Privacy Policy

1. Introduction

CaptureAPI ("we", "us", "our") is committed to protecting the privacy of our users ("you", "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at captureapi.dev and our API services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register for an API key, we collect your email address.
• Payment Information: When you subscribe to a paid plan, payment details are processed securely by Stripe. We do not store your credit card information on our servers.
• Support Inquiries: When you contact us, we collect the information you provide in your communication.

2.2 Information Collected Automatically

• API Usage Data: We log API requests including timestamps, endpoints accessed, request parameters (URLs submitted for screenshots), response codes, and processing times. This data is used for rate limiting, billing, and service improvement.
• Website Analytics: We use cookies and similar technologies to collect information about your browsing activity on our website, including pages visited, time spent, and referral sources.
• Device and Browser Information: We collect information about the device and browser you use to access our website, including IP address, browser type, operating system, and screen resolution.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To process your transactions and manage your subscription
• To enforce rate limits and prevent abuse
• To send you technical notices, updates, and support messages
• To respond to your comments, questions, and requests
• To monitor and analyze usage patterns and trends to improve the Service
• To detect, prevent, and address technical issues and security threats
• To serve personalized advertisements on our website (with your consent)

4. Advertising

We do not serve advertising. No advertising script runs on this site and no advertising cookie is set, with or without consent.

This section previously described Google AdSense. That description was inaccurate: the integration was never completed, and stating that we served ads overstated what actually happens to your data. Corrected on 2 August 2026. If advertising is ever introduced, this section and the sub-processor table in section 6 will be updated in the same change.

5. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly (e.g., session management, authentication). Duration: session or up to 30 days.
• Analytics Cookies: Help us understand how visitors interact with our website (loaded only with consent). Duration: up to 2 years (Google Analytics _ga cookie).
• Preference storage: Remembers your theme choice and, on the dashboard, the API key you pasted, so you do not retype it. Browser local storage — it never leaves your device on its own.

You can control cookies through your browser settings and through our cookie consent banner. Declining non-essential cookies will not affect the core functionality of the Service.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers (Data Processors): the full list is in the table below. Each processor is bound by contractual obligations to protect your data in compliance with GDPR.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

These are every vendor that processes data on our behalf, what each one is for, and where it happens. The list is generated from the code, so it cannot fall out of step with what the product actually does — the previous hand-written version named three of them and omitted six.

Our Data Processing Agreement covers the contractual side of these relationships.

7. Data Retention

We retain your account information for as long as your account is active. API usage logs are retained for 90 days for operational purposes. Screenshots and PDFs generated through our API are cached temporarily (up to 24 hours) and then automatically deleted. You may request deletion of your account and associated data at any time by contacting us.

8. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the following data protection rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request complete deletion of your personal data, including your account, API keys, usage logs, and any associated records. Upon request, we will erase your data within 30 days and confirm deletion in writing.
• Right to Restrict Processing: Request that we limit the processing of your data.
• Right to Data Portability: Request a machine-readable copy of your data.
• Right to Object: Object to the processing of your personal data for certain purposes.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time.

To exercise any of these rights, please contact us at privacy@captureapi.dev. We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS), secure storage practices, access controls, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws, including Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Data Protection Officer

For any data protection inquiries or to exercise your GDPR rights, you may contact our Data Protection contact:

Email: privacy@captureapi.dev

CaptureAPI is operated by an independent developer based in Spain, EU. We are committed to ensuring that your data is processed in accordance with applicable EU data protection regulations.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@captureapi.dev