Privacy Policy

Effective Date: April 29, 2026
Last Updated: April 29, 2026

1. Introduction

Welcome to Yapture. This Privacy Policy explains how Capswan Studio LLC ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our applications and services — including the Yapture web app at app.yapture.com, the Dispatch desktop application, the Yapture Chrome extension, the Yapture CLI, and our website at yapture.com (collectively, "the Services").

Please read this Privacy Policy carefully. By using the Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information You Provide to Us

Account Information

• Name
• Email address
• Username
• Password (stored as a salted hash; we never see the cleartext)
• Profile information

User Content

• Yaps (tasks, notes, events) you create
• Lists, workspaces, goals, and tags you create
• Attachments and any media you upload
• Comments, messages, and chat content
• Preferences and settings

Communications

• Feedback and correspondence
• Support requests
• Survey responses

Information Collected Automatically

Usage Data

• Features accessed and the order in which they were accessed
• Time and date of access
• Frequency of use
• In-app actions (e.g., yap created, list rolled up, sync events)

Device Information

• Device type and model
• Operating system and version
• Browser type and version (web only)
• Unique device identifiers

Network Information

• IP address (used for rate limiting and approximate geolocation)
• Connection type

Analytics Data

• Crash reports
• Performance metrics
• Aggregate usage patterns

Information from Third Parties

• OAuth profile information from identity providers you use to sign in
• Payment information from our payment processors
• Information from other Yapture users (e.g., when they share a list with you or @-mention you)

3. How We Use Your Information

We use collected information to:

Provide and Maintain Services

• Create and manage your account
• Provide app functionality, including CRDT synchronisation
• Process payments and subscriptions
• Send administrative information

Improve Our Services

• Analyse usage patterns
• Develop new features
• Optimise performance
• Fix bugs and issues

Communicate with You

• Respond to inquiries
• Send updates and notifications
• Provide customer support
• Send marketing communications (only with your explicit consent)

Legal and Safety

• Comply with legal obligations
• Enforce our Terms of Service
• Protect rights and safety of Yapture and our users
• Prevent fraud and abuse

4. Agents and Automated Access

Yapture is designed to treat agents as visible, permissioned participants rather than hidden automation. Current accountless access uses list-scoped capabilities. OAuth 2.0 with PKCE, agent scopes, and expanded audit controls are introduced only when their deployed availability is listed in the release-status registry. A capability or future agent grant must be treated as authorization and revoked or rotated when the supported product flow provides that control.

5. How We Share Your Information

We may share your information in the following circumstances:

With Your Consent

• When you explicitly agree to sharing
• When you make information public (e.g., via a shareable list URL)

Service Providers

• Cloudflare R2 for object storage where a supported feature requires it
• Analytics services (first-party only)
• Payment processors (Stripe)
• Customer support tooling
• Transactional email providers

Legal Requirements

• To comply with legal obligations
• To respond to valid legal requests
• To protect our rights and property
• In emergency situations

Business Transfers

• In connection with mergers, acquisitions, or sale of assets
• During bankruptcy proceedings

Aggregated and De-identified Information

• We may share anonymised, aggregated data that cannot reasonably identify you

6. Data Storage and Security

Storage

• Yapture uses Cloudflare Pages, Cloudflare Workers, Containers, Cloudflare R2, and Neon for the supported production surfaces
• Data may be processed in the United States and other countries
• Backups are encrypted at rest

Security Measures

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Direct-message cryptographic privacy beyond transport and storage encryption is not currently offered as a verified production capability
• Regular security audits
• Role-based access controls and authentication
• Secure development practices and dependency scanning

No method of transmission or storage is completely secure. We continuously review safeguards for the production surfaces we operate.

Data Retention

We retain your information for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

Soft-deleted yaps are recoverable for 30 days, then permanently removed. Anonymous lists with no activity may be archived after 90 days.

7. Your Rights and Choices

Access and Control

You have the right to:

• Access your personal information
• Correct inaccurate data
• Delete your account and data
• Download your data (data portability) — every yap is exportable as JSON
• Object to certain processing

Communication Preferences

• Opt-out of marketing emails
• Manage push notifications
• Control in-app notifications

Do Not Track

We do not track you across third-party sites. We do not use third-party advertising trackers. The Services do not currently respond to Do Not Track signals because we do not engage in cross-site tracking that would be relevant to such a signal.

8. Children's Privacy

The Services are not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@yapture.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses
• Adequacy decisions where applicable

10. Third-Party Services

The Services may contain links to or integrations with third-party websites or services (e.g., Google Calendar). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what information is collected
• Right to know if information is sold or disclosed (we do not sell personal information)
• Right to opt-out of sales
• Right to non-discrimination

To exercise these rights, contact us at privacy@yapture.com.

12. European Privacy Rights

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent

Legal Basis for Processing

• Consent
• Contract performance
• Legal obligations
• Legitimate interests

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Updating the "Last Updated" date
• Sending an email notification
• Posting a notice in the Services

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Capswan Studio LLC
Email: privacy@yapture.com

15. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences (theme, last-used list)
• Maintain authenticated sessions
• Understand aggregate usage patterns
• Improve user experience

We do not use third-party advertising cookies. We do not use third-party analytics SDKs that share data outside Yapture.

By using Yapture, you acknowledge that you have read and understood this Privacy Policy.