Privacy at Capsule

Product privacy information · 7 October 2026

Contact hello@headpills.com about your account, website data, access requests or deletion.

Client accounts

We store your verified email, account details, session records, sites, invoices, requests, AI editing conversations and usage records, approved releases and administrative audit records to provide the service. Capsule uses a session cookie for sign-in. Google sign-in is optional; email verification is also available. Administrators can access client accounts for support and hosting operations.

Website analytics

The Capsule analytics script does not set analytics cookies or local-storage identifiers. The service receives page paths, referrer information, coarse country data, device/browser information, events and available performance measurements. It uses the connection IP address and user agent to create a salted, site-specific daily visitor identifier; raw IP addresses are not stored in the analytics tables. Daily identifiers do not provide a persistent cross-site profile.

Raw analytics events are retained for up to 400 days. Daily aggregate summaries remain available for the service history. This description applies to Capsule’s measurement only: other scripts, forms and services on a website may have different requirements. Website owners are responsible for informing their visitors about the services they use.

Enquiries and operational messages

Connected forms store the information visitors submit, such as name, email, phone and message. Enquiries are visible to the account and HeadPills staff. Operational notifications are delivered by email. Optional account integrations can forward enquiries to recipients or a CRM configured for that account. Form submissions remain in the account until they are removed or a deletion request is handled.

AI website editing

Site chat messages, screenshots and other attachments are stored with the site conversation and used to prepare website changes. The editing service processes relevant website source, instructions and attachments through an OpenAI-powered runner operated by HeadPills. Materials remain scoped to the client account; HeadPills staff can inspect them to operate and support the service. Usage records track the included monthly AI allowance. A prepared website version is published only after the client approves it.

Request a copy or removal of conversation materials from your verified account email. Financial and administrative audit records may need to be retained separately after service ends.

Service providers

Cloudflare provides hosting, network services, attachment storage and database infrastructure. OpenAI processes the website editing inputs used by the AI service. Resend delivers operational email. Google provides optional sign-in and, when authorized, Search Console access. Processing locations and provider policies depend on these services. Failed operational emails are queued for retry; successful queue payloads are cleared. Financial and audit records may need to be retained after service ends.

Requests about data

Contact HeadPills from your verified account email to request a copy, correction or removal of account data. For an enquiry submitted to a client website, contact that website’s operator; HeadPills can help the operator locate and manage it.