Privacy Policy

CAPScribe ("we", "our", or "us") is committed to protecting your privacy and ensuring that your personal information is collected and used properly, lawfully, and transparently in accordance with the Protection of Personal Information Act (POPIA) of South Africa, as well as best-practice global data protection standards.

This Privacy Policy explains how we collect, use, store, secure, and protect your information when you use the CAPScribe AI-powered lesson planning platform.

We may collect the following types of information:

Your information is used strictly to:

• Create and manage your CAPScribe account
• Deliver AI-powered CAPS-aligned lesson plans
• Process secure payments and subscriptions
• Provide customer support and respond to queries
• Improve AI accuracy and platform functionality
• Send important system updates and service notifications
• Prevent fraud, abuse, and security risks
• Comply with South African legal and regulatory obligations

• Your uploaded lesson documents and lesson prompts are processed only to generate your requested lesson outputs
• AI data processing is not used to build public datasets
• Private educational content remains private to your account
• CAPScribe does not use your school data to train public AI models

Your data is securely stored using:

• Supabase (PostgreSQL) for user data storage
• Encrypted cloud file storage for uploaded documents
• Industry-standard AES-256 encryption at rest
• TLS 1.2+ encryption in transit

Servers may be located inside or outside South Africa, but all data handling complies with POPIA's requirements for cross-border processing.

• All financial transactions are processed by Stripe
• CAPScribe never stores raw credit or debit card numbers
• Stripe complies with PCI-DSS Level 1 security standards
• Subscription charges, invoices, and refunds are securely managed through Stripe's encrypted infrastructure

We may use cookies and similar technologies to:

• Keep you logged in
• Improve system performance
• Measure platform usage and reliability

You can control cookie settings in your browser at any time.

We only share data with:

• Payment processors (Stripe)
• Cloud infrastructure providers
• Customer support tools (if required)

All third-party providers are contractually obligated to maintain strict confidentiality and security.

We do not share your data with advertisers.

• We retain personal data only as long as required for service delivery and legal compliance
• You may request: Account deletion, File removal, Data export
• Deleted data is permanently removed within a reasonable technical timeframe

As a South African data subject, you have the right to:

• ✅ Access your personal data
• ✅ Correct inaccurate data
• ✅ Request deletion of your data
• ✅ Restrict processing of your data
• ✅ Withdraw consent at any time
• ✅ Receive a copy of your stored data (data portability)
• ✅ Submit complaints to the Information Regulator of South Africa

In the unlikely event of a data breach:

• Affected users will be notified promptly
• The Information Regulator will be informed where legally required
• Immediate corrective action will be taken

CAPScribe is designed for educators, not students. We do not knowingly collect personal information from children under 18 without parental or institutional consent.

We may update this Privacy Policy from time to time. When we do:

• The "Last Updated" date will be revised
• Significant changes will be communicated via email or in-app notice

For all privacy-related matters, contact us at:

Email: 📧 support@capscribe.co.za

Business Name: CAPScribe

Country of Operation: South Africa