Legal

Privacy Policy

This Privacy Policy describes how Caite (“Caite,” “we,” “us,” or “our”) processes personal information when you use our websites, web app, desktop apps, APIs, and related services (collectively, the “Service”). It is written for an AI creative product in the spirit of policies from peers like Runway, Higgsfield, and Arcads — adapted to how Caite actually works.

Last updated August 10, 2026

1. Scope

This Policy applies to personal information we collect through the Service, our marketing sites, and communications related to Caite. It does not cover third-party websites, model providers, or payment processors except as described below. If we process data on behalf of a business customer under a separate agreement, that agreement controls for that processing.

2. Information we collect

We collect information in three main ways:

Information you provide. Account and profile details (such as name, email, password or auth provider identifiers), billing and plan information, support messages, and survey or waitlist submissions.

User content. Prompts, settings, uploads, references, avatars, project graphs, and media you generate or store in the Service, plus associated metadata (for example timestamps, model choice, and job status).

Information collected automatically. Device and log data such as IP address, browser or app version, OS, approximate location derived from IP, pages viewed, referring URLs, and diagnostic events. We and our vendors may use cookies, local storage, and similar technologies for authentication, preferences, analytics, and security.

Information from others. If you sign in with a third-party identity provider (for example Google), we receive the profile information you authorize. Payment processors share limited billing status with us so we can keep your plan in sync — we do not receive full card numbers.

3. How we use information

We use personal information to:

  • Provide, operate, secure, and improve the Service (including web and desktop clients)
  • Run generation jobs you request and store results in your Media Library
  • Process subscriptions, credits, invoices, and account changes
  • Communicate about the Service, security alerts, and (with consent where required) product updates
  • Detect abuse, debug issues, and enforce our Terms
  • Comply with law and respond to lawful requests

Where GDPR or similar laws apply, we rely on one or more of: performance of a contract, legitimate interests (for example securing the Service and understanding product usage in aggregate), consent (where we ask for it), and legal obligation.

4. Model providers and subprocessors

Caite routes generation to third-party model and infrastructure providers you select or that power a given feature. When you run a job, the prompt, parameters, and any attached reference media needed for that job are sent to the relevant provider so they can return an output. Providers process that data under their own terms and privacy policies. We do not sell your personal information to them for advertising.

We also use service providers for hosting, storage, privacy-friendly web analytics and performance monitoring (including our hosting provider), email, customer support, and payments (including Stripe). They may process personal information only to perform services for us and under appropriate contractual safeguards.

5. Training and advertising

We do not train Caite’s models (or allow providers to train theirs via Caite) on your private prompts, uploads, or generations for advertising or model improvement, except where a provider’s own terms apply to data you send them for a job — and we configure enterprise / zero-retention options where a provider offers them and your plan enables them.

We do not sell your personal information, and we do not share it with advertisers for cross-context behavioral advertising.

6. How we share information

We disclose personal information only:

  • To service providers and model providers as needed to run the Service
  • To payment processors for billing
  • If you choose to share or publish content
  • In connection with a merger, acquisition, or asset sale, subject to appropriate protections
  • When required by law, to protect rights and safety, or to enforce our Terms
  • With your direction or consent

7. Retention

We keep account data and library media for as long as your account is active and as needed to provide the Service. After you delete content or your account, we remove it from active systems within a commercially reasonable period, subject to backups, legal holds, and fraud-prevention records. Billing records may be retained as required by tax and accounting rules.

8. Security

We use administrative, technical, and organizational measures designed to protect personal information — including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure; please use a strong unique password and protect your devices.

9. International transfers

Caite may process information in the United States and other countries where we or our providers operate. Where we transfer personal information from the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses or an adequacy decision, unless another lawful transfer mechanism applies.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export personal information; object to or restrict certain processing; and withdraw consent. You may also opt out of marketing emails via the unsubscribe link.

To exercise privacy rights, email privacy@caite.app from the address on your account, or use in-product account controls where available. We may need to verify your request. You may have the right to lodge a complaint with a supervisory authority.

California residents may have additional rights under the CCPA/CPRA, including to know, delete, and correct personal information, and to not be discriminated against for exercising those rights. We do not sell or “share” personal information as those terms are commonly defined for cross-context behavioral advertising.

11. Children

The Service is not directed to children under 16 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe we have, contact us and we will take appropriate steps to delete it.

12. Biometric and likeness features

Some features (for example avatars, voice, or face-driven generation) process photos, video, or audio you upload. We use that material to provide the feature you requested. We do not sell biometric identifiers. You are responsible for having the rights and consents needed to upload likenesses of real people.

13. Changes

We may update this Policy from time to time. We will post the revised version here and update the “Last updated” date. Material changes may also be communicated by email or in-product notice. Continued use of the Service after an update means you accept the revised Policy.

14. Contact

Privacy questions and requests: privacy@caite.app
General support: hello@caite.app
Or use our Contact page.

Caite — caite.app