Privacy Policy
Last updated: February 14, 2026
What We Collect
When you create an account, we collect your email address and a hashed password. When you subscribe, Stripe processes your payment information — we never see or store your full card number.
API Keys (BYOK Model)
Capable.ai uses a Bring Your Own Key model. Your AI provider API key is sent directly to your DigitalOcean droplet during deployment. We never store, log, or transmit your API key through our servers. It exists only in your browser session and on your own infrastructure.
Your Server & Data
Your agent runs on a DigitalOcean droplet that you own. All conversation data, memory files, knowledge documents, and agent activity logs are stored exclusively on your server. We do not have access to your droplet or its data after deployment.
Payment Processing
Payments are processed by Stripe. We store your Stripe customer ID, subscription status, and billing dates. We do not store credit card numbers or bank account details.
DigitalOcean Integration
When you deploy an agent, we use the DigitalOcean API with temporary OAuth tokens to create a droplet on your behalf. These tokens are used during deployment only and are not stored long-term. We earn affiliate revenue from DigitalOcean for referrals.
Cookies
We use a session cookie to keep you logged in. We do not use tracking cookies or third-party analytics.
Contact
Questions about this policy? Email us at [email protected].