Last updated: 7 August 2026
Capaline is a sprint planning tool operated by BZUB SOLUTIONS S.L. (NIF B75441717, Valencia, Spain). This page explains what the service stores, where it is stored, and how to remove it. It is written to be read, not to be survived.
The short version. Your workspace lives on our servers in the European Union. We process it to run the service, we do not sell it, and you can export or delete it at any time. Payments and cards are handled by Paddle — we never see card numbers.
| Data | Why | How long |
|---|---|---|
| Workspace content: sprints, tasks, teams, people, roles, hours, rates | to run the planning you came for | while the workspace exists, then 90 days |
| Account: email, name, password hash, two-factor secret, sessions | to let you in and keep others out | while the account exists |
| Change log: who changed which field, from what to what | to answer «who changed this?» | while the workspace exists |
| Billing: company, billing email, plan, payments, subscription state | to charge correctly and prove it | as long as accounting law requires |
| Acceptance of these documents: account, date, version, IP | to prove the agreement exists | while the workspace exists, plus 3 years |
| Integration tokens (Jira, Telegram, PeopleForce) | to talk to systems you connected | until you disconnect them |
Integration tokens are stored encrypted. Card details are never sent to us: the payment form belongs to Paddle.
Session cookies only: cap_sid for the workspace, cap_qa for the
acceptance checklist, plus an admin session cookie for our own staff. They are
HttpOnly and carry no personal data. No analytics cookies, no advertising
cookies, no third-party trackers.
We count visits to our public website (capaline.com) ourselves, without cookies and without any third-party analytics service. For each visit we store:
sessionStorage — it disappears
when the tab closes, so two visits by the same person cannot be linked;We do not store the IP address, the full user agent, or anything that identifies a person. Because no cookie is set and no personal data is processed, this counting needs no consent banner. Statistics are kept for 12 months and then deleted.
We do not sell data, do not share it with advertisers, and do not use it to train anything.
Inside the European Union. Where a processor operates outside the EU, the transfer relies on the European Commission’s standard contractual clauses.
Under the GDPR you may request access to, correction of, or deletion of your personal data, and you may object to its processing. For everything we hold, deletion is one button — Disconnect. For anything else, write to us and we will answer. You also have the right to complain to your local data protection authority.
BZUB SOLUTIONS S.L.
Calle Fausti Valentin i Torrejon 1, Esc. A, 12 H
46026 Valencia, Spain
NIF B75441717
support@capaline.com
If this policy changes in a way that affects you, the date at the top changes and the previous version is replaced. Continued use after a change means you accept it.