Privacy policy

What we collect

Account information (name, email, profile photo where you sign in with Google), event configuration, member roles, invitation records, and metadata about contributed media: file names, sizes, types, capture times, approval status, captions, optional transcripts and compact numeric waveform data for voice notes. We also collect privacy-conscious product analytics events (for example "event created", "render completed") that never include file names, captions, transcripts, event names or drive identifiers.

What we never collect

Your photo, video and audio files. They are stored on your device or transferred directly from the contributor's browser to the event host's connected cloud drive. Capsemble servers do not receive, buffer or retain media bytes, thumbnails or base64 copies. The one exception is content you ask the Studio to generate (see “AI assistance” below): the finished picture, clip or soundtrack passes through our servers in memory on its way to your browser and is not stored.

Cloud storage providers

When a host connects Google Drive, we request the narrowest practical scope: access to files Capsemble creates, not the whole drive. OAuth refresh credentials are encrypted with a managed key service before being stored and are never exposed to browser code. Files stored in a host's drive are processed by Google under Google's own terms.

Google user data.Capsemble's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we request the drive.filescope only; we use it solely to create the event folder and to read and write files inside it on the host's and their guests' behalf; we store file references (id, name, size, type, contributor, approval status) and never the file contents; we do not transfer Google user data to third parties except as needed to provide the service (Google itself), for security, or as required by law; we do not use it for advertising; and no human at Capsemble reads it except with the host's explicit permission for support, or as required for security or legal compliance. You can revoke access at any time in Capsemble Settings or at myaccount.google.com/permissions.

AI assistance

Media analysis (blur detection, duplicate grouping, transcription) runs in your browser. A remote text model may receive only non-sensitive, user-approved text such as captions or transcripts — never media bytes — and only where AI features are enabled. We do not train models on your content.

Generated content.Hosts can ask Capsemble Studio to create artwork, short video clips and soundtracks from a written description. What is sent to the AI partner is the words the host types (with our own framing added, such as “no text, space for a message”) and the event title — never your photos, videos, voice notes or guest details. Partners currently include Google (Vertex AI), Kling and OpenAI; which one handles a request depends on what is being made. They process those words under their own terms; we choose settings that do not use them to train models, and some partners may keep prompts briefly for abuse monitoring. The result is returned to the host's browser and, if they choose to keep it, saved into their own event folder — it belongs to them and Capsemble keeps only a file reference. Before first use a host accepts a short notice saying exactly this, and we record that acceptance.

An event song.A host can have a song written and sung from the words left at their event. The host chooses line by line which written captions, approved voice-note transcripts and lines of their own are included, and sees the exact text before anything is sent. Only that text and a style note go to the partner (Google) — never the recordings, photos, guest names or anything else about the event. The sung lyrics are kept with the host's song so they can read them back. If a future feature ever needs to send a specific photo, clip or recording to a partner (for example to animate it), it will ask for separate, item-by-item permission first.

Retention and deletion

Events expire per the host's retention setting. Deleting an event removes Capsemble records; the host separately chooses whether app-created files in their drive are removed. Deletion and export actions are recorded in a restricted audit log. Contributors may remove their own eligible contributions before an event is locked.

Your rights

You may request access to or deletion of your account data at any time by emailing support@capsemble.com. Because media never rests with us, media deletion is under your or your host's direct control in your own storage.