Privacy Policy

1. Who We Are

CapraDomains is operated by Capra Works. This policy explains how we collect, use, and protect your information when you use our domain management service at capradomains.com.

2. What We Collect

• Account data: Email address (used for authentication and notifications).
• Domain data: Domain names, registrar details, renewal dates, and notes you enter into the registry.
• Payment data: Processed by Stripe. We do not store card numbers.
• Offer enquiries: Name, email, and message submitted via the domain offer form.
• Usage analytics: Page views and feature usage via CapraLens (self-hosted, no third-party tracking).
• Support chat: if you use the support chat on our pages, the messages you type and the assistant’s replies are kept for 90 days after your last message, then deleted. We use them to see which questions people ask and where the assistant could not help, so we can improve its answers. Before storage we remove email addresses, phone numbers and card- or bank-account-like numbers. We do not store your IP address, browser or device details, or the page you were on. The chat is run for us by CapraDesk (Capra Works’ support service). Replies are generated by Anthropic (Claude), and conversations are stored in the EU (Supabase). If you ask for a teammate, your email address and the conversation become a support ticket. We keep it as long as needed to answer you and to handle any later dispute, and at most 5 years after the ticket is closed. You can ask us to delete it at any time. To have a chat conversation or a ticket deleted, email hello@capradomains.com.

3. How We Use It

• Provide and maintain the Service.
• Send renewal alerts, drop notifications, and account-related emails.
• Process payments and manage subscriptions.
• Improve the product based on aggregate usage patterns.

4. Third-Party Services

• Supabase: Database and authentication (EU-West region).
• Stripe: Payment processing.
• Resend: Transactional email delivery.
• Vercel: Hosting and edge network.
• Anthropic (Claude): AI domain name generation, brand kits, and support chat replies. Anthropic does not store prompts or use them for training; support chat conversations are kept by us for 90 days (see section 2).
• Registrar APIs: Porkbun, Namecheap, GoDaddy, Cloudflare — used for domain sync and registration. Only domain metadata is exchanged.

5. Data Storage & Security

Your data is stored in Supabase (EU-West-1, Ireland) with row-level security policies. All connections use TLS. We use service-role keys server-side only; no credentials are exposed to the browser.

6. Data Retention

Account and domain data is retained while your account is active. You can request deletion by emailing us. Alert logs are kept for up to 12 months. Support chat conversations are deleted 90 days after the last message.

7. Your Rights

You have the right to access, correct, export, or delete your personal data. Contact us at hello@capradomains.com to exercise these rights.

8. Cookies

We use essential cookies for authentication (Supabase session) and theme preference. No advertising or third-party tracking cookies.

9. Changes

We may update this policy. Changes will be posted here with an updated date.

10. Contact

Email hello@capradomains.com for any privacy-related questions.