Privacy Policy

Effective date: October 1, 2026 · Last updated: October 1, 2026

本页面为英文法律文本。如中英文版本不一致，以英文版本为准。

This policy explains what Quest Space, Inc., a Delaware corporation ("Captain", "we", "us"), collects when you use the Captain website (captainspace.ai) and application (beta.captainspace.ai), how we use it, who we share it with, and the choices you have. Captain is an AI-native group chat, so a large part of this policy is about how your messages and files are processed by AI models and connected tools.

1. Scope

This policy covers visitors to our website, people who create an account, and people who are invited into a workspace by someone else. If your employer or another organization set up the workspace, it decides what data goes into Captain and may have its own privacy notice; see Section 12.

2. Data we collect

2.1 Data you give us

• Account data: email address, name, password (stored hashed by our authentication provider), display avatar, language preference, and the invitation code you used.
• Workspace content: messages, chat history, files and images you upload, agenda items, project plans, instructions you give AI staff, agents you create or publish, and the workspace memory that Captain builds from these.
• Connected-tool data: when you connect a third-party service (for example Google Workspace, Notion, Linear, GitHub, Slack, Granola, or an MCP server), the OAuth tokens or API keys needed to access it, and the data you ask Captain to read from or write to that service.
• Your own model keys: if you bring your own API keys for a model provider, we store them encrypted and use them only for the requests you route through them.
• Billing data: plan, seat count, credit balance and transactions, card brand, last four digits and expiry, billing name and address, and the auto-recharge settings a workspace owner chooses. Full card numbers go directly to Stripe and never reach our servers.
• Website forms: the email address, name and company you submit through the waitlist or contact forms on captainspace.ai.
• Referrals and invitations: when you invite someone to a workspace or refer a colleague, we collect the email address (and name, if you give one) you enter, send that person an invitation or referral email on your behalf that identifies you as the sender, and keep a record of the invitation and a suppression list so that people who unsubscribe are not emailed again. Only enter addresses of people who would expect to hear from you. Recipients can unsubscribe with one click and are not added to any marketing list.
• Support and feedback: emails you send us and anything you choose to include in them.

2.2 Data we collect automatically

• Usage and metering: which features, models and tools your requests use, token counts and cost per request, timestamps, and error logs. We need this to bill credits accurately and to keep the Service running.
• Device and connection data: IP address, browser type, and request metadata in server logs, kept for security and rate limiting.
• Product analytics: only if your workspace opted in. See Section 11.
• Website visits: on captainspace.ai, a random visitor ID and session ID stored in your browser, the pages you view and any campaign (UTM) tags in the link you arrived from, unless your browser sends a Do Not Track or Global Privacy Control signal. See Section 11.

3. How we use data

We use data to:

• provide the Service: deliver messages, run AI staff, read and write connected tools on your instruction, keep workspace memory, and generate the output you request;
• run billing: meter usage, apply included and purchased credits, process subscriptions, trials, top-ups and auto-recharge through Stripe, and send receipts and billing notices;
• keep the Service secure: authenticate you, enforce workspace permissions, detect abuse and fraud, and respond to incidents;
• communicate with you: account, billing and security emails, responses to support requests, product updates you can opt out of, and invitation or referral emails sent at a user's request;
• improve the Service: aggregate, de-identified usage statistics and error diagnostics;
• comply with law and enforce our Terms.

Where the GDPR or UK GDPR applies, our legal bases are performance of a contract (providing the Service and billing), legitimate interests (security, fraud prevention, improving the Service, business communications), consent (optional analytics, marketing emails) and legal obligations (tax and accounting records).

