Privacy Policy

Node Media (“Node Media,” “Capsule,” “we,” “us,” or “our”) operates Capsule, a service that turns websites into Android apps. This Privacy Policy explains how we collect, use, store, disclose, and delete information when you use capsule.nodemedia.in, the Capsule dashboard, and our related integrations, including the Capsule app for ChatGPT (together, the “Service”).

1. Information we collect

1.1 Account and sign-in information

When you sign in with Google, we receive and store your name, email address, and profile picture. We also store sign-in session information, including the IP address and browser user agent of the session, and a record of your acceptance of our Terms of Service and Privacy Policy, including the IP address and user agent it was given from.

1.2 App configuration and uploaded content

We store the information needed to configure and generate your Android app. Depending on the features you use, this includes:

• The website URL, app name, Android package name, brand colors, and navigation settings.
• Requested device permissions, blocked domains, app-lock setting, and any custom CSS or JavaScript you add.
• App icons and splash-screen images taken from your website or uploaded by you.
• The signing key generated for your app, stored encrypted so that updates can install over earlier versions.
• If you connect push notifications: your Firebase project details and configuration file, an encrypted Google authorization token limited to Firebase, and the title, text, and link of notifications you send.

1.3 Build records and generated files

We store build records, including version information, build status, timestamps, and download links for the generated Android Package (APK) and Android App Bundle (AAB) files. The generated files and your app images are kept in file storage, separately from your account and app records.

1.4 ChatGPT connection

If you connect Capsule to ChatGPT, we store the OAuth access and refresh tokens that let ChatGPT perform actions you authorize on your Capsule account, along with a record of that authorization. We do not receive or store your ChatGPT conversation. We receive only the specific inputs passed to a Capsule tool, such as a website URL, app settings, or an image you attach for use as an icon or splash screen.

ChatGPT also sends an anonymized user identifier, which we use only to rate-limit requests made before sign-in. It is not stored in our database. You can revoke ChatGPT’s access at any time, as described in Section 4.

1.5 Website information and operational logs

When you submit a website URL, our servers fetch that URL to read the site’s name and icon and to check whether it can be shown in a preview.

Our operational logs record technical details of requests, such as which tool or route was used and whether you were signed in. If a website fetch fails, the log entry may include the submitted URL. If the dashboard hits an error in your browser, it sends us the error details, the page it happened on, and your browser type. Some internal alerts contain error details and, in certain cases, the affected user’s email address.

1.6 Email communications

We use your email address to send transactional messages, such as build-completion, receipt, and free-trial emails. We do not send marketing spam.

1.7 Payment information

Payments are made on our website and processed by Whop, our payment provider, which collects your billing details directly. We do not store your full card number or bank details. We keep a record of each transaction, including the amount, currency, status, and Whop’s payment identifiers.

No payment is taken and no payment details are collected through the ChatGPT integration.

1.8 Cookies and website analytics

The dashboard uses cookies to keep you signed in. Our marketing website is hosted by Vercel, which provides us with aggregate analytics about how the site is used. You can control cookies through your browser settings, though you will not be able to stay signed in if they are disabled.

2. How we use information

• To authenticate you and manage your Capsule account.
• To generate, sign, and deliver your Android app builds.
• To save your app configuration, images, build records, and download links.
• To carry out the actions you authorize through the ChatGPT integration.
• To read website information and show app previews.
• To process payments and send receipts.
• To send transactional and service-related emails.
• To prevent repeated free trials for the same account or website.
• To operate, monitor, troubleshoot, and protect the Service.
• To respond to support and privacy requests.
• To meet our legal obligations.

We do not sell personal data or share it with advertisers.

3. Service providers and disclosures

We share information only with the service providers needed to run Capsule. Each receives only what it needs:

• Cloudflare — hosts our API and dashboard, stores app images and build files, and holds operational logs.
• Supabase — hosts our database, which holds account, app, build, payment, and consent records.
• Google — provides sign-in. Firebase Cloud Messaging is used only if you choose to connect push notifications.
• GitHub Actions — compiles your Android app and receives the configuration needed for the build, including the website URL, app settings, custom CSS and JavaScript, images, Firebase configuration file, and signing key. It does not receive your name or email address.
• Resend — delivers transactional emails and receives your email address and the message content.
• Whop — processes payments made on our website.
• Telegram— carries our internal operational alerts, which contain error details and, for some alerts, the affected user’s email address.
• Vercel — hosts our marketing website and provides aggregate analytics for it.
• OpenAI— if you use Capsule inside ChatGPT, the results of the actions you request (such as your app’s name, status, and download links) are returned to ChatGPT so it can show them to you. OpenAI handles that information under its own privacy policy.

These providers may retain records under their own policies and legal obligations. We may also disclose information where required by law or valid legal process, or where necessary to address a security incident or protect our rights.

4. Retention, deletion, and revocation

4.1 General retention

We keep account information, app configuration, images, build files, and related records for as long as your account exists, unless you delete them sooner as described below. We do not currently apply a fixed, time-based deletion schedule.

4.2 Deleting an app

You can delete an app from your dashboard. This immediately and permanently removes its configuration, build records, payment records, and notification history from our database, along with its icon and splash image.

4.3 Deleting your account

You can delete your account from Settings → Delete Account in the dashboard. This immediately removes your profile, sessions, ChatGPT tokens and authorization, consent records, apps, build records, and payment records from our database.

4.4 Generated files

Generated APK and AAB files are not removed automatically when an app or account is deleted, and app images are not removed automatically when an account is deleted as a whole. To have them deleted, email hello@nodemedia.in.

4.5 Free-trial record

After an app or account is deleted, we keep the hostname of a website that has used the free trial, with the user identifier removed. We keep it solely to prevent repeated free trials for the same website.

4.6 ChatGPT access and preview links

You can disconnect ChatGPT from Settings in your dashboard. This deletes the stored tokens and authorization immediately. Disconnecting inside ChatGPT alone does not delete them from our side; otherwise, access tokens expire after one hour and refresh tokens after 90 days of inactivity. Signed preview links expire after seven days.

4.7 Logs and provider records

Operational logs are kept for the short period set by our hosting provider. Our payment and email providers may keep transaction, billing, or delivery records under their own policies and legal obligations, so deleting information from Capsule does not necessarily delete records those providers hold independently.

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, withdraw consent, or object to certain processing. You can use the deletion controls described in Section 4, or email us at hello@nodemedia.in and we will respond within a reasonable time. Some records may remain where this policy says they are kept for a specific purpose, or where the law requires it.

6. Security

We use reasonable technical and organizational measures to protect your information, including encrypting app signing keys and Firebase authorization tokens at rest. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you have a security concern, email hello@nodemedia.in.

7. Children’s privacy

The Service is not directed to, and may not be used by, anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page, and by asking you to accept the updated policy the next time you sign in.

9. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and applicable Indian law, the Grievance Officer for Node Media is:

Prajyot Mane
Email: prajyot@nodemedia.in

You may contact the Grievance Officer with any complaint or concern about how your personal data is processed. We will acknowledge and work to resolve grievances within a reasonable time.

10. Contact us

Questions about this Privacy Policy, and access or deletion requests, can be sent to hello@nodemedia.in.