Privacy Policy

At Capy Studio, a product of Capybara Ninja Inc. ("Company," "we," "us," or "our"), privacy is a foundational principle of how we build and operate our Service. This Privacy Policy explains what information we collect, how we use it, how long we keep it, and what rights you have over your data.

By using Capy Studio, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

1. Our Privacy Philosophy

We designed Capy Studio to process your photos and forget them. Unlike many services that retain user-uploaded content indefinitely, our architecture is built around minimal data retention. Your uploaded photographs are processed in memory, used solely to generate your portrait, and deleted from our servers after delivery. We do not train our models on your photos, and we do not build profiles of our users.

2. Information We Collect

2.1 Photographs You Upload

When you use the Service, you upload one or more photographs to be transformed into digitally generated portrait artwork. These images are transmitted securely to our servers, processed by our rendering pipeline, and deleted after your portraits are generated and delivered. We do not retain copies of your original photos beyond what is technically necessary to complete processing (typically under one hour).

2.2 Payment Information

If you make a purchase, payment processing is handled entirely by our third-party payment processor. We do not receive, store, or have access to your full credit card number, CVV, or banking details. We may receive and store a truncated transaction reference, the last four digits of your card, and the transaction amount for order fulfillment and accounting purposes.

2.3 Email Address (Optional)

You may optionally provide an email address to receive order receipts or to use our save-for-later functionality. If you provide an email, we store it solely for transactional communication related to your order. We do not send marketing emails, and we do not share your email address with third parties for promotional purposes.

2.4 Session and Technical Data

We collect minimal technical information necessary to operate and secure the Service. This may include:

• Browser type and version
• Operating system
• Referral source (how you found us)
• Pages visited and session duration
• Anonymized IP address
• Device type (mobile, desktop, tablet)

We use privacy-respecting analytics and do not deploy invasive third-party trackers, fingerprinting scripts, or cross-site tracking pixels.

2.5 Guest Tokens and Order Identifiers

The Service generates unique guest tokens and order identifiers associated with your session. These are used to link your uploads to your generated portraits and to enable download access. They do not contain personally identifiable information.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To process your uploaded photographs and generate portrait artwork
• To process payments, fulfill orders, and deliver download links
• To send transactional emails such as order receipts (only if you provide an email address)
• To maintain, improve, and optimize the performance and reliability of the Service
• To detect and prevent fraud, abuse, or security threats
• To comply with legal obligations, enforce our Terms of Service, and protect our rights

4. Data Retention

We follow a strict minimum-retention approach. Here is how long we keep different types of data:

• Uploaded photographs: Deleted after processing is complete, typically within one (1) hour of upload.
• Generated portraits: Available for download for twenty-four (24) hours after purchase, then permanently deleted from our servers.
• Order and transaction records: Retained for up to seven (7) years for legal, tax, and accounting compliance.
• Email addresses: Retained only as long as needed for transactional purposes, or until you request deletion.
• Anonymized analytics data: Retained in aggregate form for service improvement. This data cannot be linked back to individual users.

5. Data Sharing and Third Parties

We do not sell, rent, trade, or otherwise share your personal data with third parties for their own marketing or commercial purposes. We work with a limited number of trusted service providers who assist us in operating the Service:

• Payment processor: Payment processing handled by a PCI-DSS compliant partner operating under its own privacy policy.
• Cloud infrastructure providers: Secure hosting and image processing. Data is processed in encrypted environments and not accessible to provider personnel.
• Analytics: Privacy-respecting, anonymized analytics to understand aggregate usage patterns. No personally identifiable information is shared.

We may disclose information if required by law, subpoena, court order, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

6. Data Security

We implement industry-standard technical and organizational measures to protect your data, including:

• TLS/SSL encryption for all data transmitted between your browser and our servers
• Encryption at rest for any temporarily stored files
• Access controls limiting personnel access to user data on a need-to-know basis
• Regular security reviews and vulnerability assessments
• Automated deletion pipelines to enforce data retention schedules

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any breach and notifying affected users as required by applicable law.

7. Cookies and Tracking

Capy Studio uses only essential cookies required for the Service to function properly, such as session management and guest token storage. We do not use advertising cookies, social media tracking pixels, or third-party cookies that follow you across websites.

You can configure your browser to reject cookies, though this may impair certain functionality of the Service (such as maintaining your session during processing).

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete data.
• Right to Deletion: You may request that we delete your personal data. Given our minimal retention practices, most data is already deleted automatically.
• Right to Restriction: You may request that we limit how we process your data.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your data in certain circumstances.

To exercise any of these rights, please contact us at team@capystudio.art. We will respond to your request within thirty (30) days.

9. Children's Privacy

The Service is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under the applicable age, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at team@capystudio.art.

10. International Data Transfers

Capy Studio is operated from the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States or other jurisdictions where our service providers operate. By using the Service, you consent to such transfers. We ensure that any cross-border data transfers comply with applicable data protection laws and are subject to appropriate safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

• Email: team@capystudio.art
• Support: Visit our Support page
• Company: Capybara Ninja Inc.

This privacy policy is provided as a template and does not constitute legal advice. We recommend consulting with a qualified privacy attorney or data protection officer to ensure compliance with applicable privacy regulations in your jurisdiction, including GDPR, CCPA, and other data protection frameworks.