This Privacy Policy explains how [Capwise — registered legal entity name] (“Capwise,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Capwise website at https://capwise.io, our applications, and related services (the “Service”). Capwise is currently a free open beta. By using the Service, you agree to this Policy and to our Terms of Service.
1. Who we are
Capwise is the controller responsible for your information. For any privacy question or request, contact us at privacy@capwise.io.
2. Information we collect
Information you provide
- Account: your name, email address, and (if you sign in with Google) your Google profile image. You sign in with Google or with an email magic link.
- Compass questionnaire: your risk tier, time horizon, target return, selected asset classes, the capital amount you enter, and the email address you provide to receive your results.
- Watchlist and preferences: the ticker symbols you save, any notes you add, and your notification and alert settings.
- Developer waitlist: if you sign up, your email and any company, role, areas of interest, and use-case description you provide.
- Communications: messages you send us, such as support requests.
Information collected automatically
- Device and connection: IP address, browser type and user-agent, operating system, and device information.
- Usage and interaction: pages viewed, clicks, referring pages, session activity, and approximate location derived from your IP address.
- Cookies and similar technologies: set by us and our analytics providers (see Section 3).
3. Cookies, analytics, and tracking
We use a strictly necessary cookie to keep you signed in, and we use the following third-party analytics tools, which may set their own cookies and collect usage and device data:
- Google Analytics — website usage and traffic analytics.
You can control cookies through your browser settings and can opt out of Google Analytics using Google’s opt-out browser add-on. Disabling cookies may affect how the Service works, but the sign-in cookie is required to use an account.
4. How we use information
- provide, operate, secure, and maintain the Service;
- authenticate you and manage your account and sessions;
- personalize features such as your watchlist and Compass results;
- send transactional and service messages, including sign-in links and a welcome email;
- understand usage and improve and develop the Service;
- send marketing or product updates where permitted, which you can opt out of at any time;
- detect, prevent, and address fraud, abuse, security, and technical issues; and
- comply with legal obligations and enforce our Terms.
5. Legal bases (where applicable)
Where data-protection laws such as the GDPR or UK GDPR apply, we process personal information on the basis of: performance of our contract with you (providing the Service); your consent (for analytics and marketing, where required); our legitimate interests (securing and improving the Service); and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.
6. How we share information
We do not sell your personal information. We share it only as described here: with service providers that process data on our behalf, to comply with law or protect rights and safety, in connection with a business transfer, or with your consent. Our key service providers are:
- Google — Google sign-in and Google Analytics.
- MongoDB Atlas — our primary database, hosted on AWS in the United States.
- Google Cloud Platform — compute and processing infrastructure (Canada).
- Resend — delivery of transactional and sign-in emails.
- Upstash — caching of Service responses.
- Vercel — application hosting and content delivery.
Our market-data provider receives only ticker symbols and similar query parameters, not your personal information. Our list of service providers may change as the Service evolves.
7. International data transfers
We and our service providers process information in the United States, Canada, and potentially other countries, which may have different data-protection laws than your own. Where required, we rely on appropriate safeguards for these transfers.
8. Data retention
We keep your personal information for as long as your account is active and as needed to provide the Service, then for as long as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Analytics data is retained according to each provider’s settings. You can request deletion of your account and associated data at any time (see Section 10).
9. Security
We use reasonable technical and organizational measures, including encryption in transit and access controls, to protect your information. However, no method of transmission or storage is completely secure, and — particularly as a beta service — we cannot guarantee absolute security. You use the Service at your own risk.
10. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to opt out of marketing. You also have the right to lodge a complaint with your local data-protection authority. If you are a California resident, you have the right to know, delete, and correct your information and to not be discriminated against for exercising these rights; we do not sell or share your personal information as those terms are defined under California law.
To exercise any right, email privacy@capwise.io. You can unsubscribe from marketing emails using the link in those emails. We may need to verify your identity before acting on a request.
11. Children’s privacy
The Service is not directed to, and is not intended for, anyone under 18 years of age, and we do not knowingly collect their personal information. If you believe a minor has provided us information, contact us at privacy@capwise.io and we will delete it.
12. Third-party sites and services
The Service may link to or rely on third-party websites and services that we do not control. This Policy does not apply to them, and we are not responsible for their practices. Please review their privacy policies.
13. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date above and may provide additional notice. Your continued use of the Service after changes take effect means you accept the updated Policy.
14. Contact us
Questions about this Policy or our data practices? Contact us at privacy@capwise.io.