Privacy Policy

May 20, 2026

This Privacy Policy supersedes all prior versions.

Capturly is operated by Corey Alan LLC, a Wyoming limited liability company ("Capturly," "we," "us," or "our"). Capturly is operated from the United States and is intended for users in the United States. See Section 11 for information for users outside the United States.

Registered office:

Corey Alan LLC
30 N Gould St #51301
Sheridan, WY 82801
United States

We collect the following categories of personal information:

• Identifiers: name, email address, account username, IP address, device identifiers.
• Commercial information: subscription tier, purchase history, billing details (payment card data is processed by Stripe; we never store full card numbers).
• Internet / network activity: app version, operating system, feature usage events, crash reports, error logs, session metadata.
• Audio / visual information: the audio and video files of recordings you elect to back up or share through our cloud features. See Section 4.
• Inferences: aggregated usage patterns used to improve the product.

Sources: directly from you (account creation, recordings, support requests), automatically from the app (telemetry, crash reports), and from our service providers (Stripe billing status, Google Cloud storage events).

We do not intentionally collect "sensitive personal information" as defined by the CPRA, except as incidental to recordings you create (which may contain voice or biometric information). We do not use this information to infer characteristics about you.

We use your information for the following purposes:

• To provide, maintain, and support the Software;
• To process payments and manage your subscription;
• To detect, prevent, and respond to fraud, abuse, and security incidents;
• To send transactional and service emails (account confirmations, security alerts, billing receipts, password resets);
• To send marketing emails — only with your consent or to existing customers as permitted by the CAN-SPAM Act, and only until you unsubscribe;
• To analyze product usage and improve features; and
• To comply with legal obligations.

We process personal information only on the basis necessary to provide the Service, with your consent where required, or as otherwise permitted by applicable law.

Capturly is designed as a local-first recorder. By default, your audio and video files are written to your local device and remain there. The following limited exceptions apply:

• Progressive Cloud Backup (Pro): If you are on a Pro plan and have Cloud Backup enabled, recording bytes are streamed in real time to Google Cloud Storage so that you can recover the file if your local device fails. You can disable Cloud Backup in app settings at any time. Files are encrypted in transit (TLS) and at rest.
• Multi-participant sessions: When you record a multi-participant session, each participant's local recording is uploaded to a temporary Google Cloud Storage bucket via short-lived V4 signed URLs so the host can assemble the session. Files in this bucket are automatically deleted after 7 days. Our servers never proxy the file bytes.
• Recordings you save to your Library: Any file you explicitly save to or share through your Capturly Library is hosted on our infrastructure under the same terms until you delete it.

You retain ownership of your recordings at all times. See our Terms of Service for the limited license you grant us solely to host and process them on your behalf.

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We have not done so in the preceding 12 months. We do not rent or trade personal information.

We share information with the following categories of service providers (subprocessors), each of whom is bound by written data-processing terms and may only use the data to perform services for us:

• Stripe, Inc. — payment processing
• Google LLC (Google Cloud Storage): recording storage and infrastructure
• Sentry — crash reporting and error monitoring
• Email delivery provider — transactional and marketing email
• Analytics provider — product usage analytics

We may also disclose information when required by law, subpoena, court order, or other legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of Capturly, our users, or others.

Capturly is operated from the United States. If you access the Software from outside the United States, your personal information will be transferred to, stored, and processed in the United States and other countries where our service providers operate.

For transfers of personal data from the EEA, UK, and Switzerland to the U.S., we rely on:

• The EU-U.S. Data Privacy Framework (DPF) and its UK Extension where our subprocessors are certified;
• Standard Contractual Clauses approved by the European Commission for transfers to subprocessors not covered by the DPF; and
• Supplementary measures, including encryption in transit and at rest, access controls, and minimization of transferred personal data.

You may request a copy of the relevant transfer mechanism by emailing privacy@capturly.app.

We retain personal information only as long as necessary for the purposes described in this Policy:

• Account data: for the life of your account, then 30 days after account deletion.
• Billing records: 7 years (tax and audit requirements).
• Cloud-backed recordings: until you delete them or close your account.
• Multi-participant transfer files: automatically deleted after 7 days.
• Crash logs and analytics events: 90 days in identifiable form; aggregated/de-identified data may be retained indefinitely.
• Marketing email lists: until you unsubscribe.

