Privacy Policy

CAPULET LEISURE LIMITED (trading as Capulet) is the data controller for personal data processed through capuleis.shop. We are a private limited company registered in England and Wales.

• Registered office and postal address: 85 Victoria Road, SN1 3BB, United Kingdom
• Data protection contact: support@capuleis.shop
• Telephone: +44 7224889513

Write to that email address for any question about this policy, to exercise your rights, or to raise a concern. We answer within one business day and complete rights requests within one month.

We keep collection to what the workspace needs. We do not buy personal data, and we do not build profiles for advertisers.

Collection sources

We collect personal data from exactly three collection sources:

• Directly from you, when you type a brief into the Host Desk, upload a file, subscribe, or contact support.
• Automatically from your device, when your browser requests pages and our hosting provider records technical logs and our essential cookies record your plan allowance.
• From third-party providers acting for us, principally Stripe, which reports your subscription and payment outcome after you pay.

We do not obtain personal data from data brokers, public scraping, advertising networks or any other collection source.

Information you give us

• Party briefs. The occasion, guest count, vibe, space, budget, time of day, dietary and alcohol notes, and the free-text description you type into the Host Desk.
• Uploads. Photographs of your space, reference images, or a logo and brand colours if you use Studio brand features.
• Account and billing details. Your email address and the billing details you give Stripe when you subscribe.
• Support and enquiry messages. Your name, email, chosen topic and message from the contact form, and the occasion, guest count and date from the host enquiry form.

Information created when you use Capulet

• Generated output. The plans, timelines, games, menus, artwork and invite films produced from your brief.
• Usage and allowance records. How many party plans, images and films you have generated in the current billing period, stored in a signed cookie on your device and in our logs.
• Technical data. IP address, browser and device type, timestamps and error logs recorded by our hosting provider for security and reliability.

Information from other sources

• Stripe. Subscription status, the last four digits and brand of your card, the country of the card and payment outcomes. We never receive your full card number.

We do not ask for special category data. Dietary and allergy notes you type into a brief may reveal health information about you or your guests; please only include what is necessary, and do not include anyone else’s details without their agreement.

Under UK GDPR and EU GDPR we rely on the following legal bases.

• Performance of a contract. Turning your brief into a plan, generating artwork and invite films, exporting the Party Pack, applying your plan allowance, and providing support.
• Legal obligation. Keeping accounting and tax records of your subscription, and answering lawful requests from authorities.
• Legitimate interests. Keeping the service secure, preventing abuse and fraud, debugging faults, and improving how the workspace performs. We balance these against your rights and use the least data that achieves the purpose.
• Consent. Non-essential cookies and any optional marketing email. You can withdraw consent at any time without affecting what we did before you withdrew it.

We do not use your briefs, uploads or generated output to train AI models, and we do not permit our providers to train their models on it.

Capulet is an AI workspace, so this section sets out exactly what happens to the material you put into it and the material it produces for you.

User input

Your user input is the brief you type: the occasion, guest count, vibe, space, budget, time of day, and your free-text description including any dietary or alcohol notes. We process user input to build your plan and to construct the prompts that generate your artwork and invite film. User input is stored against your workspace while your subscription is active so you can return to a night, and is deleted within 90 days of the subscription ending. You can ask us to delete any brief sooner at support@capuleis.shop.

File uploads and sample data

If you upload a photograph of your space, a reference image, a logo or brand colours, that file uploadis stored only to generate the assets you asked for. Uploads are cached during generation and cleared within 30 days. The example briefs offered in the Host Desk are sample data we wrote ourselves; they contain no real person’s details.

Generated output

Your generated output is the plan, run-of-show, games, menu, artwork and invite film. It is stored with your workspace while your subscription is active and deleted within 90 days of the subscription ending. Your rights over it are in the Content License. Downloads you have already taken remain yours.

The AI provider

To produce artwork and invite films we send your prompt text, and any reference image you uploaded, to our AI provider, which returns the result to us. The AI provider acts as our processor under a written contract, receives only what a given generation needs, processes it for no other purpose, and is contractually barred from using your content to train its models. We do not send your name, email or payment details to the AI provider.

Model training

We do not use your user input, file uploads or generated output to train AI models, and we do not permit our AI provider to train on them. If that ever changes we will ask for your opt-in consent first; it will never be the default.

What not to put in

Please do not enter another person’s personal details, health information, payment details or anything confidential into a brief. Dietary and allergy notes may reveal health information about you or your guests, so include only what the plan genuinely needs.

