Privacy Policy

Last updated: January 1, 2025

This Privacy Policy explains how Capto CRM collects, uses, discloses, and safeguards your information when you use our website and application.

1. Information We Collect

Account information: your name, email address, phone number, company name, and password when you create an account.

Contact and lead data: information you upload or your leads and clients submit, such as names, phone numbers, email addresses, and notes.

Communications data: the content of SMS messages, emails, and calls sent or received through the platform, along with delivery status and timestamps.

Pipeline and activity data: deal stages, tasks, notes, and other records you create while using Capto.

Usage data: log data, device information, browser type, IP address, and pages visited within the app.

Third-party account data: when you connect integrations (such as Google), we receive the profile and business information those services share with us.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Capto platform
  • Create and manage your account and subscription
  • Send transactional and account-related communications
  • Enable you to send SMS, email, and other communications to your leads and clients
  • Process payments and manage billing through our payment processor
  • Improve, personalize, and expand our product and services
  • Detect, prevent, and address fraud, abuse, and security issues
  • Comply with legal obligations and enforce our agreements
  • Provide customer support

3. Third-Party Service Providers

We work with trusted third-party providers to operate Capto. These providers only receive the information necessary to perform their functions:

  • Paddle: our payment processor and merchant of record, which handles billing, subscriptions, and payment information. See Paddle's Privacy Policy.
  • Twilio: used to send and receive SMS messages and phone calls on behalf of users.
  • Google: used for authentication and, where connected, Google Business Profile integrations.
  • AI providers: used to power AI-assisted features such as message drafting and lead summarization.
  • Hosting and infrastructure providers: used to store data and run our application securely.
  • Professional advisers: accountants, lawyers, and auditors, as needed and under confidentiality obligations.

We require all third-party providers to respect the security of your data and to treat it in accordance with the law.

3a. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

  • Performance of a contract: to provide the services you have signed up for.
  • Legitimate interests: to operate, secure, and improve our services.
  • Consent: where you have given us permission, such as for certain marketing communications.
  • Legal obligation: where we must process data to comply with the law.

4. Google API Services and Limited Use Disclosure

Capto's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request the following scopes:

  • openid, userinfo.email, userinfo.profileused to authenticate your identity and log you into Capto.
  • https://www.googleapis.com/auth/business.manageused to let you manage your Google Business Profile from within Capto.

Access: Google Business Profile data is accessed only to display and manage your listing, reviews, and posts inside Capto.

No unauthorized access: we do not sell, share, or use this data for advertising, and it is not accessed by anyone other than you and the systems that power the feature you requested.

Usage: data obtained through Google APIs is used solely to provide and improve the specific feature it was requested for.

Storage: data is stored securely and encrypted at rest and in transit.

Retention: we retain Google API data only as long as needed to provide the connected feature, or until you revoke access.

Revocation: You may revoke Capto's access to your Google account at any time from Settings → Integrations within Capto, or directly from myaccount.google.com/permissions. If you have questions about revocation, contact us at privacy@usecapto.com .

For more details, see Google's API Services User Data Policy, which governs our use of this data.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our website and application. These may include:

  • Essential cookies required for login and core functionality
  • Analytics cookies to understand how visitors use our site
  • Preference cookies to remember your settings
  • Security cookies to help detect fraud and abuse

6. Data Sharing and Disclosure

We do not sell your personal information. We may share data with service providers who assist us in operating Capto, when required by law, to enforce our agreements, to protect our rights and the safety of our users, or in connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.

7. Data Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your personal data
  • Object to or restrict certain processing
  • Request a copy of your data in a portable format
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@usecapto.com.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. We may retain and use information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

10. International Data Transfers

Your information may be transferred to, and processed in, countries other than the one in which you reside. We take steps to ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.

11. Children's Privacy

Capto is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Changes to This Policy and Contact

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date above. If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@usecapto.com