Privacy Policy

Effective Date: July 28, 2026. This Privacy Policy describes how CODIMITE PTE. LTD. (“Caprome”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data obtained from visitors to our website, users of our software, and administrators managing our services. Caprome is an enterprise-grade screen recording, monitoring, and compliance solution specifically designed for organizations utilizing managed ChromeOS and ChromeOS Flex devices.

This Privacy Policy applies to the processing of personal data across all Caprome services, including:

• The Caprome marketing website (https://caprome.com) and associated demonstration inquiry tools.
• The Caprome Progressive Web Application (PWA) and Isolated Web App (IWA) deployed on managed ChromeOS devices.
• Our unified cloud-based administration panel used by corporate Super Admins.
• Automated screen-recording sessions, transcripts, and related metadata.
• AI-assisted detection and analysis of user workflows, operational events, and compliance patterns.
• Native integrations, API pipelines, and corporate workspace storage endpoints.
• Customer support operations, troubleshooting logs, and technical diagnostics.

We collect different categories of information depending on how you interact with our services and the roles assigned to your account.

A core principle of Caprome’s architecture is that all high-fidelity screen recording files are stored directly in customer-controlled cloud environments.

• Storage Isolation: Caprome does not own or rent centralized cloud buckets for your raw video recordings. Video data goes directly to customer Google Cloud Storage (GCS), Amazon S3, or Microsoft Azure instances.
• Metadata Processing: Caprome only processes and indexes the minimum metadata necessary to populate search features, audit logs, and dashboard metrics.
• Recording Notifications: To support transparency, Caprome displays persistent, non-intrusive notifications on end-user desktops whenever active screen recording is occurring.
• Customer Responsibility: Customers are solely responsible for configuring appropriate local access rules, encryption settings, and retention timelines for their stored media.

We process information for the following specific purposes:

• To deploy, run, and maintain Caprome across managed ChromeOS fleets.
• To secure our infrastructure, authenticate authorized administrators, and prevent unauthorized account access.
• To process compliance alerts and surface operational insights using our AI analytics connector.
• To respond to technical inquiries, resolve application issues, and optimize software performance.
• To evaluate website engagement, deliver product updates, and offer tailored product demonstrations.

We process data under clear regulatory legal bases, including:

• Contractual Performance: Necessary to deliver our software services per our corporate agreement.
• Legitimate Interests: Necessary to protect corporate security, prevent system abuse, and optimize our products.
• Consent: Used for marketing inquiries, demo requests, and customer-configured notifications.
• Legal Obligation: Necessary to comply with relevant tax laws, financial auditing, and governmental authority requests.

Our website uses cookies to improve security and analyze web traffic. Cookies are organized into:

• Strictly Necessary: Core cookies required to browse the website and access secure administrative panels.
• Analytics and Performance: Cookies that help us evaluate visitor engagement, popular resources, and loading times.
• Functional: Cookies that remember your preferences, active filter selections, and language settings.
• Marketing: Anonymous tags used to deliver tailored product update announcements on business networks.

We do not sell Caprome data. We only share information in limited corporate scenarios:

• With trusted service providers under strict data processing agreements (DPAs).
• With authorized corporate parent entities and subsidiaries for administrative coordination.
• With integrated customer workspace environments, such as Google Workspace Admin Console.
• When required by law, court order, or formal regulatory enforcement action.
• During a potential merger, business acquisition, or structural asset sale.

Because customers choose where to host their primary recording storage, regional compliance stays in your control. Caprome implements strict European Union Standard Contractual Clauses (SCCs) and GDPR-compliant transfer safeguards for all meta-processing activities.

Caprome enforces state-of-the-art administrative and physical safeguards:

• End-to-end data encryption using industry-standard TLS 1.3 for data in transit and AES-256 for resting metadata.
• Comprehensive Role-Based Access Control (RBAC) preventing unauthorized privilege escalation.
• Continuous automated security scanning, regular penetration testing, and persistent audit logs.

We retain account metadata as long as your corporate agreement remains active. All customer-hosted screen recordings are deleted or archived according to the custom retention policies defined by your organization’s Super Admin in the Google Workspace or Caprome console.

Depending on your jurisdiction (such as GDPR in the EU, CCPA/CPRA in California), you may have the following rights:

• The right to access and receive copies of the personal data we hold about you.
• The right to request immediate correction of inaccurate or incomplete personal information.
• The right to request deletion of your personal data under certain regulatory exceptions.
• The right to object to or request restriction of our ongoing data processing activities.

Our enterprise services are not intended for, marketed to, or structured for use by children under the age of 16. In educational environments utilizing managed ChromeOS devices, deployment and consent must be managed strictly by school district administrators.

Our platform interacts with external cloud services, including Google Cloud Storage, Amazon Web Services, Microsoft Azure, and corporate identity provider single-sign-on (SSO) systems. We do not control and are not responsible for the privacy practices of third-party platforms.

We may periodically revise this Privacy Policy to reflect software upgrades, regulatory shifts, or changing corporate practices. When revisions occur, we will post the updated policy here and adjust the “Updated Date” accordingly.

For privacy-related questions, data rights requests, or corporate compliance inquiries, please reach out to our legal department: