Caperbit
Legal & Compliance

Privacy Policy

Effective Date: August 25, 2026 | Last Updated: August 25, 2026

Privacy & Data Scope

Caperbit is a custom software engineering and IT services provider. We are committed to protecting the privacy of our website visitors, clients, and individuals whose data we process in connection with our services. This document explains our practices regarding personal data collection, usage, and security across our corporate platforms, client solutions, and integrated applications.

1. Scope of This Policy

This Privacy Policy describes how Caperbit ("we", "us", or "our") collects, uses, processes, and protects your information. This policy applies to:

  • Our primary corporate website (caperbit.com).
  • Our general IT services, custom software projects, consulting operations, and technical support.
  • Software integrations, platforms, and applications operated or managed by Caperbit on behalf of our clients.

Please note that Caperbit operates as a service-based agency. For custom applications and CRM portals developed for our clients, the respective client acts as the Data Controller, and Caperbit processes data solely as a Data Processor under contract.

2. Information We Collect

Depending on how you interact with Caperbit, we may collect different categories of data:

Direct Inquiries

Name, email address, corporate phone numbers, business name, and message content supplied when submitting forms on our website or contacting our support lines.

Service & Integration Data

Technical metadata, IP addresses, application request headers, and transactional message logs processed during the active execution of our client-facing API applications.

3. How We Use Information

We use the information we collect to operate our business, deliver custom software solutions, and maintain system stability:

  • Service Delivery: Designing, building, hosting, and maintaining custom enterprise systems, ERP architectures, and CRM databases.
  • Customer Support: Responding to service queries, diagnosing software errors, and completing contracted maintenance tasks.
  • Security & Infrastructure: Preventing unauthorized access, protecting server infrastructure, and maintaining system logs for diagnostics.

We do not sell, rent, or trade your personal data for advertising or marketing campaigns.

4. API & Third-Party Integrations (Meta / WhatsApp Cloud API)

Caperbit designs, configures, and deploys application integrations utilizing official API services, including the Meta & WhatsApp Cloud API. This section covers data processed through these integrations:

Data Received via Webhooks

When end-users send messages to an integrated WhatsApp Business channel configured by us, our API endpoints receive secure webhook payloads. This data includes the sender’s phone number, WhatsApp display name, message IDs, text contents, and associated media files.

Purpose of Processing

This data is processed in real-time to facilitate automated conversational chatbot logic, run ER/CRM integrations, synchronize inventory databases, or route tickets to customer support dashboards as requested by the client.

Data Verification & Webhook Security

To prevent unauthorized requests, all Meta webhook traffic is authenticated using X-Hub-Signature-256 checking. We verify each payload using secret keys to ensure it originates exclusively from Meta’s servers.

Meta Developer Policies

We strictly comply with Meta’s Developer Policies and the WhatsApp Business Terms of Service in our application architectures.

5. Data Sharing & Third-Parties

We share data with third parties only when necessary to execute our services or comply with laws:

  • Authorized Subprocessors: Cloud hosting providers (e.g., AWS, Google Cloud) and infrastructure platforms hosting our service configurations.
  • API Providers: When utilizing integration tools (such as Meta Platforms for WhatsApp messaging), data is processed in accordance with their provider policies.
  • Enterprise Clients: When Caperbit acts as a processor, the enterprise client has complete access to the data, logs, and user interactions within their system.
  • Legal Requirements: We may share data if required under applicable laws, court orders, or official investigations.

6. Data Retention & Deletion

We handle data retention in accordance with standard business procedures and contract specifications:

  • Integration Data: Webhook payloads and conversation contents are processed in real-time. They are routed instantly and are not stored in Caperbit’s databases unless caching services are requested by the client.
  • Logs: Transaction and debug logs containing network headers are retained for diagnostics and security audits. These logs are automatically purged after 30 days.
  • Client Records: Corporate contact and project details are retained as long as the service relationship remains active or as required for accounting purposes.

7. Data & Webhook Security

Caperbit implements robust administrative, technical, and physical safeguards:

  • Transport Security: All data is encrypted in transit using Secure Sockets Layer (SSL) and Transport Layer Security (TLS 1.3).
  • Webhook Integrity: Integrity verification for external integrations to guarantee payload origin.
  • Access Control: Restricting system access to authorized developers and technical staff under strict confidentiality terms.

8. Your Privacy Rights

Under global privacy laws (such as GDPR in Europe or CCPA in California), you have rights regarding your personal data:

  • The right to access and receive details about the personal data in our possession.
  • The right to request rectification or updates to inaccurate records.
  • The right to request complete deletion of your personal data.
  • The right to restrict or object to certain processing activities.

To exercise these rights, please contact our privacy desk. If your query relates to data processed on behalf of a specific client platform, we will refer your request to the respective client.

9. Contact Information

For questions, compliance requests, or deletion notices regarding this general Privacy Policy or our API integrations, please reach out to:

Caperbit Compliance

Privacy & Technical Security Desk

info@caperbit.com
Contact Desk