Privacy Policy
Last updated: 6. 2. 2026
Introduction
Your privacy is important to us. This policy explains what personal data we collect, why we need it, how we protect it, and what rights you have.
Data Controller
The controller of your personal data is:
Capsa.cz, s.r.o.
Company ID: 24153982
Pobřežní 249/46, Karlín, 186 00 Prague 8, Czech Republic
What Data We Collect
Account Data
Email, first name, last name, hashed password. When signing in with Google, also your Google ID.
Usage Data
Transaction history, credit balance, recording metadata (duration, format, upload date).
Content
Audio and video recordings you upload, and generated transcriptions.
Technical Data
IP address, browser information, cookies for service operation.
Why We Process Your Data
• Service provision: processing recordings, managing accounts and credits
• Communication: sending payment confirmations, notifications, and responding to inquiries
• Service improvement: anonymous usage analysis to improve features
• Legal compliance: accounting and tax records
Legal Basis for Processing
• Contract performance: processing necessary for service provision
• Consent: marketing communication and analytics cookies
• Legitimate interest: service security and fraud prevention
• Legal obligation: accounting and tax records
Marketing Communications
Based on our legitimate interest, we may send you marketing communications related to the Sigmity service or your account, such as information about new features, special offers, or important service changes.
You can unsubscribe from these marketing communications at any time by clicking the link in each email or by contacting our support.
Who We Share Data With
We share your data only with service providers essential for operations:
• RunPod, Inc. (EU/EEA) – AI transcription processing. Data stays in Europe.
• Anthropic, PBC (USA) – AI services for text correction.
• Stripe, Inc. – secure payment processing
• Google LLC – sign-in with Google account, analytics and advertising
• Meta Platforms, Inc. – marketing and advertising services
We never sell your data to third parties.
How Long We Keep Your Data
• Recordings and transcriptions: 30 days from upload
• Account data: for the duration of the account
• Transaction records: 10 years (legal requirement)
After account deletion, your personal data is removed within 30 days, except for data required by law.
Your Rights
Under GDPR, you have the following rights:
Right of access – you can request a copy of your data
Right to rectification – you can correct inaccurate data
Right to erasure – you can request deletion of your data
Right to restriction of processing
Right to data portability
Right to object to processing
To exercise your rights, contact us at
You also have the right to lodge a complaint with the Czech Data Protection Office (uoou.cz).
Data Security
We use standard security measures:
Encrypted data transmission (HTTPS)
Password hashing (bcrypt)
Restricted data access to authorized personnel only
Regular security reviews
Cookies
• Necessary cookies – required for website operation, cannot be disabled
• Analytics cookies – with your consent, for service improvement (Google Analytics)
• Marketing cookies – with your consent, for displaying relevant ads (Google Ads, Meta/Facebook Pixel)
You can change cookie settings at any time by clicking the link in the website footer.
Policy Changes
We will notify you of significant changes to this policy by email.
Contact
If you have questions about data protection, contact us at