Privacy Policy — CaptionKit

1. Who we are

CaptionKit is operated by Forge. We build tools for Fanvue creators. Questions about this policy can be sent to hello@captionkit.dev.

2. What data we collect

When you connect your Fanvue account, we receive and store:

Your Fanvue user ID and display name
OAuth access and refresh tokens (used to read your vault)
A count of captions generated this month (for free-tier enforcement)

We access your Fanvue vault media descriptions to generate captions. We do not store your vault images or media files.

3. How we use your data

To authenticate you via Fanvue OAuth
To read your vault and generate captions
To enforce monthly usage limits on the free plan

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as required to operate the service (Anthropic AI for caption generation, Vercel for hosting).

4. Data retention

We retain your account data (Fanvue user ID, tokens, usage count) for as long as you use CaptionKit. If you have not used the app for 12 months, your data is automatically deleted.

5. Your rights (GDPR)

If you are in the European Economic Area, you have the right to:

Access — request a copy of the data we hold about you
Deletion — request that we delete your account and all associated data
Portability — receive your data in a machine-readable format
Correction — ask us to correct inaccurate data
Objection — object to how we process your data

To exercise any of these rights, email hello@captionkit.dev. We will respond within 30 days.

6. Data deletion

You can request deletion of your data at any time by emailing hello@captionkit.dev with the subject line "Delete my account". We will delete all data associated with your Fanvue user ID within 7 days and confirm by email.

7. Security

All data is transmitted over HTTPS. OAuth tokens are stored securely server-side and never exposed in client-side code. We follow industry-standard security practices. To report a vulnerability, email security@captionkit.dev.

8. Third-party services

Fanvue — authentication and vault access
Anthropic — AI caption generation (media descriptions only, no images sent)
Vercel — hosting and infrastructure
Upstash — usage tracking (Redis)

9. Changes to this policy

We may update this policy. Material changes will be communicated via the app. Continued use after changes constitutes acceptance.

10. Contact

For privacy questions: hello@captionkit.dev