4. AI processing

• What is sent to models. When you talk to AI staff or run a task, the relevant messages, files, memory items and connected-tool results are sent to one or more large-language-model or image-model providers to generate a response. Captain's Smart Router picks a model per request by difficulty and cost unless you or your workspace chose a specific model.
• Providers. Depending on the model, requests go to Anthropic, OpenAI, Google, DeepSeek, Zhipu, Moonshot, Alibaba Cloud, MiniMax or xAI, directly or through API gateways (OpenRouter, SiliconFlow, OpenLux and Alibaba DashScope); the full list with locations is in Section 6. We use each provider under its API or enterprise terms and, where those terms give us the choice, we do not permit training on your content. Most of these providers state that API inputs and outputs are not used to train their models and are kept only briefly for abuse monitoring; we review their terms when we add them but do not control or audit their practices, and providers located outside the United States may be subject to different laws. If this matters for your data, choose models manually in the app or bring your own key.
• No training by Captain. We do not use your content to train or fine-tune foundation models of our own. We do use usage data (metering, routing, performance and error data) and de-identified or aggregated data to operate and improve the Service, including our routing, safety and classification systems, as described in the Terms.
• Memory. Captain builds a shared memory of facts, preferences and decisions from workspace activity so AI staff can recall context. Memory is scoped to the workspace (and, for private chats, to you) and is visible to members according to that scope. Owners and admins can review, correct and delete memory items in the app.
• Human confirmation. By default, AI staff do not take outbound actions in connected tools (send email, create records, post messages) without a person confirming in Captain. Workspace owners and admins can change this for particular agents, tools or delegated tasks.
• Bring your own key. If you route a request through your own API key, the request goes directly to that provider under your agreement with it.

5. Payments

Payments are processed by Stripe. When you add a card or check out, you do so on pages hosted by Stripe; Stripe collects and stores your card details and acts as an independent controller for the data it needs to process payments, prevent fraud and meet its legal obligations. See Stripe's Privacy Policy. We receive and store a Stripe customer ID, card brand, last four digits, expiry, payment status, invoices and receipts, and the consent record created when a workspace owner authorizes card-on-file charges. We keep billing records for as long as tax and accounting law requires (generally 7 years).

6. Sharing and sub-processors

We do not sell personal data and do not share it with advertisers. We share data only with:

• Your workspace. Members of a workspace see the content and memory shared in that workspace according to its permissions. Owners and admins can see member lists, usage and billing.
• Services you connect. Data flows to and from the third-party tools and MCP servers you connect, under their terms.
• Sub-processors that help us run the Service, under their terms of service or our agreements with them, which limit their use of data to providing their service:

We may also disclose data to comply with law or a valid legal request, to protect the rights, safety or property of Captain, our users or the public, or as part of a merger, acquisition or sale of assets (we will notify you if your data becomes subject to a different privacy policy). We may add or replace sub-processors at any time; the current list is always on this page. Customers with a Data Processing Addendum receive the notice and objection rights it describes.

7. Where data is stored and processed

Our primary database and file storage are in the United States. Wherever you use the Service from, your data is processed in the United States and, for the AI providers and gateways in Section 6, in the regions shown there, which can include Singapore and China when you or the Smart Router select a model hosted there; you can restrict this by choosing models manually or bringing your own key. If you are in the EEA, the United Kingdom or Switzerland and act as a controller, our Data Processing Addendum (available on request) incorporates the EU Standard Contractual Clauses (Module 2 and, where relevant, Module 3) and the UK Addendum for transfers to us, and we impose equivalent transfer terms on our sub-processors for onward transfers. We are not certified under the EU-US Data Privacy Framework. The Service is not marketed in or directed to the EEA or the United Kingdom (Terms, Section 20); the GDPR-related statements in this policy are made for transparency.

8. Retention

• Workspace content and memory: kept while the workspace exists. Items you delete in the app stop being available in the product immediately and are purged from our primary systems on a rolling basis, generally within 30 days; encrypted backups roll off after that on their normal rotation. After a workspace or account is closed we begin deletion within 30 days and complete it, including backups, within 180 days, except for records we must keep by law, de-identified data, and copies held by model providers under their own retention terms.
• Connected-tool credentials: revoked and deleted from our primary systems when you disconnect the tool or the workspace is closed; backup copies roll off on the same schedule.
• Usage and metering records: kept for the life of the workspace plus the period required for billing disputes and tax (up to 7 years, in aggregate or pseudonymized form where possible).
• Server and security logs: typically 30 to 90 days.
• Billing records and invoices: 7 years, as required by tax and accounting law.

