Privacy Policy
Last updated 15 August 2026. Contact: info@capsakey.com
Who this is about
Capsakey is an app that a website owner installs on their site to give each of their clients a private space for files.
That means two different relationships, and this policy is honest about both:
- If you are a website owner using Capsakey, we are your processor. You decide what is stored and who may see it; we only act on your instructions. Our obligations to you are in the Data Processing Agreement.
- If you are a client of one of those websites, the website owner is the controller of your data. Ask them how they use it. We hold it on their behalf and answer to them.
What we hold
| What | Why | How long |
|---|---|---|
| The files you or your provider upload | To show them to the people entitled to see them | Until deleted, then 30 more days in the recycle bin |
| File name, size, type, upload date | To list them | As above |
| Your Wix member identifier | To decide what you may see. Note what this is not: we hold an identifier, not your name, address or password — those stay with Wix | While your access lasts |
| An access log: who opened which file, and when | So the site owner can see who accessed what — a duty as much as a feature | 12 months |
| Your email address, only when a notification is sent | To tell you something arrived | Not stored by us beyond the sending |
| Your name, login email and profile photo, read from Wix when the site owner opens their console | So they can pick you from a list and read their own access log, instead of working with identifiers nobody can look up. The photo is the one your site already shows, and it is only ever a link — we never copy the image | Not stored. Read for the length of one request and discarded — never written to our database or to any cache |
| The site's own name, address, language and the owner's email | To make a notification say who it is from, write it in the language the site is written in, and link back to the right place | Held in a temporary cache for one hour, then re-read |
What we never do
- We do not open, index, scan, preview, transcode or otherwise look inside your files. There is no code that could: the server hands the bytes from storage to your browser without reading them.
- We do not train anything on your data.
- We do not sell, rent or share your data. There is no advertising network and no analytics provider in this product.
- The portal sets no cookies and uses no browser storage. Not as a courtesy — it literally cannot, and we would not want to.
Where it is
Files are stored by Cloudflare R2 in a bucket restricted to the European Union. That restriction is set when the bucket is created and cannot be changed afterwards.
Cloudflare is a company incorporated in the United States. The restriction governs where the bytes sit, not the nationality of the provider. Transfers are covered by standard contractual clauses. Our full list of sub-processors, and this caveat again, are at /subprocessors.
Your rights
Under the GDPR you may ask for access, correction, erasure, restriction, portability, or object.
Ask the website owner first — they are the controller and they can do all of it from their dashboard, immediately. If you cannot reach them, write to info@capsakey.com and we will help them respond; we cannot act on your data without their instruction, because acting on one client's request without the controller would itself be a breach of our duty to everyone else.
You may also complain to your national supervisory authority.
Deletion, precisely
Deleting a file removes it from view at once. The underlying object is removed from storage within 30 days by an automatic sweep that runs many times a day. The delay is the recycle bin: it exists so that an accidental deletion is recoverable, and it is the same 30 days on both sides so there is one number to remember.
The website owner can delete everything themselves, at any time, from their dashboard — no support ticket, no waiting. That is also why uninstalling is deliberately not destructive:
Uninstalling the app does not delete your files. Uninstallation is very often accidental or temporary, and destroying a client's documents on that signal would be unrecoverable. There is a button for that, and it is separate on purpose.
If you ask Wix to erase your member account, Wix tells us, and we remove your access, anonymise your entries in the access log, and delete the files you uploaded. Files the website owner sent to you are not destroyed: they belong to them, not to you, and deleting them would be data loss for someone who did not ask.
Security
Encrypted in transit and at rest. Every single file request is re-authorised on the server against your identity — a link is never enough by itself. Full detail on the security page.
Changes
Material changes are announced at least 14 days ahead, by email, to the site owners who have installed the app.