Privacy Policy

Last updated: 16 October 2026

This policy covers the hosted Falcon service ("Service"), its apps, API, command-line access, media delivery and documentation pages, and enquiries to Captomatic. The Android app has a separate policy. Captomatic does not operate on-premises installations.

1. Controller

Captomatic SIA, registration No. 40203140085, Mūkusalas iela 29b, Rīga, Latvia ("Captomatic", "we"). Contact: [email protected]

Captomatic is the controller for the account, billing, support and technical data described here.

2. Customer Data

The business operating a site ("Customer") is responsible for its media, face detection data, device records and visitor activity and purchases, as controller or on behalf of another controller. Captomatic processes that data on its instructions under the Data Processing Agreement.

Contact that business about captured media or visitor records. Requests received by Captomatic are handled under section 9 of the DPA.

3. Data, purposes and legal bases

Data and source	Purpose
Account details you provide, including email, optional name and password hash; account status, roles, memberships, the Terms of Service version accepted and sign-in activity generated through use	Provide accounts and administer access
If you choose Google or Microsoft sign-in: the provider's user identifier, email and verification status, name and profile picture URL	Authenticate and link your account
Email address and access settings supplied by a site owner, with invitation sender, status and expiry	Manage team invitations
Session and token hashes, permissions, expiry and use times; command-line sign-in requests also include IP address and reported computer name	Authenticate requests and secure access
Site name and identifier, paying contact, billing settings, payment and subscription identifiers and balance history	Administer payments through Stripe and keep accounting records
Email address and relevant account or site details	Send account, security, invitation and service notices
Contact details and messages you send us, including hosted-content reports	Handle enquiries, service issues and content reports
IP address, URL, user agent, request timing, rate-limit counters and error reports, which may include account identifiers or email addresses	Detect abuse and diagnose faults

For account access and billing, the basis is performance of a contract with you (Article 6(1)(b) GDPR), or our and the Customer's legitimate interests in administering business access and payments where you act for a Customer (Article 6(1)(f)). Other processing above relies on our legitimate interests in the stated purposes (Article 6(1)(f)), except accounting and legally required content-report handling (Article 6(1)(c)).

An email address and sign-in method are required for an account; billing details are required for paid services. Authorised staff may act as your account through a support session to troubleshoot the Service.

4. Recipients and transfers

• Users permitted to view site membership can see members' names, emails and roles.
• Hetzner hosts the Service; Cloudflare provides network and storage services; Mailgun sends service emails; Stripe handles payments. Their locations and terms are on the Subprocessors page. Stripe acts as an independent controller for some processing, including fraud prevention and legal compliance.
• Google hosts support email under its Cloud Data Processing Addendum.
• If you use provider sign-in, the provider learns that you signed in to Falcon: Google privacy policy, Microsoft privacy statement.
• Authorised personnel for operation and support; authorities where disclosure is legally required.

Cloudflare, Mailgun, Stripe and Google may process data outside the European Economic Area, including in the US. Transfers rely on an applicable adequacy decision or safeguards such as Standard Contractual Clauses, available in the provider terms linked above.

5. Retention

Data	Retention
Account, linked identities, memberships	Until deleted, unlinked or removed
Sessions and tokens	Until expiry or deletion, followed by scheduled cleanup
Command-line sign-in requests	Until completed or expired (valid for 10 minutes), followed by scheduled cleanup
Invitations	Until accepted or deleted, including on site deletion; expiry after 7 days does not delete the record
Billing records	For the billing relationship; accounting records for the statutory period: at least 5 years for invoices and supporting documents, 10 years for accounting registers under Latvian Accounting Law
Request logs	Up to 30 days
Rate-limit counters	The applicable window, at most 1 hour
Email queue	Pending delivery, then 24 hours after completion or 7 days after failure, followed by scheduled cleanup
Support correspondence	While needed for the enquiry, follow-up or an ongoing customer relationship
Content reports and decisions	While needed to handle the report and any challenge or legal obligation
Error reports	90 days

Records needed for a specific legal claim may be retained until the applicable limitation period ends or the claim is resolved, on the basis of our legitimate interest in handling legal claims (Article 6(1)(f)). Legally required retention follows Article 6(1)(c).

6. Cookies and browser storage

Storage	Purpose	Lifetime
falcon_session cookie	Sign-in	24 hours after the last request
falcon_impersonation cookie, in staff browsers	Support session	Up to 1 hour
Local storage	Selected site, table filters, live snapshot and colour preferences; visitor media-access token and pending checkout	Until cleared by the browser or app
Session storage	Google or Microsoft sign-in state	Until cleared or the tab closes

You can clear or block storage through your browser; this may interrupt sign-in or media access. Stripe and sign-in providers apply their own storage policies on their pages.

7. Your rights

Subject to GDPR's conditions, you can request access, correction, erasure, restriction and data portability. Change your name and email, or delete your account, on your profile page; send other requests to the contact address above.

Right to object: you can object to processing based on legitimate interests for reasons relating to your situation.

You can complain to the Latvian Data State Inspectorate or another competent supervisory authority.

To delete your account, first delete each site you own or hand it to another owner. This does not limit requests to exercise GDPR rights. Records outside the account follow the retention rules above.