Legal
Privacy Policy
Plain language, because you should actually read this one. Caplyn is a service of Ingenuity Advisory Partners.
Who we are
Caplyn is operated by Ingenuity Advisory Partners, trading as Caplyn. Ingenuity Advisory Partners is the data controller for the personal data described in this notice and decides why and how it is processed. Contact us about privacy at hello@caplyn.ai.
What we collect
Account data (email address, name, login credentials and authentication metadata); content data (brand profiles, website URLs you submit, prompts, generated copy and images); billing-related identifiers received from our payment provider (plan, subscription status, transaction reference — we never see your full card details); connected-account data (platform account identifiers and access tokens); support messages; and usage and technical data (feature usage, credit ledger entries, device and browser information, IP address, log data).
Why we collect it, and our legal basis
To create and operate your account, generate content in your brand voice, track credits and fulfil your plan — performance of our contract with you. To secure the service, prevent fraud and abuse, debug and improve the product — our legitimate interests. To send marketing or snapshot nurture emails where you asked for them — your consent, withdrawable at any time via the unsubscribe link in every message. To keep tax, accounting and compliance records — legal obligation.
AI processing
Prompts, submitted website content and brand context are sent to our AI model providers to produce your content. We do not sell your data and we do not use your private brand content to train public models.
Connected accounts
If you connect a social account such as a Facebook page, Instagram, LinkedIn, X, TikTok, Pinterest, Threads or YouTube profile, we store the tokens required to publish on your behalf and the identifiers of the accounts you selected. You can disconnect at any time, which revokes our access going forward.
Who we share it with
Service providers acting as processors on our behalf: cloud hosting and database infrastructure, AI model providers, and our transactional email provider. Paddle.com Market Ltd, our reseller and Merchant of Record, which receives your name, email, billing address, country and transaction data in order to take payment, manage your subscription, calculate and remit tax, handle invoicing, refunds and billing support — Paddle acts as an independent controller for that processing under its own privacy notice. Professional advisers such as our accountants and lawyers. Authorities where we are legally required to disclose. We do not sell personal data.
International transfers
Our providers may process data outside your country, including in the United States. Where personal data leaves the UK or EEA we rely on adequacy decisions or Standard Contractual Clauses with appropriate supplementary safeguards.
Storage, security and retention
Data is stored on managed cloud infrastructure. We apply appropriate technical and organisational measures: encryption in transit (TLS) and at rest, row-level security policies so records are only readable by the owning account, private storage buckets served through short-lived signed URLs, server-side-only handling of social tokens and API secrets, role-scoped database access, and secrets held in a managed secret store rather than in code. Account and content data is kept while your account is active and for up to 90 days after deletion; billing and tax records are kept for as long as the law requires; marketing suppression records are kept indefinitely so we can honour unsubscribes.
Your rights
Subject to applicable law you can request access to your data, correction, erasure, restriction, portability, object to processing based on legitimate interests, and withdraw consent for marketing at any time. Email hello@caplyn.ai and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your local supervisory authority.
Cookies
We use strictly necessary cookies and local storage for sign-in sessions and security, and our payment provider sets cookies needed to complete checkout. We do not run advertising cookies. You can clear or block cookies in your browser, though sign-in will not work without the essential ones.
Your controls
You can export or delete your generated content, disconnect social accounts, unsubscribe from marketing emails, and request account deletion by contacting support.