Legal
Privacy Policy
Effective date: 14 August 2026
This Policy explains how OnnOff Studio (“we”, “us”) collects, uses, shares, and protects personal data when you use Capten (https://capten.cc). We aim to comply with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act), and other laws that may apply to you.
1. Data fiduciary / controller
OnnOff Studio operates Capten and determines how personal data is processed for the Service.
Privacy requests: privacy@capten.cc · Support: support@capten.cc
2. What we collect
Depending on how you use Capten, we may process:
- Account data: name, email, password hash (or Google OAuth identifiers), plan, billing status
- Usage data: jobs, uploads metadata, editor settings, brand kits, workspace/client labels you create
- Media you submit: video/audio files and derived assets (transcripts, captions, waveforms, exports) needed to provide the Service
- Communications: support messages, WhatsApp conversation metadata when you use WhatsApp features
- Technical data: IP address, device/browser type, approximate location derived from IP, cookies or similar technologies, logs for security and reliability
- Payment-related data: tokens/references from our payment provider (we do not store full card numbers)
3. How we use data
We use personal data to:
- Provide transcription, editing, export, brand kits, workspaces, and WhatsApp captioning
- Authenticate users, secure accounts, and prevent abuse
- Bill subscriptions, enforce plan limits, and send transactional emails
- Improve model pipelines, product quality, and performance (where permitted and with appropriate safeguards)
- Comply with law and respond to lawful requests
We do not sell your personal data.
4. Legal bases / consent
Where the DPDP Act or similar laws apply, we process personal data for lawful purposes such as providing the Service you request, fulfilling contracts (including paid plans), complying with law, and - where required - with your consent (for example certain marketing messages). You may withdraw consent where processing is consent-based, without affecting prior lawful processing.
6. International processing
Providers may process data in India and other countries. Where we transfer personal data internationally, we take steps designed to provide appropriate protection consistent with applicable law.
7. Retention
We retain account and billing records as needed for the Service, audits, and legal obligations. Media and job artefacts are kept while your account is active and for a limited period after deletion or inactivity so you can recover work or we can investigate abuse - then deleted or anonymised, unless law requires longer retention.
8. Security
We use administrative, technical, and organisational measures appropriate to the risk (access controls, encryption in transit where standard, least-privilege practices). No method of transmission or storage is 100% secure.
9. Your rights
Subject to applicable law, you may request access, correction, deletion, or withdrawal of consent for your personal data, and you may raise a grievance. Contact privacy@capten.cc. We may need to verify your identity before acting on a request.
If you use Capten via an organisation’s workspace, some requests may need to go through that organisation’s admin.
10. Children
Capten is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps.
12. Changes
We may update this Policy periodically. The effective date at the top of the page will change when we do. Significant changes may also be communicated in-product or by email where appropriate.