Privacy Policy

Capacity is operated by Rocket Social, a French SASU (société par actions simplifiée unipersonnelle) with a share capital of €500, registered office 21 rue Valentin Couturier, 69004 Lyon, France, registered with the Lyon Trade and Companies Register under number 832 329 445 (SIRET 832 329 445 00023, VAT FR88832329445) ("Capacity", "we", "us"). This policy covers the Capacity website and web app at capacity.so, Capacity Desktop, the Capacity mobile app, and Capacity App Builder, the Capacity plugin you can connect to AI assistants such as ChatGPT and Claude (together, the "Service"). Rocket Social is the data controller for the personal data described here.

Rocket Social also publishes other products, including Breakreach (see rocketsocial.org). In the ChatGPT plugin directory, Capacity App Builder is listed under Rocket Social's verified developer account, which is named Breakreach.

Questions or requests about your data: support@capacity.so.

Capacity App Builder lets ChatGPT or another AI assistant create, edit, preview and publish the web apps of your Capacity account when you ask it to. In short:

• What we collect: the inputs of the tools the assistant calls, which are limited to your apps (app names, file paths, the app's code, commands run in the app's workspace, version IDs), plus the connection between the assistant and your Capacity account. Section 4 lists every tool's inputs and outputs.
• What we never collect: your conversations with the assistant, your assistant account's profile or memory, your location, payment card details, health information, government ID numbers, biometric data, or passwords and API keys.
• Why: to build, preview, host and publish your apps, to keep the Service secure and working, and to measure how the tools are used.
• Who receives it: the assistant's provider (for example OpenAI for ChatGPT), which receives the tool results, and the hosting, logging and analytics providers listed in section 4. Capacity does not send your tool inputs to any AI model, and does not sell them or use them for advertising.
• How long: your apps' code and versions as long as your account exists; call logs 30 days; error reports 90 days; usage statistics 25 months; the connection until you disconnect.
• Your controls: disconnect at any time in Settings → Connectors on capacity.so (or in the assistant's own settings), restore or unpublish an app, and delete your account and its data in Settings → Delete account.

This section describes exactly what happens with your data when you connect Capacity App Builder to an AI assistant. The assistant's provider (for example OpenAI for ChatGPT or Anthropic for Claude) processes your conversation, and the tool results we send back, under its own privacy policy.

Capacity does not need, and does not ask for, sensitive information such as health data, biometric data, government identifiers (for example social security numbers) or payment card numbers. Please do not include such information in your prompts, in requests to an AI assistant, or in your app's code. Card payments for your Capacity subscription happen only on Stripe's or Polar's checkout pages.

• To provide the Service (performance of our contract with you): creating, building, hosting and publishing your apps, running the Capacity AI agent and the tools your assistant calls, and keeping your version history.
• To manage your account and billing (contract and legal obligations): authentication, subscriptions, invoices and accounting records.
• To keep the Service secure and reliable (legitimate interest): preventing fraud and abuse, including on published apps, debugging errors and monitoring the Capacity AI agent.
• To communicate with you (contract and legitimate interest): service emails, support, and product news you can unsubscribe from at any time.
• To understand and improve Capacity (legitimate interest, or consent where the law requires it): product analytics and measuring our own advertising campaigns. Data from Capacity App Builder is not used for advertising.

We do not sell your personal data, and we do not use it to train AI models.

We do not make decisions with legal or similarly significant effects about you based solely on automated processing.

We share personal data only with the service providers we need to run Capacity, each limited to its role:

• Hosting and infrastructure: Google Cloud, Vercel, Cloudflare, Fly.io, Scaleway, Turso, MongoDB Atlas (our database host), GitHub (private repositories that store your apps' code) and Expo (mobile app builds).
• AI model providers: Anthropic, OpenAI, Google, Mistral AI and OpenRouter to generate code for the Capacity AI agent, and Replicate and FAL to generate images. They receive the prompts, code and context needed for each request. This does not apply to Capacity App Builder, whose code is written by your own assistant.
• AI agent monitoring: Flowlines, which receives traces of Capacity AI agent sessions (prompts and outputs) so we can debug them.
• Payments: Stripe and Polar.
• Email: Brevo (your name, email, company, location, language, plan and subscription status, to send service and marketing emails) and Google (some account emails).
• Analytics and advertising measurement: PostHog (EU region), Google Analytics, Hotjar and Meta (Meta Pixel, and the Conversions API, which receives your email address in hashed form when you subscribe).
• Error monitoring: Sentry.
• Support chat: Crisp.
• Screenshots: ScreenshotOne, which receives the preview URL of the app page being captured.
• AI assistants you connect, which receive the tool results described in section 4.
• Authorities and successors: when the law requires it, or to a successor in case of a merger or acquisition.

Apps you publish are public at their URL, and files you upload to an app are served at unguessable public links.

Some of these providers process data outside the European Union, in particular in the United States, where our cloud workspaces and servers run. In that case the transfer relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

• Account data, apps, code, conversations and files: as long as your account exists, then deleted within 30 days of your account's deletion.
• Cloud workspaces: stopped after 45 minutes without activity; the workspace disk is deleted 5 days after it stops (your code stays in the app's repository).
• Published apps: online until you unpublish them, your subscription ends or you delete your account.
• AI assistant connections: until you disconnect them, which deletes their tokens immediately. Authorization codes expire after 10 minutes.
• Server logs: up to 30 days.
• Error reports: up to 90 days.
• Analytics data: up to 25 months.
• Invoices and accounting records: 10 years, as required by French law.
• Support conversations: up to 3 years after your last contact.

• Correct: update your profile in your account settings.
• Export: download your app's code from the editor, or ask us for a copy of your personal data.
• Delete: Settings → Delete account on capacity.so, or in the Capacity mobile app, or ask us at support@capacity.so. We then delete your account, apps and connections as described in section 9, except the invoices we must keep.
• Disconnect AI assistants and API keys: Settings → Connectors.
• Stop marketing emails: use the unsubscribe link in any of them.
• Cookies: block or delete them in your browser settings (see section 12).

If you are in the European Economic Area, the United Kingdom or another region with similar laws, you also have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw your consent at any time. Write to support@capacity.so and we will answer within one month. You can also lodge a complaint with your data protection authority; in France, the CNIL (cnil.fr).

When your published app collects data from its own users (for example in its database or through file uploads), we store and process that data on your behalf, as your processor. You are responsible for that data and for your app's own privacy policy.

• Essential: access_token keeps you signed in (30 days), and sidebar_state remembers your sidebar layout (7 days).
• Analytics and advertising: cookies and local storage set by PostHog, Google Analytics, Hotjar and Meta, as described in section 8.
• Support: cookies set by Crisp for the chat window.

Capacity App Builder sets no cookies in your assistant.

Data is transmitted over HTTPS. Passwords and AI assistant or API key tokens are stored only as hashes, connection tokens to third-party services are encrypted, and access to production systems is restricted. No system is perfectly secure; if a breach affects your data, we will notify you and the competent authority as the law requires.

Capacity is not directed to children under 13, or under the minimum age required in your country, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

Capacity's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only use this data to enable YouTube video uploads and do not transfer it to any third parties.

We may update this policy. We will post the new version on this page with a new date and, for significant changes, notify you by email or in the app.

Rocket Social SASU (Capacity), 21 rue Valentin Couturier, 69004 Lyon, France: support@capacity.so.