Privacy policy

Overview

RecaPod is a service operated by Famplified LLC. This Privacy Policy explains how we handle personal information when you use our websites, applications, APIs, and related services (collectively, the “Service”). It also explains the choices and rights that may be available to you.

Information we collect

• Account information. Your email address, account identifier, authentication state, and related account settings.
• Content you provide. Pod names, checkpoints, summaries, artifacts, tags, and other content submitted by you or by an agent acting through a link you supplied.
• Service and security data. Timestamps, request identifiers, routes, response status, source IP address, browser or device information, and other data needed to operate, troubleshoot, and secure the Service.
• Capability-link metadata. We store cryptographic hashes and status information for checkpoint and continuation links. We do not store the raw secret portion of a capability URL after it is issued.
• Context access history. We keep successful and denied recall metadata, such as time, channel, source IP, filters, and record count, without storing capability secrets or recalled checkpoint content in the audit event.
• Optional security alerts. If you enable context access alerts, we store your selected alert mode and verified account email and send security metadata through Amazon Simple Email Service. Alert messages do not include checkpoint content, filters, capability links, or credentials. Delivery is limited to one message per rolling 24 hours.
• Communications. Information you include when you contact us for support, feedback, or another request.
• Optional usage analytics. If you allow analytics, Google Analytics receives page paths without query strings, approximate location, browser and device information, and page-view events. We configure RecaPod not to send pod entries, capability URLs, account emails, advertising signals, or automatic enhanced-measurement events.

The application may use browser session storage for sign-in state. Our hosted authentication provider may also use cookies or similar technology to complete and protect sign-in. Google Analytics remains off until you choose “Allow analytics” and may then use first-party analytics cookies. Advertising storage and personalization remain disabled.

How we use information

• provide, authenticate, maintain, and improve the Service;
• store, organize, export, and retrieve content you direct us to process;
• respond to support, privacy, and security requests;
• understand aggregate website usage when you allow analytics;
• detect abuse, protect accounts and capability links, and enforce our Terms of Use; and
• comply with law and protect legal rights and safety.

How we disclose information

We may disclose information to cloud hosting, authentication, and infrastructure providers that process it for us; to professional advisers; when required by law or reasonably necessary to protect rights and safety; in connection with a merger, financing, acquisition, or sale of assets; or at your direction or with your consent. Our current primary cloud provider is Amazon Web Services. When you allow optional analytics, Google processes usage analytics for us. When you enable optional context access alerts, Amazon Simple Email Service processes your verified account address and message-delivery data for us.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not serve targeted advertisements through RecaPod.

Retention

We retain account and pod information while needed to provide the Service and for legitimate security, legal, and operational purposes. Production raw checkpoint submissions are subject to a lifecycle period of up to 365 days. Normalized timeline content remains available until it is deleted or the related account is removed, subject to operational or legal retention. Operational logs are generally retained for 30 days. Context access history is retained for 90 days.

Optional alert settings and the verified delivery address remain until you turn alerts off or the account is removed. Turning alerts off removes the stored delivery address from the alert-settings record; delivery logs may remain for security and operational purposes.

Deleting an item from a pod timeline removes its active database record and every stored version of its raw and normalized source objects. Residual copies may remain temporarily in operational backups where applicable. Content previously exported or copied to another service is controlled by the holder of that copy. See our Data Practices page for more detail.

An archived RecaPod remains reviewable and can be restored or permanently deleted from its detail page. Permanent RecaPod deletion removes its entries, stored source content, and capability links. If a RecaPod is too large for immediate deletion, the dashboard directs the owner to support for a managed erasure.

Security

We use safeguards designed to protect information, including encryption in transit and at rest, access controls, secret hashing, and security-focused logging. No storage or transmission method is completely secure. Keep capability URLs private: anyone with a valid link can exercise its permissions until the link is revoked or rotated.

Your choices and privacy rights

Account owners can review RecaPod history, delete entries, archive and restore RecaPods, permanently delete a RecaPod, export data, and rotate capability links. Account deletion is currently fulfilled through a verified request to the contact address below rather than a one-click dashboard action. Depending on where you live and subject to applicable law, you may also request access, correction, deletion, or a portable copy of personal information, or appeal a privacy-request decision. We may need to verify your identity and authority first.

Submit a request at info@email.famplified.com. Authorized agents may also contact us, subject to verification required by law.

Choose “Privacy choices” in the site footer to allow or decline future Google Analytics collection. Declining or later withdrawing analytics consent prevents new analytics collection from RecaPod and removes RecaPod's first-party Google Analytics cookies from the current browser where possible. It does not erase data already processed before withdrawal.

International processing

RecaPod is operated in the United States. If you access the Service from another country, your information may be transferred to and processed in the United States, where privacy laws may differ.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

Changes and contact

We may update this policy as the Service or applicable requirements change. We will post the updated version here and revise the effective date, with additional notice when reasonably required. Questions or privacy requests can be sent to info@email.famplified.com.