Privacy Policy

1. Who we are

Capsule ("we", "us") provides a time-locked photo album for events. The data controller is Forja Development, Portugal. You can reach us at hello@capsule.camera.

2. Data we collect

Account data: when you create an account we store your email, display name and an encrypted password (handled by our authentication provider, Supabase).

Capsule content: photos uploaded by you and your guests, capsule names, event details, your personal reveal message, and the names guests enter when contributing. Guests may optionally provide an email so they receive the reveal.

Payment data: when you buy a plan, payment is processed by Stripe. We never see or store your full card number — Stripe handles it. We store only the plan purchased and a payment reference.

Technical data: basic logs and device/browser information needed to run the service securely.

3. How we use your data

To run the service: store your photos, keep the album sealed until the reveal date, and open it on schedule.

To send emails: account and reveal notifications are sent through Resend.

To create the reveal video (Premium plans only): photos are sent to our video provider (Shotstack) to render the AI surprise film.

To process payments: through Stripe.

We do not sell your data and we do not use your photos for advertising.

4. Processors we rely on

Supabase (database and authentication), Cloudflare R2 (photo storage), Stripe (payments), Resend (email), Shotstack (AI video, Premium only) and Vercel (hosting). Each processes data only to provide its part of the service.

5. Storage and retention

Your photos are kept while your capsule exists. You can delete a capsule, or ask us to delete your account and all associated content, at any time by emailing hello@capsule.camera. We remove the data within a reasonable period unless we are legally required to keep records (for example, payment records for tax purposes).

6. Your rights (GDPR)

If you are in the EU or UK you have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. To exercise any of these, email hello@capsule.camera. You also have the right to complain to your local data protection authority (in Portugal, the CNPD).

7. Cookies

We use only essential cookies needed to keep you signed in and to keep the service secure. We do not use advertising cookies.

8. Children

Capsule is not intended for children under 16. If you believe a child has uploaded data to Capsule, contact us and we will remove it.

9. Changes

We may update this policy. When we do, we will change the date above. Continued use of Capsule means you accept the updated policy.