTPS/TLS. Passwords are hashed using bcrypt. We follow security best practices including least-privilege access, regular dependency audits, and encrypted storage.

Breach Notification

In the event of a data breach that affects your personal information, we will notify you via email within 72 hours of becoming aware of it, as required by applicable law.

8. Children's Privacy

CaptionAI is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the date at the top of this page and, for material changes, notify you via email or an in-app notice. Continued use of CaptionAI after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Email us at privacy@captionai.app. We aim to respond within 5 business days.