Legal

Privacy policy

Last updated · 8 Oct 2026

This policy explains what personal data CapQA processes, why, where it is stored and for how long. It covers capqa.app, Studio and client review links.

In short: sign-in and job data are stored in the EU; video is processed in your browser unless you attach a preview to a review link; analytics run only if you accept them.

Who is responsible

CapQA is operated by Antoni Nasiadko, Poland (“CapQA”, “we”), the controller for the personal data described here. For anything about your data, write to hello@capqa.app.

What we process and why

Each purpose rests on a legal basis under the GDPR: the contract with you, our legitimate interests, your consent, or a legal obligation.

Personal data CapQA processes
Data	What it includes	Why, and the legal basis	How long we keep it
Account	Email address, account ID, how you sign in (email code or Google), sign-in cookies.	Run your account and keep you signed in — contract.	Until you delete your account.
Campaign source	If you arrive through a link carrying campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content) or an ad platform's click id (ttclid from TikTok, fbclid from Meta, gclid from Google) and create an account in that visit: those values and the date, kept with the account and passed to Stripe with a purchase. Until you sign up they stay in the open page; once you accept analytics, also in that browser tab's session storage, which closes with the tab. A click id identifies the ad click, not you or your device; we don't send it back to the ad platform. No cookie is used for this.	Know which campaigns bring customers, so we spend only on the ones that work — legitimate interests. Email us to object and we remove them.	For the life of the account.
Funnel counts	A daily count of seven steps — a check ran, a check read your own video, an account was created, a video was burned, a SAFE certificate page was opened, a checkout started, a plan was paid — each a single number with nothing about who. Sent whether or not you accept analytics, because it holds no identifier and no cookie; your IP address only passes through our rate limiter and is not stored with the count.	Know where the product loses people, including visitors who decline analytics — legitimate interests.	400 days.
Account emails	Your account email and when your jobs ran, to send: a welcome, one note after your first SAFE delivery, a notice when this month's free jobs are used, and at most one reminder a month after 7 days without a job.	Run the service you signed up for — contract; the monthly reminder — legitimate interests, with a one-click unsubscribe in every reminder (billing and account notices still arrive).	Until you unsubscribe or delete the account.
Billing	Stripe customer ID, plan and subscription status. Card details go to Stripe, never to us.	Take payment and unlock your plan — contract. Keep invoices — legal obligation.	For the life of the account; invoices as long as tax law requires.
Studio jobs	Job status, frame size, QA stamp and timestamps, and the job’s working copy: the transcript, caption text, style and edits, so the job reopens wherever you sign in. One usage record per completed job.	Show and reopen your jobs and enforce plan limits — contract.	Free plan: deleted 24 hours after the job was opened. Creator and Agency: 24 hours after its last edit. The cleanup runs daily, so a record can last up to a day longer, and a job with a live review link stays until the link ends. Usage records last as long as the account. Studio also keeps a copy in your browser (see the Cookie policy), from which you can restore a deleted job.
Audio for captions	An audio extract of your upload, plus your glossary terms as a spelling hint, sent to Groq for speech-to-text.	Generate the captions you asked for — contract.	The audio is not stored by us. The transcript goes back to your browser and is saved with the job (see Studio jobs).
Video	Never uploaded for encoding — it runs in your browser, on every plan. The only video that reaches our storage is a preview or delivery ZIP you choose to attach to a review link.	Let your client see the delivery you attached — contract.	Kept in our EU storage while its review link is live (30 days at most), then deleted by the daily cleanup, so a file can last up to a day longer. Email us to delete one sooner.
Review links	The QA report, transcript and any preview video or delivery ZIP you attach; your client’s name, decision, note and transcript edits; an email to you when they respond.	Let your client review a delivery — contract. We handle your client’s details on your behalf, under our data processing agreement (capqa.app/dpa).	Review records are deleted with their job (see Studio jobs), and a link never lives longer than 30 days. Attached files: as for Video.
Pilot requests	What you type into the pilot form on /for/brands or /contact: work email, name, brand or agency, where your videos run, how many a month and your note, with the campaign tags of the visit (see Campaign source).	Answer your request and set up the pilot you asked for — steps before a contract, at your request; the campaign tags — legitimate interests.	12 months, then deleted by the daily cleanup.
Review portal settings	Agency name and custom review domain (Agency plan).	White-label review links — contract.	Until you change them or delete your account.
Security	On public review links, your IP address; elsewhere, your account ID — held as rate-limit counters. Our hosting provider’s request logs.	Prevent abuse and keep the service running — legitimate interests.	Rate-limit counters expire within an hour. Request logs follow our hosting provider’s retention.
Analytics — only if you accept	Pages viewed, product events (for example job started or checkout started), device and browser details, and — when you are signed in — your account ID and email. No screen or session recordings, no pop-up surveys.	Understand how Studio is used and fix what breaks — consent.	Until you withdraw consent; stored events follow our PostHog retention settings.

Who processes it for us

These providers process personal data on our behalf, under contracts that limit them to providing their service to us.

Providers that process personal data for CapQA
Provider	What for	Where
Supabase	Sign-in, database and file storage	EU — Frankfurt (eu-central-1)
Vercel	Hosting for the website and API, and anonymized Web Vitals (Speed Insights)	EU and United States
Stripe	Payments, invoices and the billing portal	EU and United States
Groq	Speech-to-text for captions	United States
Resend	Account, billing and review-link emails, links you send yourself, and pilot requests to us	United States
Upstash	Rate limiting and the daily funnel counts	EU and United States
PostHog	Product analytics, only if you accept	United States
Google	Sign in with Google, if you choose it	EU and United States

Transfers outside the EEA

Where a provider processes data outside the European Economic Area — in particular in the United States — the transfer relies on the EU Standard Contractual Clauses or the provider’s certification under the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards that apply.

Cookies

We use essential sign-in cookies and, only if you accept, analytics cookies. The Cookie policy lists each one and how to change your choice.

Your rights

Access the personal data we hold about you and get a copy.
Correct it if it is wrong, or have it deleted.
Restrict or object to processing based on our legitimate interests.
Receive the data you gave us in a portable format.
Withdraw consent to analytics at any time in Cookie settings. This does not affect processing that happened before.

Email hello@capqa.app from the address on your account and we will answer within one month. You can also complain to a data protection authority — in Poland, the President of the Personal Data Protection Office (UODO) — or to the authority where you live or work.

California and other US states

We do not sell personal information or share it for cross-context behavioural advertising. You can ask to know, correct or delete the personal information we hold about you by emailing us, and we will not treat you differently for asking.

Children

CapQA is a business tool and is not directed at children under 16. We do not knowingly collect their data; if you believe a child has given us personal data, contact us and we will delete it.

Your content

We do not claim ownership of your footage, and we do not use your video or audio to train our own or third-party AI models. Groq processes audio only to return a transcript for your session.

Security

Data is encrypted in transit. Database access is restricted to each account by row-level security, and service keys stay on our servers. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

Changes

We update this page when our processing changes and change the date at the top. If a change is material, we will say so on this page before it takes effect.