Privacy Policy

Cappuccino reads the places your teams already write things down and surfaces where their plans disagree. Doing that means handling your workspace's content, so this page sets out exactly what is stored, why, and who else sees it.

What we store

• Your account. Name, email address, and a bcrypt hash of your password. We never store the password itself.
• Connection tokens, encrypted. The access tokens for the sources you connect are stored encrypted with AES-256-GCM under a key held outside the database. There is more detail on the security page.
• Workspace content.Messages, issues, and documents pulled from the sources you connect, along with the plans, surfaces, and conflicts extracted from them. This is the product's working material.
• Connection credentials. OAuth access and refresh tokens for the providers you connect, used solely to read the channels, repositories, projects, or files you selected.
• A session cookie. One cookie, named session, holding a signed token that keeps you logged in. It is strictly necessary for the app to function.

Cookies

Cappuccino sets one essential cookie for your login session, plus a short-lived cookie during a connection's OAuth handshake to guard against request forgery. There are no advertising, analytics, or cross-site tracking cookies, and no third-party trackers are embedded in the product.

Who else sees your content

• OpenAI.OpenAI's API terms state that content submitted through the API is not used to train their models. Ingested text is sent to OpenAI's API to extract plans and detect conflicts. This is core to how the product works — without it there is nothing to analyse.
• The providers you connect. Slack, GitHub, Jira, and Google Drive, when reading the data you authorised.
• Our hosting and database providers, which store the data at rest.
• Resend, if password reset email is enabled, which receives your email address in order to deliver the message.

We do not sell your data, and we do not share it for advertising.

Who in your workspace sees what

Content is scoped to the workspace it was ingested into. Anyone who is a member of that workspace can see its artifacts, plans, and conflicts. Admins can additionally manage connections, invite and remove members, and change roles. If that matters for a particular source, connect it to a workspace whose membership you are comfortable with.

Retention and deletion

Workspace content is kept until it is deleted. Disconnecting a provider removes its stored credentials; it does not automatically delete artifacts already ingested from it. Removing a member revokes their access immediately. Password reset tokens expire after an hour and are destroyed once used.

Security

Passwords are hashed with bcrypt. Session tokens are signed and stored in an HTTP-only cookie. Connections are authorised through each provider's OAuth flow with cross-site-request-forgery protection, and Cappuccino requests read-only scopes. Database access is restricted to the application. No system is perfectly secure, and we do not claim certification against any particular standard.

Your choices

You can update your name, email, and password from your profile at any time, disconnect any source from Connections, and ask an admin to remove you from a workspace. For access, export, or deletion of data we hold about you, get in touch.

Contact

A contact address has not been configured for this deployment. Set LEGAL_CONTACT_EMAIL to publish one here.