Privacy policy

Information we process

Capsa processes account details, workspace membership, client contact information, uploaded documents, checklists, messages, AI conversations and proposals, connection identifiers, and activity/security records. Your firm controls the client information it uploads. Authentication credentials and MFA are handled by WorkOS.

Connected Google and other accounts

Connections are optional. When you authorize an integration through Composio, Capsa can access the data and actions covered by the permissions you grant. Depending on the service, this includes email content and attachments, files, calendar events, and messages. Capsa uses this information to respond to your requests and support your workspace workflows. Sending messages and other assistant changes require an explicit approval. Firm-configured document requests and scheduled reminders use the firm's authorized sender and schedule.

Composio manages integration credentials and refresh tokens. Capsa stores connection references and may retain relevant content in conversations, drafts, approvals, or activity records. Disconnecting stops future access; it does not erase information already saved in Capsa. You can also revoke access in the connected service's account settings.

AI processing and human review

Capsa uses OpenAI to process assistant requests and, where enabled with client consent, documents and reply drafts. Relevant prompts, selected workspace evidence, tool results, and attached documents may be sent to OpenAI. We do not use Google user data for advertising, sale, or training generalized AI models. Capsa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. AI suggestions can be wrong and require review.

Service providers and disclosures

WorkOS provides authentication, Convex stores application data and files, Vercel hosts the application, Composio manages connected-service access, and OpenAI provides AI processing. These providers process information to deliver their services. We may also disclose information when required by law or to investigate abuse, protect accounts, and operate the service. We do not sell personal information or use connected-account data for targeted advertising.

Retention and deletion

Workspace records are retained while needed to provide the service and satisfy the firm's applicable recordkeeping requirements. Archiving a client hides their active work; it does not delete their records. After the configured period, a workspace owner can review deletion of an archived client record group. Holds and signature retention can block deletion. We keep a minimal deletion receipt. AI conversation history and finished approvals are normally removed after 90 days; pending proposals expire after 24 hours. Contact support to request account or workspace deletion, access, or correction. We verify authority before acting on a request. Retained backups may contain deleted information until they expire. Legal retention obligations may limit deletion of particular records.

Security and your choices

Capsa uses authenticated sessions, authenticator two-factor that anyone can turn on and a firm can require for its staff, server-side workspace permissions, and encrypted connections. No system can guarantee complete security. Connect only accounts you are authorized to use and upload client information only when you have the required authority and consents. You can manage integrations in Settings, revoke provider access, and contact support about your data.

Updates

We will update this page and its effective date when our practices change. Material changes affecting connected-account data will require notice or renewed permission where required.