Last updated: 6 October 2026
CAPTD is operated by Marco Obinu, a sole trader based in Ireland, at 9 Old Court Mill, Tallaght, Dublin, Ireland. We are the data controller for personal data collected through this platform. For any privacy-related questions contact us at captionflow.app@gmail.com.
CAPTD does not require signup, login, or an email address to use the Free plan. An anonymous session is created automatically in your browser to let the service work — no personal identity is attached to it unless you contact us, make a purchase, or create an account. We collect the following:
Feedback after your first export (optional). The first time you copy or export a Content Pack, we may ask one optional question: "What were you trying to post?". If you answer, we store your answer (up to 200 characters), the workspace and platform you were using, the date, and your anonymous session identifier in our own database. This is something you choose to send us, so it is stored whatever you chose on the cookie banner; our analytics only record whether you answered and whether you left an email, never the answer or the email itself. Leaving your email is optional: we use it only to ask you one follow-up question about your answer, and we never share it or add it to a mailing list. The legal basis is your consent. Answers are deleted automatically after 12 months, and we delete the email once we have asked our follow-up question, or after 90 days at the latest. To have your answer or email deleted sooner, use "Delete my data" (see Your Rights Under GDPR below) or email captionflow.app@gmail.com.
Anonymous export count. Each time a Content Pack is copied or exported, we add one row to a simple tally in our own database: the workspace, the platform and the date — nothing else. It contains no account or session identifier, no IP address, no cookie and no device or browser information, and it cannot be linked back to you, so it is recorded whatever you chose on the cookie banner and sets no cookie. We use the totals only to see how many Content Packs are used each day and week.
CAPTD offers an optional History feature that lets you save and revisit your previously generated Content Packs across devices. This feature requires creating an account — email and password, or signing in with Google — it is entirely optional and is not required to use CAPTD's core generation features. When you sign in with Google, Google shares your name, email address and a unique account identifier with us so we can create and recognize your CAPTD account — we never see or store your Google password.
If you choose to sign up, any Content Packs you generate — including any generated before you signed up, using your anonymous session — become linked to your account and are saved to your History.
What we store: the Content Pack itself (caption, description, hashtags, and other generated fields), the workspace and platform it was generated for, and the date of generation. We do not store additional data beyond what's needed for this feature to work.
How long we keep it: your History is retained until you delete individual entries yourself, or until you delete your account, whichever comes first. We do not set an automatic expiry on History data beyond that.
Your control: you can delete any individual History entry at any time. Deleting your account removes your entire History along with it. This is in addition to the data rights already described in Section 9 (Your Rights Under GDPR) of this policy, including your right to access, export, or request erasure of your data at any time.
Access: your History is private to your account — only you can view it. We apply technical access controls (row-level security) to ensure no other user, including other CAPTD users, can access your History data.
We do not sell your personal data to third parties. We do not use your uploaded content to train AI models.
We process your data under the following legal bases as defined by the EU General Data Protection Regulation (GDPR):
Uploaded photos and videos are automatically deleted no more than 90 days after upload — this runs automatically in the background and does not require you to do anything. Photos you open in the browser-only tools — every photo tool except the three AI-vision ones — are never uploaded, so there is nothing for us to retain or delete. Generated text (captions, descriptions, hashtags and the rest of your generation history) is kept for as long as your anonymous session or account is active, since it has no comparable storage-size or sensitivity concern and you may want to refer back to it. Composition Analysis, Scene Recognition and Editing Suggestions in the AI Photography Assistant go further still: those photos are deleted immediately once the analysis result is generated, not kept for 90 days like other uploads.
GPS coordinates read from a photo's EXIF data, and any location you type in yourself, are used only for that single generation and are never written to our database — see What Data We Collect above.
Answers to the optional question after your first export are deleted automatically after 12 months; an email left with one is deleted once we have asked our follow-up question, or after 90 days at the latest.
