Privacy policy. What we hold, and why.
Capitaly works in your inbox and documents, so it handles what is in them. Here is all of it.
Updated September 2026
What we collect
From your team: name, work email, and what they do in the product.
From your inbox: the investor threads Capitaly reads and sends, and the contact details in them.
From your tools: the documents, metrics and investor records you choose to connect.
From the site: which pages were visited, through Google Analytics, and which company a visit came from, through Apollo. No advertising trackers.
Why we hold it
To find investors, send and answer email, book meetings, run the deal room and show you what happened. The log of every action is how you check what the agents did, and how we fix it when they got it wrong.
Where it lives
In encrypted databases and storage run by our infrastructure providers.
Models that read an email or document may process it in other countries. They are not permitted to keep it or train on it.
Who else sees it
Only the services that make the product work: the email providers you connect, the model provider that reads the content, and the database, storage and sign in providers that hold the account.
Each is bound to use it only to provide that service to us. We do not sell your data or your investors' data, and we never have.
How long
For as long as your account is open, and you can delete any thread or document sooner. Account records for seven years after you close, because tax law asks us to.
Investors' rights
An investor or contact can ask what we hold about them, ask for a copy, or ask for it to be deleted. Send it to [email protected] and we will action it within thirty days.
If something goes wrong
If data is exposed in a way likely to cause harm, we will tell affected account holders and the relevant data protection authority, as the law requires.
Asking us about it
[email protected]. A person reads it.