Privacy

Your family's conversations are not ours.

Last updated 23 August 2026

This policy is written to be read, not skimmed past. It covers what we collect, why, and what we will never do with it.

What we collect

• Account: your email address, used to sign you in and to send you your capsule links. No passwords exist.
• Recordings: when — and only when — both people on a call agree to record, we store the video and audio of that call, along with the date and the question asked. A visible indicator is shown for the entire duration of any recording.
• Names: the display names you type for yourself and the people you call.
• Payments: handled entirely by Stripe. We never see or store card numbers.
• Technical basics: standard server logs (IP, timestamp, page requested) kept briefly for security and debugging.

What we do with recordings

• Store them so your family can watch them. That is the product.
• Process them automatically (stitching, thumbnails, and — when enabled — transcription) so your archive is usable.

What we will never do

• We do not sell your data. Not recordings, not emails, not anything, to anyone.
• We do not use your recordings to train AI models, ours or anyone else's.
• We do not show ads inside the product or share your data with advertisers.
• Nobody at CallCapsule watches your recordings, except with your explicit permission during a support request you initiate.

Consent and recording laws

Recording only ever starts after the person being recorded actively agrees on that call, every time. Many places require the consent of everyone being recorded; CallCapsule is built so that consent is always obtained. You are responsible for using the product lawfully where you live.

Who can see what

Recordings are private to the capsule they live in. They are visible to the capsule's owner and anyone the owner shares access with. Call invite links let someone join a call, not view the archive.

Your data is portable and deletable

• You can download every original recording and transcript, in standard formats, at any time, free.
• You can delete a recording, a capsule, or your entire account by contacting us; deletion is permanent and completed within 30 days.

Where data lives

Recordings and account data are stored on our servers in the EU (Hetzner). Email is delivered via Resend. Payments run through Stripe. These providers process data only as needed to provide their service to us.

Cookies

One cookie, used to keep you signed in. No tracking cookies, no analytics cookies, no third-party cookies inside the product. Our public marketing pages may use an advertising pixel; the product itself does not.

Contact

privacy@callcapsule.co — a human reads it.