You can delete all of your data immediately and permanently at any time yourself — see "Erasure" under Your Rights Under GDPR below — rather than waiting on a manual request. If you'd still prefer to reach us directly, contact us at captionflow.app@gmail.com and we will remove it within 30 days, except where retention is required by law such as for tax records.
We use the following third party services to operate CAPTD:
Supabase, Vercel, Resend, PostHog and Google (Gemini API, paid tier) process data on our behalf under data processing agreements. Lemon Squeezy, as merchant of record, and Google Forms handle data under their own privacy policies.
Some of our third party providers may process data outside the European Economic Area. Where this occurs we ensure appropriate safeguards are in place including standard contractual clauses approved by the European Commission.
Analytics and session-recording data processed by PostHog is stored in the European Union (PostHog EU Cloud, Frankfurt, Germany) and is not transferred outside the EEA.
As an EU resident you have the following rights:
To exercise any of the other rights above contact us at captionflow.app@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Commission of Ireland at dataprotection.ie.
CAPTD uses two categories of storage technology (cookies and similar browser storage such as localStorage):
If you accept analytics, we also record which link brought you to the site, using the campaign tags in the address (for example utm_source=instagram), so we can see which channels work. Before you accept, those tags are held only in your browser's memory for that page and are discarded if you close or reload the tab. Nothing is stored or sent to our analytics until you accept.
Interrupted uploads. While you are choosing or uploading a photo, CAPTD keeps a short note in your browser's local storage saying which step you were on, which page you were on and when. It holds nothing else (no photo, file name or personal data). It is deleted as soon as the step finishes or you leave the page normally, and it expires after 10 minutes: an expired note is ignored and removed the next time you open CAPTD. It exists only so that, if your phone reloads the page in the middle of an upload (which happens most often inside the Instagram, TikTok and Facebook apps), we can tell you what happened instead of showing an empty page. It is essential to that feature and does not depend on your cookie choice. The note itself never leaves your device; if you have accepted analytics, we also record that an upload was interrupted, and at which step and page, so we can find and fix what causes it.
We do not use advertising cookies or third party ad-tracking cookies.
If you accept cookies on the banner, we use PostHog's session replay to record how the CAPTD interface is used. A recording is a reconstruction of the page built from the structure of the interface — not a video or screen capture — and shows mouse movement, clicks, scrolling, the pages visited and how the layout changed. We watch these to find where the app is confusing or broken.
What is not captured. Masking runs inside your browser, before anything is sent, so the following never reach PostHog:
Consent. Recording requires your consent under the GDPR (Article 6(1)(a)) and the Irish ePrivacy Regulations (S.I. No. 336 of 2011, Regulation 5(3)). Nothing is recorded — and the PostHog software is not even loaded — until you press Accept on the cookie banner. Declining, or never choosing, means no recording.
Retention. Recordings are deleted automatically 30 days after they are made.
Processor. PostHog, Inc. processes recordings on our behalf under a data processing agreement. Recordings are stored in the European Union (PostHog EU Cloud, Frankfurt, Germany) and are not transferred outside the EEA.
Withdrawing consent. Use the button in the Cookies section above or the "Cookie preferences" link in the footer of every page. Withdrawing stops recording immediately, removes the PostHog cookies and local storage from your browser and shows the banner again; recordings already made are deleted at the end of the 30-day retention period. To have them deleted sooner, contact us at captionflow.app@gmail.com.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission of Ireland without undue delay and, where feasible, within 72 hours of becoming aware of it. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly, without undue delay, by email or via an in-app notice, describing the nature of the breach and the steps we're taking in response.
CAPTD is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe a child has used CAPTD please contact us immediately at captionflow.app@gmail.com and we will delete their data promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes via an in-app notice (and by email where we have your email address) at least 14 days before the changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.
For any privacy-related questions or to exercise your rights please contact us at captionflow.app@gmail.com