Privacy Policy

Last updated: 6. 2. 2026

Introduction

Your privacy is important to us. This policy explains what personal data we collect, why we need it, how we protect it, and what rights you have.


Data Controller

The controller of your personal data is:

Capsa.cz, s.r.o.

Company ID: 24153982

Pobřežní 249/46, Karlín, 186 00 Prague 8, Czech Republic


What Data We Collect

Account Data

Email, first name, last name, hashed password. When signing in with Google, also your Google ID.

Usage Data

Transaction history, credit balance, recording metadata (duration, format, upload date).

Content

Audio and video recordings you upload, and generated transcriptions.

Technical Data

IP address, browser information, cookies for service operation.


Why We Process Your Data

  • • Service provision: processing recordings, managing accounts and credits

  • • Communication: sending payment confirmations, notifications, and responding to inquiries

  • • Service improvement: anonymous usage analysis to improve features

  • • Legal compliance: accounting and tax records


Legal Basis for Processing

  • • Contract performance: processing necessary for service provision

  • • Consent: marketing communication and analytics cookies

  • • Legitimate interest: service security and fraud prevention

  • • Legal obligation: accounting and tax records


Marketing Communications

Based on our legitimate interest, we may send you marketing communications related to the Sigmity service or your account, such as information about new features, special offers, or important service changes.

You can unsubscribe from these marketing communications at any time by clicking the link in each email or by contacting our support.


Who We Share Data With

We share your data only with service providers essential for operations:

  • • RunPod, Inc. (EU/EEA) – AI transcription processing. Data stays in Europe.

  • • Anthropic, PBC (USA) – AI services for text correction.

  • • Stripe, Inc. – secure payment processing

  • • Google LLC – sign-in with Google account, analytics and advertising

  • • Meta Platforms, Inc. – marketing and advertising services

We never sell your data to third parties.


How Long We Keep Your Data

  • • Recordings and transcriptions: 30 days from upload

  • • Account data: for the duration of the account

  • • Transaction records: 10 years (legal requirement)

After account deletion, your personal data is removed within 30 days, except for data required by law.


Your Rights

Under GDPR, you have the following rights:

  • Right of access – you can request a copy of your data

  • Right to rectification – you can correct inaccurate data

  • Right to erasure – you can request deletion of your data

  • Right to restriction of processing

  • Right to data portability

  • Right to object to processing

To exercise your rights, contact us at

You also have the right to lodge a complaint with the Czech Data Protection Office (uoou.cz).


Data Security

We use standard security measures:

  • Encrypted data transmission (HTTPS)

  • Password hashing (bcrypt)

  • Restricted data access to authorized personnel only

  • Regular security reviews


Cookies

  • • Necessary cookies – required for website operation, cannot be disabled

  • • Analytics cookies – with your consent, for service improvement (Google Analytics)

  • • Marketing cookies – with your consent, for displaying relevant ads (Google Ads, Meta/Facebook Pixel)

You can change cookie settings at any time by clicking the link in the website footer.


Policy Changes

We will notify you of significant changes to this policy by email.


Contact

If you have questions about data protection, contact us at