Privacy Policy

Introduction

Caprese ("we", "our", or "us") is operated by Wavefield LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at caprese.ai (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect your email address and name. If you sign in with Google, we receive your name, email, and profile picture from Google.

Project Data

We store the URLs of prototypes you add to Caprese, along with feedback (comments, screenshots, and recordings) submitted by you and your reviewers. We do not store or access your prototype's source code.

Reviewer Information

Reviewers who provide feedback may optionally provide their name. We assign anonymous identifiers to track feedback sessions. We do not require reviewers to create accounts.

Usage Data

We automatically collect certain information when you use the Service, including your IP address, browser type, pages visited, and timestamps. This helps us improve the Service and diagnose technical issues.

Recordings

Talkthrough recordings capture screen activity and audio during feedback sessions. These are stored securely and only accessible to project owners and authorized team members.

How We Use Your Information

• To provide and maintain the Service
• To process feedback and generate AI summaries
• To send you notifications about your projects (e.g., new feedback)
• To respond to your requests and support inquiries
• To improve and personalize the Service
• To detect and prevent fraud or abuse
• To comply with legal obligations

AI Processing

We use third-party AI services (such as OpenAI) to generate feedback summaries, transcribe recordings, and create Fix Prompts. Your feedback content is sent to these services for processing. We do not use your data to train AI models.

Data Sharing

We do not sell your personal information. We may share data with:

• Service providers: Third parties that help us operate the Service (hosting, AI processing, email delivery)
• Team members: If you invite team members to your projects, they can access project data
• Legal requirements: If required by law or to protect our rights

Data Security

We implement industry-standard security measures to protect your data. All data is encrypted in transit (TLS) and at rest. However, no method of transmission over the Internet is 100% secure.

Data Retention

We retain your data for as long as your account is active. When you delete a project, associated feedback and recordings are permanently deleted within 30 days. If you delete your account, all your data is removed within 30 days.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications

To exercise these rights, contact us at support@caprese.ai.

Browser Extension

The Caprese browser extension allows project owners to activate feedback tools on any webpage without embedding code. The extension collects additional technical data to help you debug and improve your product.

Extension Permissions

The extension requests access to the active tab when you activate it, along with storage for your preferences and authentication state. Optional permissions include network request monitoring and tab audio capture for recordings. You can revoke optional permissions at any time from the extension settings.

Technical Metadata

When the extension is active on a tab, it may capture the following data alongside your feedback comments:

• Console logs: Errors, warnings, and log output from the browser console (limited to 100 entries, truncated at 500 characters each)
• Network errors: Failed HTTP requests (4xx/5xx status codes) including URL, status, and request type
• Performance metrics: Page load time, First Contentful Paint, and Largest Contentful Paint
• Browser information: Viewport dimensions, browser version, operating system, and screen resolution

You can disable any of these capture categories individually in the extension settings. Metadata is only captured while you have the widget active, and is attached to comments you submit.

Extension Recordings

The extension can record screen activity and microphone audio during feedback sessions. Tab audio capture requires explicit permission granted through your browser. Microphone access is requested separately and can be denied at any time. Recordings are uploaded to the same secure storage as widget recordings and follow the same access and retention policies.

Extension Authentication

The extension stores a short-lived authentication token (24-hour expiry) in local browser storage to communicate with Caprese servers. This token is separate from your web session and can be revoked by logging out of the extension. No passwords are stored in the extension.

Cookies

We use cookies to maintain your session and remember your preferences. The Caprese widget uses localStorage and cookies to track reviewer sessions and guest identity. You can disable cookies in your browser, but some features may not work properly.

Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, contact us at:

Wavefield LLC
Email: support@caprese.ai