Privacy Policy

Overview

This Privacy Policy explains how casper, inc ("Casper," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal data in connection with the Casper service, our website at heycasper.ai, and any related products or services that reference or link to this Privacy Policy (collectively, the "Service").

Casper is built to work for you, not advertisers. We don't sell your data, we don't train AI models on your messages, and we don't share your data with advertisers. We collect what we need to run the Service and nothing more.

We may choose or be required by law to provide additional disclosures relating to the processing of personal data about residents of certain countries, regions, or states. Please refer to the Region-Specific Disclosures section below for additional disclosures that may be applicable to you.

This Privacy Policy is not a contract and does not create any legal rights or obligations not otherwise provided by law.

1. Who We Are

Casper is operated by casper, inc. If you have questions about this policy or your data, contact us at privacy@heycasper.ai.

2. Information We Collect

The categories of personal data we collect depend on how you interact with us and the Service. We collect personal data that you provide to us directly, that we collect automatically when you use the Service, and that we receive from third parties.

Personal Data You Provide

• Contact information, including your name, phone number, email address, and communication preferences.
• Account information, including credentials, one-time passcodes, and the products or services you have purchased or used.
• Payment information, including billing address and payment-card details. Payment-card details are collected and processed by our third-party payment provider; we do not store full card numbers.
• Messages and instructions you send to Casper, and any media (photos, files) you choose to share through the Service.
• Sensitive information that may be revealed through the messages or instructions you send (for example, information about your health, finances, or relationships). We process this information solely to provide and improve the Service.
• Feedback and support information, including the contents of messages you send through our contact form, email, or any other channel we make available.

Personal Data Collected Automatically

We and our service providers automatically collect certain information when you use the Service, including:

• Device and network information, such as IP address, device type, operating system, browser type, and unique identifiers.
• Usage information, such as the pages you visit, the features you use, the timestamps of your interactions, and diagnostic data.
• Approximate location, which we or our providers may derive from your IP address.

Personal Data from Third Parties

We may receive personal data from third parties, including from our payment provider (to confirm successful payment and manage your subscription), from authentication providers (when you sign in with a third-party account), and from the third-party services you choose to connect to the Service.

3. How We Use Personal Data

We use the personal data we collect to:

• operate, maintain, and provide the Service to you;
• respond to your messages and instructions, and personalize Casper's replies;
• process payments, manage your subscription, and prevent fraud;
• communicate with you about your account, the Service, and changes to our terms or policies;
• detect and prevent abuse, security incidents, and other harmful activity;
• diagnose and fix technical problems, and improve and develop the Service;
• conduct research and analytics on aggregated or de-identified data;
• comply with our legal obligations and enforce our terms.

We do not use the contents of your messages to train AI models, sell your personal data, or share it with advertisers.

4. How We Share Personal Data

We rely on third-party service providers to operate the Service. Each provider receives only the personal data it needs to perform its function and is contractually limited to using that data on our behalf. Categories of providers include:

• Messaging providers, to deliver and receive your messages.
• AI inference providers, to generate Casper's replies and process your requests.
• Integration partners, to manage credentials and execute actions on third-party accounts you choose to connect.
• Payment processors, including Stripe, to process payments and manage subscriptions. Stripe's use of your data is governed by its own privacy notice.
• Cloud infrastructure and hosting providers, to host our application, database, and edge network.
• Analytics and security providers, to help us understand product usage and protect the Service against abuse.

We may also disclose personal data: (a) when required by law or legal process; (b) to establish, exercise, or defend legal claims; (c) to detect or prevent fraud, abuse, or security incidents; (d) to protect the rights, property, or safety of Casper, our users, or the public; or (e) in connection with a business transaction such as a merger, acquisition, financing, or sale of assets.

We may also share personal data with your consent or at your direction. We do not sell personal data, and we do not share personal data for cross-context behavioral advertising.

5. Cookies and Tracking Technologies

We and our service providers use cookies and similar technologies on our website to operate and secure the site, understand how it's used, and improve performance. These technologies may collect information such as your IP address, browser type, and the pages you visit.

You can control cookies through your browser settings. Some features of the website may not function properly if cookies are disabled. We do not use cookies for targeted advertising.

6. Data Retention

We retain personal data only for as long as reasonably necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data, the purpose for which it was collected, and applicable legal requirements.

You may request deletion at any time by emailing privacy@heycasper.ai. Some records (for example, billing records and security logs) may be retained for longer periods as required or permitted by law.

Once retention is no longer reasonably necessary, we will delete or de-identify the personal data, or, if that is not possible, securely store it and isolate it from further active processing until deletion is possible.

7. Your Privacy Choices

Communication preferences.You may opt out of promotional emails by clicking the "unsubscribe" link in any promotional email. You may opt out of promotional text messages by replying STOP. Service-related communications (such as transaction confirmations and account notices) are not subject to opt-out.

Withdrawing consent. Where we rely on your consent to process your personal data, you may withdraw it at any time by contacting us at privacy@heycasper.ai. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Account information. You may update or request deletion of your account information by contacting us. Some information may be retained as described in the Data Retention section.

8. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal data, including the right to access, correct, delete, restrict the processing of, or take a portable copy of your personal data, and the right to object to certain processing. California residents have additional rights under the California Consumer Privacy Act (CCPA). Residents of the European Economic Area, the United Kingdom, or Switzerland have additional rights under the General Data Protection Regulation (GDPR) and similar laws.

To exercise any of these rights, email privacy@heycasper.ai. We will respond within the timeframe required by applicable law (generally 30 days). We may need to verify your identity before processing your request.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data, including encryption in transit and at rest, access controls on internal tooling, and contractual safeguards with our service providers. No system is perfectly secure; you provide your data at your own risk. If you suspect a problem with your account, contact us immediately.

10. Children's Privacy

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal data from children under 13. If you believe that a child has provided us with personal data, please contact us at privacy@heycasper.ai and we will delete the information.

11. International Transfers

We are based in the United States, and our service providers may operate in various jurisdictions. By using the Service, you understand that your personal data may be transferred to, stored in, and processed in the United States and other countries, which may have different data-protection rules than your country of residence. Where required by law, we use appropriate safeguards (such as standard contractual clauses) to protect personal data transferred internationally.

12. Region-Specific Disclosures

We may provide additional disclosures to residents of certain regions where required by law, including the European Economic Area, the United Kingdom, Switzerland, and California. If you are located in one of these regions and would like additional information about your rights, please contact us at privacy@heycasper.ai.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top. If we make material changes, we will provide notice through the Service or by other appropriate means. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy.

14. Contact Us

Questions or concerns about this Privacy Policy or our data practices? Email privacy@heycasper.ai.