Privacy Policy

Effective date: March 1, 2026 · Last updated: March 1, 2026

Capitalyx is operated by Ase Studios, LLC, a company incorporated in New York, NY (“we”, “our”, or “us”). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at capitalyx.com.

1. Information We Collect

We collect the following categories of information:

• Account information: Your email address, name, and profile data collected at registration via Clerk authentication.
• Business information: Business name, industry, and company details you provide when setting up your organization.
• Financial data: Revenue figures, cost data, cash balances, employee counts, and other financial metrics you manually enter or import into Capitalyx. This data is used solely to power your forecasts and scenarios.
• Usage data: Pages visited, features used, and interactions with the platform to improve our service.
• Payment information: Billing details processed exclusively by Stripe — we never store your full card number or payment credentials.

2. How We Use Your Information

We use your data to:

• Provide, operate, and improve the Capitalyx platform
• Generate AI-powered financial insights and forecasts from your data
• Process subscription payments and manage your billing
• Send transactional emails (account confirmations, billing receipts)
• Respond to support requests and inquiries
• Comply with legal obligations

3. Data Storage & Security

Your data is stored in a secure cloud database (Neon Postgres), encrypted at rest and in transit. We apply industry-standard security practices including HTTPS/TLS encryption, access controls, and regular security reviews.

Authentication is handled by Clerk, a SOC 2 Type II certified identity provider. Payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor. We do not store your payment card details.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data or financial data to any third parties. Your financial information remains yours.

We share data only with the following sub-processors, strictly to deliver our service:

• Clerk — Authentication and user management
• Stripe — Payment processing and subscription management
• Neon — Database hosting (Postgres, US-East region)
• Anthropic — AI-powered insights (your financial data may be sent to generate AI summaries; Anthropic does not train on API data)
• Vercel — Application hosting and deployment

5. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or UK, you have the following rights under GDPR:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data (“right to be forgotten”).
• Right to portability: Receive your data in a machine-readable format (use the Export feature in Settings).
• Right to restrict processing: Request that we limit how we use your data.
• Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, email us at support@capitalyx.com. We will respond within 30 days.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription or request account deletion, we will delete your data within 30 days, except where we are required to retain it by law (e.g., billing records for tax purposes, retained for 7 years).

7. Cookies

We use essential cookies required for authentication and session management. We use analytics cookies (anonymized) to understand how users interact with the platform. You can manage cookie preferences through the banner on first visit. We do not use advertising or tracking cookies.

8. Children's Privacy

Capitalyx is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the change takes effect.

10. Contact Us

For privacy inquiries, data requests, or to exercise your rights: