Privacy Policy

We collect information you provide directly, information generated by your use of Capabase, and information from service providers such as Stripe.

Capabase may use cookies, local storage, pixels, SDKs, and similar technologies for essential site functions, authentication, security, checkout, preferences, analytics, attribution, and marketing.

Essential cookies are used to make the service work. If we use non-essential analytics, advertising, or tracking technologies in places where consent is required, we will request consent before using them and provide a way to change choices.

You can control cookies through your browser. Blocking some cookies may break account, checkout, security, or preference features.

We share information only as needed to run Capabase, comply with law, protect the marketplace, and provide marketplace transactions.

Payments, connected-account onboarding, identity/payment verification, payouts, disputes, tax calculations, and some receipts or invoices may be handled by Stripe. Stripe may collect information directly from buyers and creators under Stripe's own terms and privacy policy.

Capabase receives payment-related identifiers, statuses, metadata, and transaction records needed to operate the marketplace. Do not send us full card numbers or sensitive payment credentials outside Stripe-hosted flows.

Creator names, profiles, listing pages, descriptions, screenshots, public metrics, reviews, and support information may be visible to buyers or visitors. Creator payout, tax, identity, private application, and compliance details are not public, but may be shared with service providers and authorities when needed.

Capabase may scan, test, log, and retain listing files and review metadata for security, provenance, fraud prevention, support, legal, and marketplace quality purposes.

Where EU/UK data protection law applies, we process personal information based on one or more legal bases: contract performance, legitimate interests, consent, legal obligation, and, where needed, establishment or defense of legal claims.

Legitimate interests include operating and improving the marketplace, preventing fraud and abuse, enforcing policies, securing the service, supporting users, and marketing Capabase where allowed by law.

We keep information for as long as needed to provide Capabase, maintain accounts, support purchases, preserve entitlements, process creator payouts, comply with legal/tax/accounting obligations, resolve disputes, prevent fraud, enforce terms, and protect rights.

We may keep transaction, payout, tax, dispute, security, moderation, and legal records after account closure where retention is needed for legitimate business, legal, or compliance reasons.

You can request access, correction, deletion, export, restriction, objection, or withdrawal of consent by contacting privacy@capabase.ai. These rights may depend on your location and the type of information involved.

We may need to verify your request. We may deny or limit requests where information must be retained for transactions, tax, legal, security, fraud prevention, dispute, or marketplace integrity reasons.

EU/UK users may have the right to complain to a data protection authority. California and other US state residents may have rights to know, access, correct, delete, opt out of certain sharing/sales, and limit certain sensitive data uses where applicable. Capabase does not knowingly sell personal information in the ordinary meaning of selling a customer list for money.

Capabase, its users, creators, buyers, and service providers may be located in different countries. Your information may be processed in the United States, European Economic Area, United Kingdom, and other locations where we or our service providers operate.

Where required, we use appropriate safeguards for international transfers, such as contractual protections or other legally recognized mechanisms.

We use reasonable technical and organizational measures to protect personal information. No system is perfectly secure. You are responsible for using strong credentials, protecting your account, and reviewing skills before using them with sensitive data or production systems.

Capabase is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe a child provided personal information, contact us and we will take appropriate steps.

If Capabase offers team registry, hosted access, API access, or business services that process personal information on behalf of a business customer, a separate data processing agreement may apply. Until a written DPA is signed, this Privacy Policy controls the public website and marketplace relationship.

We may update this Privacy Policy. If changes are material, we will take reasonable steps to notify users. Continued use after the effective date means the updated policy applies.

Privacy questions and requests: privacy@capabase.ai.

Support: support@capabase.ai.

Legal operator: [LEGAL ENTITY NAME], [LEGAL ENTITY ADDRESS].