Privacy policy

Last updated: 12 July 2026

1. What we collect

The widget collects only signals needed to tell a browser from an automation tool: request headers, coarse timing of input events, and the IP address of the request. We do not read form contents, we do not set advertising cookies and we do not build cross-site profiles.

2. What we do not do

• We never sell or share signals with advertising networks.
• We never use collected data to train models for third parties.
• We never persist raw input events — only the derived score.

3. Retention

• Raw request signals: 24 hours, then deleted.
• Derived scores and request ids: 7 days (Free) or 90 days (Pro).
• Billing records: as required by accounting law.

4. Where data is stored

All processing happens on servers located in the Russian Federation. Enterprise customers may request a different residency or an on-premise deployment where no data leaves their perimeter.

5. Your rights

You may request export or deletion of data associated with your account at any time by writing to privacy@capguard.ru. We respond within 10 working days.

6. Sub-processors

Payment processing and email delivery are handled by third parties who receive only the data required for those functions. The current list is available on request.

7. Changes

Material changes are announced by email to account owners at least 14 days before they take effect.