9. Security

All traffic is encrypted in transit with TLS. Data is encrypted at rest by our hosting providers. OAuth tokens and API keys are additionally encrypted at the application level before storage, and access to connected tools is scoped to the permissions you grant. Workspace data is isolated by row-level access rules in the database. Access to production systems is restricted to a small number of staff and logged. No system is perfectly secure; if we learn of a breach affecting your personal data we will notify you and the relevant authorities as the law requires.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent. Residents of California and some other US states also have the right to know what personal information we collect and to opt out of "sales" or "sharing" (we do neither) and may designate an authorized agent.

• In the app: edit your profile in Settings; delete messages, files and memory items; disconnect tools in Integrations.
• By email: to delete your account, request an export of your workspace's data (provided in a machine-readable format), access data we hold about you, or exercise any other right, email captain@questspace.ai from the address on your account. We respond within 30 days (45 for complex requests) and may need to verify your identity.
• Marketing emails: use the unsubscribe link. Account, billing and security notices cannot be opted out of while you have an account.
• Complaints: you can lodge a complaint with your local data-protection authority. We would appreciate the chance to address your concern first.

If your data was put into Captain by a workspace owned by someone else, we may refer your request to that owner, who controls that workspace's content.

10A. Notice for California and other US states

This section applies if you live in California or another US state with a comprehensive privacy law. In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described in Sections 2 and 3:

• We do not sell personal information and do not share it for cross-context behavioral advertising, and have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16.
• We use sensitive personal information only to provide the Service you request, keep it secure and meet legal obligations; we do not use it to infer characteristics about you.
• We treat an opt-out preference signal such as Global Privacy Control as a request to opt out of sale and sharing; because we do neither, no further action is needed.
• Financial incentives. Welcome credits are given for starting a trial, and any referral credits we offer are given when someone you refer becomes a customer. Participation is voluntary; you can decline by not starting a trial or not making referrals. We do not value personal information in setting these amounts and do not sell the information collected.
• You may ask us to disclose, correct or delete your personal information, or to provide it in a portable format, by emailing captain@questspace.ai. We verify requests by matching your account email and may ask for more information. You may use an authorized agent if you provide proof of authorization. We will not discriminate against you for exercising these rights. Where we act as a service provider for a workspace, we forward your request to the workspace owner.

11. Cookies and analytics

• Essential storage. The app stores your session token, language choice and interface preferences in your browser's local storage. These are required for the Service to work and are not used for tracking.
• App analytics are opt-in and first-party. The app does not load third-party analytics or advertising scripts. Product analytics are off unless a workspace owner opts in when asked during onboarding; when on, we record product events (which features are used, errors) on our own servers, tied to a workspace and account ID, to improve the Service. Email us to withdraw a workspace's consent.
• Website. The marketing site at captainspace.ai loads no third-party scripts and sets no advertising cookies; the demo video is self-hosted. The site stores a random visitor ID and session ID in your browser and records page views and campaign tags in our own database so we can count visits and connect a waitlist sign-up to the visit that led to it. It honors Do Not Track and Global Privacy Control: when either signal is on, nothing is recorded.
• Stripe. Pages hosted by Stripe set Stripe's own cookies for fraud prevention; see Stripe's cookie policy.

12. Workspaces: who is responsible

For account data and for how the Service itself works, Captain is the controller (or "business"). For the content a workspace puts into Captain, the organization that owns the workspace is the controller and Captain acts as its processor (or "service provider"), handling that content only on the workspace's instructions and under this policy and the Terms. If you need a data-processing agreement for your organization, email captain@questspace.ai.

13. Children

The Service is sold to businesses, is not directed to anyone under 18, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact us and we will delete it.

14. Changes

We may update this policy as the Service changes. We will post the new version here with an updated effective date and, for material changes, notify you by email or in the app before they take effect.

15. Contact

Quest Space, Inc., a Delaware corporation, operating Captain
2261 Market Street, San Francisco, CA 94114, USA
Privacy requests: captain@questspace.ai
Web: captainspace.ai