Privacy Policy

This Privacy Policy explains how Kapsule Inc. ("Kapsule", "we", "us") collects, uses, and protects information when you use the Kapsule website at kapsule.sh, the Kapsule dashboard at app.kapsule.sh, and the Kapsule gateway service (together, the "Service"). By using the Service, you agree to the practices described in this policy.

Information we collect

Account information. When you create an account we collect your email address and, if you sign in with Google, the basic profile information Google shares with us (such as your name and profile picture). Authentication is handled by Google Firebase Authentication.

Capsule configuration. When you create a capsule we store the configuration you provide, including your target API URL, allowed origins, rate limits, and any bot-protection secrets (such as Cloudflare Turnstile or reCAPTCHA secret keys) you choose to save.

Gateway traffic metadata. To operate the security features of the Service — bot protection, origin validation, and rate limiting — we process metadata about requests that pass through your capsules, such as IP addresses, request origins, timestamps, and response statuses.

Usage information. We collect basic analytics about how the website and dashboard are used, such as pages visited and features used, to improve the Service.

Proxied API traffic

Kapsule works by forwarding requests from your applications to your APIs. The contents of those requests and responses pass through our infrastructure in transit. We do not sell this data, use it for advertising, or retain request or response bodies beyond what is required to deliver the Service. You are responsible for ensuring that routing your traffic through Kapsule is compatible with your own obligations to your users.

How we use information

• To provide, operate, and secure the Service.
• To enforce your capsule rules — verifying bot-protection tokens, validating origins, and applying rate limits.
• To communicate with you about your account, security issues, and changes to the Service.
• To understand usage and improve the product.
• To detect, prevent, and respond to abuse, fraud, or security incidents.

Third-party services

We rely on a small number of infrastructure providers to run the Service:

• Google Firebase and Google Cloud — authentication, database, and hosting. See the Google Privacy Policy.
• Cloudflare Turnstile— when you enable bot protection, tokens are verified against Cloudflare's API. See the Cloudflare Privacy Policy.

We do not sell your personal information to third parties.

Cookies and local storage

The dashboard uses cookies and browser local storage strictly for authentication sessions and product preferences (for example, remembering that you have completed onboarding). The marketing site at kapsule.sh does not use advertising or cross-site tracking cookies.

Data retention

We retain your account information and capsule configurations for as long as your account is active. Gateway traffic metadata is retained only as long as needed to operate rate limiting, abuse prevention, and diagnostics. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where retention is required by law.

Security

We take security seriously — it is the product. Data is encrypted in transit, secrets you store with us are treated as sensitive, and access to production systems is restricted. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to certain processing. You can exercise these rights by contacting us at support@kapsule.sh. We will respond within a reasonable timeframe.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy as the Service evolves. If we make material changes, we will update the date above and, where appropriate, notify you through the Service or by email. Continued use of the Service after changes take effect means you accept the updated policy.

Contact

Questions about this policy or your data? Email us at support@kapsule.sh.