Privacy Policy
Last updated: September 25, 2026
This policy explains what personal data [COMPANY LEGAL NAME] ("CapyArk", "we", "us") collects when you use capyark.com and the CapyArk backup service, why we collect it, and the rights you have over it. We are the data controller for the account data described below and can be reached at privacy@capyark.com.
The short version
- We collect the minimum needed to run a backup service: account details, billing status, and operational metrics.
- The contents of your backups are yours. We store them and we don't look at them. They are encrypted at rest, which protects them if a disk leaves our control. We manage the keys so backups and restores work automatically, so for data even we cannot read, encrypt it on your device before uploading.
- We don't sell data, we don't run ads, and the website sets no tracking cookies.
1. Data we collect
| Category | What | Why (legal basis) |
|---|---|---|
| Account | Email address, company name, hashed password, MFA settings, SSH public keys | To provide the service you signed up for (contract) |
| Billing | Plan, subscription status, invoice history. Card details are collected and stored by Stripe, never by us. | Billing and tax compliance (contract, legal obligation) |
| Operational | Storage usage, snapshot metadata (names, sizes, timestamps), daily ingress volume, connected device names and VPN status | To operate quotas, snapshots, billing, and abuse prevention (contract, legitimate interest) |
| Security logs | Portal login events, SSH session audit events (connection metadata and commands — never file contents), IP addresses | Tenant security and incident investigation (legitimate interest) |
| Waiting list | Email address, and optionally name, company, intended use and storage needs; the page you came from, IP address and browser user agent at signup | To invite you when signups open, and to filter automated signups (consent, legitimate interest) |
| Support | Emails you send to support and our replies | To help you (contract, legitimate interest) |
2. Your backup contents
The files and datasets you back up may contain personal data of your own users or customers. For that content, you are the controller and we act as a processor: we store it on your instruction and do not access it except when strictly necessary to operate the service, at your explicit request for support, or where required by law. Backup contents are encrypted at rest with per-tenant keys. If you need a Data Processing Agreement, contact privacy@capyark.com.
3. Where data is stored
Backup data is stored on our servers located in the United States (Central Texas). Account and billing records are stored with our infrastructure providers listed below. We do not transfer backup contents outside the United States. If we add a backup server outside the United States (for example, to offer geographically separate redundancy on a higher plan tier), we will update this section before doing so.
4. Sub-processors and third parties
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | USA/EU (SCCs) |
| Resend | Transactional email | United States |
| Cloudflare | Website hosting, DNS and TLS certificates | Global edge network |
| [HOSTING PROVIDER(S)] | Server infrastructure | United States (Central Texas) |
Our VPN control plane is self-hosted — device coordination data does not pass through any third-party VPN service.
5. Retention
- Backup data: kept while your subscription is active; preserved for at least 7 days after your subscription ends so you can reactivate, and permanently deleted no later than 30 days after it ends.
- Account data: kept while your account exists, then deleted within [30] days of account deletion.
- Waiting list: until you sign up or ask to be removed, and at most [12] months.
- Billing records: kept for [7 / 10] years as required by tax law.
- Security and audit logs: kept for [90] days, longer only if part of an active investigation.
6. Cookies and analytics
The marketing website (capyark.com) sets no cookies. The client portal (app.capyark.io) uses only essential cookies/tokens required for login sessions. If we add analytics, we will use a privacy-friendly, cookieless tool and update this policy — we will never add third-party advertising or cross-site trackers.
7. Security
- All traffic to the portal and API is encrypted with TLS; backup traffic travels inside a Tailscale-encrypted private network.
- Each customer's storage is an isolated dataset on an isolated VPN network — tenants cannot see each other.
- Dataset encryption at rest with per-tenant keys on every account. Keys are managed by CapyArk and stored only in wrapped (encrypted) form.
- Passwords are stored hashed (bcrypt); optional two-factor authentication on every account.
- SSH access is restricted to file-transfer commands only — no shell access.
8. Your rights
Depending on your location (and always if you are in the EU/EEA or UK), you have the right to access, correct, export, restrict, object to the processing of, or delete your personal data. You can edit your profile and delete files and your own snapshots in the portal. For export, account closure or any other request, email privacy@capyark.com from your account email address. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.
9. Changes
We will notify you by email of material changes to this policy at least 30 days before they take effect. The "Last updated" date at the top reflects the current version.
10. Contact
[COMPANY LEGAL NAME], [REGISTERED ADDRESS]
Privacy inquiries: privacy@capyark.com
General support: support@capyark.com