We implement administrative, technical, and physical safeguards designed to protect your personal information, including:

• TLS encryption for all data in transit
• Encryption at rest for cloud-backed recordings
• Role-based access controls and least-privilege provisioning
• Routine security review of code and infrastructure
• PCI-DSS compliant payment processing via Stripe

No security program is perfect. In the event of a personal data breach that creates a risk to your rights or freedoms, we will notify affected users and, where required, supervisory authorities within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33 and applicable U.S. state breach-notification laws.

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your data (subject to limited exceptions).
• Portability — receive a copy of your data in a structured, machine-readable format.
• Restriction / Objection — limit or object to certain processing.
• Withdraw consent — for processing based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.
• Opt out of marketing — unsubscribe via any marketing email.
• Lodge a complaint — EEA/UK residents may complain to their local supervisory authority.
• Non-discrimination — we will not deny service, charge different prices, or provide a lesser quality of service for exercising any privacy right.

To exercise any of these rights, email privacy@capturly.app or use the account deletion form. We will respond within the timeframes required by applicable law (generally 45 days under CCPA, 30 days under GDPR; we may extend by an additional period where permitted). We may need to verify your identity before fulfilling a request.

This section supplements Section 9 for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Notice at Collection. The categories of personal information we collect, the sources, purposes, and recipients are described in Sections 2, 3, and 5 above. We collect personal information for the business and commercial purposes disclosed there. We do not collect personal information for any undisclosed purpose.

No Sale or Sharing. We do not sell personal information and we do not share personal information for cross-context behavioral advertising. We have not done so in the preceding 12 months. A "Do Not Sell or Share My Personal Information" link is therefore not applicable.

Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes that would trigger the right to limit under CPRA §1798.121.

Submitting a Request. Email privacy@capturly.app or use our contact form. Authorized agents must provide written authorization signed by the consumer plus proof of the agent's identity. We will not discriminate against you for exercising your rights.

"Shine the Light" (Cal. Civ. Code §1798.83). California residents may request information about disclosures of personal information to third parties for those third parties' direct marketing purposes. We do not make such disclosures.

Capturly is operated from the United States and is primarily intended for users in the United States. We do not currently target, market to, or actively offer the Service to residents of the European Economic Area, the United Kingdom, or Switzerland.

If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with the laws of your jurisdiction. Your information will be transferred to, stored, and processed in the United States as described in Section 6.

To the extent any non-U.S. privacy law applies to our processing of your personal information, you may exercise the rights described in Section 9 by contacting privacy@capturly.app. You also retain any right available to you under local law to lodge a complaint with your local data-protection authority.

Automated decision-making: We do not engage in solely automated decision-making that produces legal or similarly significant effects concerning you.

If we send you marketing email, that email will:

• Use accurate "from," "reply-to," and subject lines;
• Clearly identify Capturly as the sender;
• Include our physical mailing address (below);
• Include a working unsubscribe link; and
• Be sent only with your consent or to existing customers regarding products, features, or services related to those you have purchased.

You can unsubscribe at any time via the link in any marketing email. We will honor opt-out requests within 10 business days in accordance with the CAN-SPAM Act (15 U.S.C. §7704). Transactional and service-related emails (e.g., billing receipts, security alerts, password resets) will continue while your account is active because they are necessary to provide the Software.

Our mailing address for these purposes:

Corey Alan LLC
30 N Gould St #51301
Sheridan, WY 82801
United States

Capturly is not directed to children under 16 years of age, and we do not knowingly collect personal information from children under 13 (or the equivalent minimum age set by the applicable EU Member State under GDPR Article 8). If you believe a child has provided us personal information, please contact privacy@capturly.app and we will promptly delete it.

Our web app uses strictly necessary cookies for authentication and session management. Where required by law, we request your consent before setting analytics or other non-essential cookies, and you may manage your preferences in your browser at any time. The Capturly desktop application itself does not set browser cookies; it uses local application storage for session state.

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated Policy on this page with a new effective date and, where appropriate, notify you by email. Your continued use of Capturly after the effective date constitutes acceptance of the revised Policy.

Last updated: May 20, 2026

Privacy questions, data-subject requests, and other inquiries:

• Email: privacy@capturly.app
• Mail: Corey Alan LLC, 30 N Gould St #51301, Sheridan, WY 82801, United States