Privacy Policy

Last updated: November 7, 2026

Capstone Foundry ("we," "our," or "the Service") respects your privacy and is engineered around local execution, zero data selling, and strict tenant isolation.

1. Likeness, Voice & Digital Avatar Governance (AB 2602 / NO FAKES Act)

Capstone Foundry allows users to configure personal digital likenesses (photos or videos) and voice models. In accordance with California AB 2602, AB 1836, and the federal NO FAKES Act:

Your likeness, photo, video, and voice assets belong exclusively to you.
We do not license, distribute, sublicense, train public foundation models on, or transfer your biometric likeness or voice to third parties.
All client-side video and lip-sync rendering occurs locally on your browser or device via HTML5 Canvas.

2. Data Collection & Storage

We collect only the minimum information necessary to provide executive voice pair programming and memory recall:

Account Credentials: Email addresses and salted password hashes for session authentication.
Autonomous Memory: Conversation logs, technical decisions, code artifacts, and task reminders, stored in encrypted PostgreSQL database instances with strict tenant isolation.
Telemetry: Operational error reports and heartbeat metrics to ensure continuous execution reliability.

3. Hands Desktop Execution Security

When using Helmion Hands desktop integration, commands execute exclusively on authorized local spokes authenticated via cryptographically signed tokens. No remote arbitrary execution occurs without user authorization.

4. Third-Party Integrations

Voice generation leverages ElevenLabs API under secure HTTPS connections with server-side API keys. Audio streams are transient and not retained for public model training.

5. Contact & Data Deletion

To request complete deletion of your account and all associated PostgreSQL memory records, email support@capstonefoundry.cloud or submit a request directly through your account settings.