Privacy Policy

1. Introduction

Kaptter (kaptter.com) is a CRM platform that helps businesses manage leads and customer relationships. This Privacy Policy explains how we collect, use, and protect your personal data when you use our services.

2. Information We Collect

We collect the following types of information:

• Account information — your name, email address, and hashed password when you register.
• Business data — contacts, deals, companies, notes, and other CRM data you enter into the platform.
• Meta/Facebook integration data — OAuth tokens and page data when you connect Meta integrations.
• Lead form submissions — lead data received via Meta Lead Ads webhooks on your behalf.
• Usage data and logs — IP addresses, browser type, pages visited, and timestamps for security and analytics purposes.

3. How We Use Your Information

• To provide and continuously improve the Kaptter CRM service.
• To sync leads from your connected Meta pages into your CRM account.
• To send transactional emails such as invitations and password resets.
• To generate reports and analytics visible only within your organization.

4. Data Sharing

We do not sell your data. We share data only with trusted third-party service providers necessary to operate the platform:

• Meta/Facebook — to receive lead data you explicitly authorize via OAuth.
• Resend — for transactional email delivery.
• Supabase — for secure database storage.
• Kaptter infrastructure — for secure application hosting and deployment.

All third-party providers are bound by data processing agreements and are required to protect your data.

5. Meta/Facebook Data

When you connect your Meta account to Kaptter, we receive and securely store OAuth tokens to access your Facebook Pages and Lead Ads on your behalf. We only access data you explicitly authorize through Meta's OAuth consent flow. Lead data received via Meta webhooks is stored securely and used solely within your Kaptter organization — it is never shared with other organizations or used for advertising purposes.

6. Data Retention

We retain your data for as long as your account remains active. If you close your account, we will delete your personal data within 30 days upon request. You may request deletion at any time by emailing info@kaptter.com.

7. Security

We implement industry-standard security measures including encryption of data at rest and in transit (TLS), bcrypt-hashed passwords, and secure OAuth token storage. Access to production systems is restricted and audited.

8. Your Rights

You have the right to access, correct, export, or delete your personal data at any time. To exercise these rights, please contact us at info@kaptter.com.

9. Contact

If you have any questions about this Privacy Policy, please contact us at info@kaptter.com.