Privacy Policy
Effective date: June 19, 2026
Overview
Capsule ("we", "us", "our") is a database backup service. This policy describes what data we collect, why we collect it, and what we do — and do not do — with it.
The short version: your database credentials and your actual data never reach our servers. We receive encrypted backups that we are cryptographically unable to read.
What we collect
Account information: Your email address and a hashed password when you sign up.
Billing information: Handled entirely by Stripe. We never see or store your card number, CVV, or bank details.
Usage metadata: The nickname you give your server, the number of database connections you add, backup timestamps, and backup file sizes. This is needed to show you your backup history on the dashboard.
Encrypted backup files: AES-256-GCM ciphertext produced on your server before upload. We store these files but cannot read them — we do not hold the decryption key.
What we never collect
Database credentials: Credentials are stored on your server only, encrypted at rest. They are never transmitted to Capsule.
Database content or schema: The Capsule agent runs dump tools locally on your server. Only the encrypted output is uploaded — never plaintext data.
Encryption keys: Your backup encryption key is derived locally on your server and never transmitted. Capsule cannot decrypt your backups.
How your data is stored
Encrypted backup files are stored in Cloudflare R2 object storage. Account data (email, metadata) is stored in our database, access-controlled and not shared with third parties.
Backup retention follows your plan: 7 days on Free, 90 days on Solo, 1 year on Pro, 3 years on Team. If you cancel, you have a 30-day window to export anything you need before your data is permanently deleted from our servers.
Third-party services
Cloudflare R2: Stores your encrypted backup files. Cloudflare does not have access to the decryption keys.
Stripe: Processes subscription payments. Governed by Stripe's Privacy Policy.
We do not sell, rent, or share your personal data with any other third party.
Your rights
Export: You can download your backup files from the dashboard at any time.
Deletion: You can delete your account and all associated data from account settings. Encrypted backup files are permanently removed within 30 days.
Questions: Contact us at privacy@trycapsule.xyz for any privacy-related requests.
Changes to this policy
We will notify you by email if we make material changes to this policy. The effective date at the top of this page will always reflect the most recent revision.