Your investment record should remain under your control.

Information we collect

• Account and authentication information, such as email address and external identity identifiers
• Investor profile information you submit or approve, including objectives, preferences, constraints, and unknown fields
• Investment memories, theses, assumptions, reversal conditions, decisions, notes, proposals, and their history
• Normalized portfolio information if you intentionally provide it through a supported workflow
• Operational metadata such as tool name, data category, outcome, duration, request identifier, and timestamp
• Support correspondence you send to us

How information enters Capital Record

Information may come from you through ChatGPT and the Capital Record plugin, from the authentication provider during sign-in, from an approved import or synchronization workflow, or from direct support communication.

How we use information

We use it to authenticate users, operate and secure the service, preserve and retrieve user-controlled investment context, process proposals and approvals, provide support, diagnose reliability problems, and improve the beta.

ChatGPT and conversation data

ChatGPT is a separate service governed by its provider's terms and privacy practices. When ChatGPT calls a Capital Record tool, the information needed for that request is sent to Capital Record. Capital Record does not store complete ChatGPT transcripts by default, but it may store conversation references, source excerpts, proposals, or investment content intentionally supplied to create or explain a record.

Infrastructure providers

Capital Record uses service providers to host the application and database and to provide authentication. Current infrastructure includes Vercel, Neon, and Auth0. These providers process information on our behalf under their respective agreements and security practices.

Sharing and sale

We do not sell personal information. We may disclose information to service providers operating the product, when directed by you, to protect users and the service, or when legally required.

Retention and deletion

We retain account and investment-record data while your account is active or as needed to operate the beta. Retraction may preserve history so a record can be audited or restored. Authenticated account deletion is designed to remove the user account and user-owned financial, onboarding, proposal, memory, and audit data. We may retain limited support or legal records where required or reasonably necessary.

Security

We use administrative, technical, and organizational measures intended to protect information. No system can guarantee absolute security. See our security page for current design details.

Your choices

You can review, correct, reject, retract, restore where supported, or delete Capital Record data through authenticated workflows. Contact support@capitalrecord.ai for privacy questions.

Changes

We may update this policy as the beta changes. The effective date above will be updated when material revisions are published.