Privacy Policy

• Account information. Your email address and authentication details, managed through our identity provider, Clerk. We do not store your password.
• Usage analytics. Product-usage events captured via PostHog, associated with internal user identifiers only, to understand feature usage and improve the Service.
• Portfolio and thesis data. Holdings, watchlists, notes, and investment theses you choose to add. This data is private to your account. We never sell it, share it with other users, or use it to produce public or shared content.
• Payment information. Handled by our payment processors (Razorpay for India, Stripe for other markets). We do not collect or store your full card details.
• Technical data. Limited log and device information (such as IP address and browser type) used for security, diagnostics, and error monitoring.

• to provide, operate, and maintain the Service;
• to authenticate you and manage your subscription and billing;
• to personalise your experience, such as tracking impact against the holdings and theses you provide;
• to analyse aggregate usage and improve features, reliability, and performance;
• to communicate with you about the Service, including transactional and support messages; and
• to comply with legal obligations and enforce our terms.

All payments are processed by our payment partners — Razorpay for Indian customers and Stripe for other markets. Your card and banking details are entered directly with these providers and are subject to their security standards and privacy policies. CapitSignal does not store your full card number, CVV, or bank credentials.

We use cookies and similar technologies for essential functions such as keeping you signed in, remembering preferences, and measuring product usage. You can control cookies through your browser settings; disabling some cookies may affect the functionality of the Service.

We rely on trusted third-party service providers to operate the Service. Each processes data only as needed to perform its function:

• Clerk — authentication and account management
• Razorpay — payment processing (India)
• Stripe — payment processing (other markets)
• Vercel — application hosting and delivery
• Railway — backend and data infrastructure
• Cloudflare — network, security, and content delivery
• PostHog — product analytics (internal identifiers only)
• Sentry — error monitoring and diagnostics

We retain your personal data for as long as your account is active and for a reasonable period thereafter as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymise it.

Subject to applicable law, you may request to access, correct, export, or delete your personal data, and you may object to or restrict certain processing. You can manage much of your account information directly, or contact us using the details below to exercise these rights. We will respond within the timeframes required by applicable law.

We implement reasonable technical and organisational measures — including encryption in transit, access controls, and monitoring — to protect your data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a minor has provided us data, please contact us and we will delete it.

Some of our processors operate outside your country of residence. Where your data is transferred internationally, we take steps to ensure it receives an appropriate level of protection in accordance with applicable law.

We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last updated” date above and, where appropriate, communicated to you. Continued use of the Service constitutes acceptance of the updated policy.

For privacy questions or to exercise your rights, email us at [PLACEHOLDER: support@capitsignal.com] or visit our Contact page.

Grievance / Nodal Officer: [PLACEHOLDER: Grievance officer name] — [PLACEHOLDER: grievance officer email]. Registered entity: [PLACEHOLDER: Legal Entity Name], [PLACEHOLDER: full registered address, India].