Effective Date: June 7, 2026 · Last Updated: June 7, 2026
VybeCode Ltd ("we", "our", "us") operates the KaptureVault application (the "Software"), the optional KaptureVault Online Vault service (the "Online Vault"), and the website at kapture.tools (the "Website"). This Privacy Policy explains what we collect, how we use it, and how we protect it.
1. Information the Software Collects
KaptureVault is local-first. By default, the desktop app runs entirely on your own machine:
- All clipboard history, keyboard captures, and screenshots are stored locally on your device only.
- By default, the Software does not transmit your captured data to our servers or any third party.
- No account is required to install or use the core app.
- No telemetry, analytics, or usage tracking is built into the Software.
- You can protect your local vault with AES-256 encryption; the key is derived from your password on your device and never leaves it.
You have full control over everything the Software captures — you can view, search, pin, tag, expire, and permanently delete any entry at any time. If you never sign in or enable a cloud feature, none of your captured data leaves your device.
2. Online Vault, Accounts & Pro (optional cloud features)
The following features involve our servers and run only if you choose to enable them:
- Accounts. You can create a KaptureVault account with Google sign-in or with an email address and password. We store your email address, your email-verification status, authentication tokens, and — for email/password accounts — a securely hashed password (we never store your password in plain text). Accounts are identified by your verified email.
- Online Vault sync. If you sign in and enable it, your vault database and screenshots are synced to our cloud storage. They are end-to-end encrypted on your device before upload — we store only ciphertext, your vault password is the only key, and that password is never sent to us. We cannot read the contents of your Online Vault.
- File hosting (Pro). Paid subscribers can upload files. Files you mark Private are encrypted on your device before upload (we hold only ciphertext); files you choose to share via a public link are stored as-is so the link can serve them to anyone you give it to. You can revoke any share link or delete any file at any time.
- Payments. Pro subscriptions are processed by Stripe. We do not receive or store your card details — Stripe handles them. We store a Stripe customer reference and your subscription status.
- Google Drive backup (optional). If you enable it, your encrypted vault is backed up to your own Google Drive using a permission scoped to files the app creates. That copy lives in your Google account; we never receive it.
You can delete your account at any time from the app or at kapture.tools/account. Deleting your account cancels any active subscription and permanently erases your Online Vault, screenshots, and hosted files from our storage.
3. Information We Collect via the Website
When you visit our Website or interact with us, we may collect:
- Contact form submissions: Your name, email address, and message content when you use our contact form. This data is processed by Formspree and delivered to us via email.
- Email notifications: If you opt in to receive product updates, we collect your email address for that purpose only.
- Standard server logs: Our hosting provider may collect standard access logs (IP address, browser type, pages visited) for security and performance purposes.
4. How We Use Your Information
We use the information we collect to:
- Provide and operate your account, the Online Vault, and Pro features.
- Verify your email, let you sign in, and reset your password.
- Process subscription payments and manage billing.
- Respond to your inquiries and support requests.
- Send product updates if you have opted in.
- Improve the Website and Software, and comply with legal obligations.
5. Data Sharing & Sub-processors
We do not sell, rent, or trade your personal information. We share data only with the service providers needed to run KaptureVault, and only as required:
- Cloudflare: Hosts the Online Vault backend and stores your (end-to-end-encrypted) vault, screenshots, and hosted files.
- Stripe: Processes Pro subscription payments. See Stripe's Privacy Policy.
- Resend: Sends transactional emails (email verification and password reset) to your address.
- Google: Authenticates you if you choose Google sign-in, and stores your encrypted vault in your own Drive if you enable Drive backup.
- Formspree: Processes contact-form submissions. See Formspree's Privacy Policy.
- Hosting providers: Standard infrastructure that hosts our Website.
- Legal requirements: If required by law, regulation, or legal process.
6. Data Retention
- Local Software data: Retained on your device until you delete it. We have no access to it.
- Account & Online Vault data: Retained while your account is active. When you delete your account, your subscription is cancelled and your cloud data (vault, screenshots, hosted files, and account records) is permanently erased.
- Contact submissions: Retained for as long as necessary to resolve your inquiry, then deleted.
- Email list: Retained until you unsubscribe.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of your data, including deleting your account and all associated cloud data at any time.
- Opt out of marketing communications at any time.
- Lodge a complaint with a data protection authority.
To exercise any of these rights, contact us at the details below.
8. Security
- Your local vault can be encrypted with AES-256; the key is derived from your password on your device.
- The Online Vault is end-to-end encrypted — your data is encrypted on your device before upload, the server only ever stores ciphertext, and your vault password (the only key) is never sent to us.
- Account passwords are stored only as salted hashes (PBKDF2-SHA256), never in plain text.
- Every release installer is code-signed (Azure Trusted Signing) and VirusTotal-scanned.
- All Website and service communications are encrypted via HTTPS.
9. Children's Privacy
Our Software and Website are not directed to children under 13. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.
11. Contact Us
If you have questions about this Privacy Policy, contact us: