Privacy Policy

2.1  Data we do NOT collect

The following data is processed entirely on your device and is never transmitted to our servers:

• Screenshots, captures, and images you take with CapFu
• Annotations, drawings, and markups you add to captures
• Text extracted by the OCR feature (runs as a local WASM model)
• The content of web pages you capture
• Your browsing history

2.2  Extension data (all users)

When you install and use the CapFu extension, the following is stored in your browser using the browser's built-in storage APIs (IndexedDB and chrome.storage):

• Your capture history (up to 8 recent captures)
• Your annotation preferences (selected tool, color, stroke size)
• Your UI settings (light/dark mode, toolbar state)
• Your Pro license key, if you have one (stored in chrome.storage.sync)

This data is not sent to or accessible by CapFu, LLC. If you are signed in to Chrome, items saved with chrome.storage.sync (your license key and preferences) are synced across your signed-in browsers by Chrome Sync — this is a standard browser feature provided by Google, and the data is not transmitted to CapFu's servers.

2.3  Pro subscription data

If you purchase CapFu Pro, we collect and store:

• Email address — used to issue your license key, send transactional receipts, and provide priority support
• Payment details — collected and processed directly by our payment provider (WooCommerce Payments / Stripe). We store a billing reference but never see or store your full card number
• License key activations — each time the extension activates or validates your key, a request is sent to our licensing server at gocapfu.com containing only the license key itself

2.4  Website data

When you visit gocapfu.com, we may automatically receive:

• Your IP address (used for security and rate-limiting, not for tracking)
• Browser type, OS, and referral URL via standard server logs
• Pages visited and time on site, collected anonymously via privacy-respecting analytics

We do not use Google Analytics or any cross-site tracking pixels.

2.5  No extension telemetry

The CapFu extension does not send crash reports, usage analytics, or any telemetry to our servers or to any third party. Its only outbound network request is the license validation described in section 2.3.

Payment processing — Stripe

Pro subscription payments are processed by Stripe, Inc. Your card details go directly to Stripe's servers and are never seen by us. Stripe is PCI DSS Level 1 certified. Stripe Privacy Policy →

E-commerce platform — WooCommerce

Our store and license management is built on WooCommerce running on our own servers in the United States. No data is shared with Automattic as part of our licensing setup.

Email delivery

Transactional emails (receipts, license keys) are sent via a third-party email delivery provider. Only your email address and order reference are shared for this purpose.

Hosting — US-based infrastructure

Our servers are located in the United States. By using CapFu, you consent to your information being processed and stored in the United States.

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a request, email us at privacy@gocapfu.com with the subject line "California Privacy Request."

European Economic Area, UK & Switzerland (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, your personal data is protected under the EU General Data Protection Regulation (GDPR) and equivalent UK and Swiss law. CapFu, LLC is the data controller for your personal information.

We process your personal data on the following legal bases: performance of a contract (issuing and validating your Pro license and providing support); our legitimate interests (securing our service, preventing fraud, and operating our website); your consent (marketing emails, which you may withdraw at any time); and compliance with legal obligations (such as tax record-keeping).

In addition to the choices listed above, you have the right to restrict or object to our processing of your data, the right to withdraw consent at any time, and the right to lodge a complaint with your local data protection supervisory authority.

Because our servers are located in the United States, your personal data is transferred to and processed in the US. Where required by law, we rely on appropriate safeguards and your explicit consent for this transfer. To exercise any of these rights, email us at privacy@gocapfu.com with the subject line "GDPR Request."