We share personal data only with providers that help us run Capulet, under contracts that require them to protect it and to act only on our instructions.

• Payments — Stripe.Handles subscriptions and card data as an independent controller for fraud and compliance purposes. Card details are entered on Stripe’s hosted checkout; the full card number never reaches our servers.
• Hosting — Vercel. Serves the website and records operational logs.
• Database and file storage — Supabase. Stores enquiry records and workspace data.
• AI provider. Receives the prompt text built from your user input, and any reference image you uploaded, to produce your artwork or invite film, and returns the result. The AI provider is contractually barred from using your content to train models.
• Email delivery. Sends transactional messages such as receipts and support replies.

We also disclose data where the law requires it, to establish or defend legal claims, or to a buyer if the business is sold, in which case this policy travels with the data.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

We are based in the United Kingdom and some providers process data in the European Economic Area, the United States or other countries. Where data leaves the UK or EEA we rely on one of the following:

• an adequacy decision from the UK government or the European Commission covering that country;
• Standard Contractual Clauses together with the UK International Data Transfer Addendum, plus a transfer risk assessment; or
• another safeguard permitted by UK or EU data protection law.

Email support@capuleis.shop for a copy of the safeguards that apply to a specific transfer.

• File uploads and reference images: cached while we generate, then cleared within 30 days.
• User input, plans and generated output: kept while your subscription is active so you can return to a night, then deleted within 90 days of the subscription ending.
• Usage and allowance records: the current billing period, plus up to 12 months in aggregate logs.
• Support and enquiry messages: 24 months from your last message.
• Billing and accounting records: six years after the end of the financial year, as UK tax law requires.
• Security and server logs: up to 12 months.

You can ask us to delete your content sooner — see your rights below.

Traffic is encrypted with TLS. Secrets and API keys are held in server-side environment variables, never in the browser. Administrative access is limited to staff who need it and is protected by separate credentials. Session and allowance cookies are signed so they cannot be tampered with.

No service is perfectly secure. If a breach affects your rights we will notify the Information Commissioner’s Office within 72 hours and tell you without undue delay where the risk to you is high.

If you are in the UK or the EEA

Under UK GDPR and EU GDPR you have the right to:

• access a copy of your personal data;
• correct data that is inaccurate or incomplete;
• erase data where it is no longer needed or consent is withdrawn;
• restrict processing while a dispute is resolved;
• receive your data in a portable, machine-readable format;
• object to processing based on legitimate interests, and to direct marketing at any time; and
• withdraw consent where processing relies on it.

If you are a California resident

Under the CCPA as amended by the CPRA you have the right to:

• know what personal information we collect, use, disclose and retain;
• delete personal information we hold about you;
• correct inaccurate personal information;
• opt out of the sale or sharing of personal information; and
• be free from discrimination for exercising these rights.

Do Not Sell or Share My Personal Information

Capulet does not sell personal information and does not share it for cross-context behavioural advertising, so there is nothing to opt out of. If that ever changes we will publish a link to opt out before it takes effect. In the last 12 months we have not sold or shared personal information, and we have not knowingly collected or sold the personal information of anyone under 16.

How to exercise a right

Email support@capuleis.shop from the address you use with Capulet, or write to us at 85 Victoria Road, SN1 3BB, United Kingdom. We may ask one question to confirm your identity. You may use an authorised agent. There is no charge unless a request is manifestly unfounded or excessive.

We use a small number of first-party cookies. Essential cookies keep you signed in to the operator console and record your plan allowance for the current period; the site cannot work without them. Non-essential cookies are set only with your consent.

We do not use advertising cookies or third-party tracking pixels. Full detail, including names and durations, is in the Cookie Policy.

Capulet generates plans and artwork automatically from your brief. This is a creative output, not a decision that produces legal effects or similarly significantly affects you, so the UK and EU rules on solely automated decision-making do not apply. A person is always available at support@capuleis.shop if you want a human to look at something.

Capulet is not for children under 13, and we do not knowingly collect their data. Users aged 13 to 17 need the consent of a parent or guardian. Any content that mentions alcohol is restricted to adults aged 18 and over. If you believe a child has given us personal data, email support@capuleis.shop and we will delete it.

We update this policy when the service or the law changes and revise the date at the top. Material changes are announced on this page before they take effect.

If you are unhappy with how we handle your data, tell us first at support@capuleis.shop so we can put it right. You can also complain to a supervisory authority:

• United Kingdom:Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk
• EEA: the data protection authority of your country of residence or workplace.

This policy is governed by the laws of England and Wales.