legal
Privacy policy
capscope surfaces public professional information about investors and helps founders raise. This policy explains what we collect, why, who we share it with, and how to exercise your rights.
1. Who we are
capscope ("capscope", "we", "us") provides investor intelligence for founders raising capital. This policy explains what data we process, why, and your rights over it.
The data controller is Elevate Studio, C. Salzillo, S/n, 03189 Orihuela, Alicante, Spain. For any privacy question, contact us via the /contact page.
2. Data we process
- Account data you give us: your email (for magic-link sign-in), and the company details you enter or that we derive from a URL you submit during onboarding.
- Usage data: how you interact with the product (screens, watchlist, drafts), held to operate and improve the service.
- Public professional information about investment firms and the people associated with them, gathered from public sources — talks, podcasts, writing, filings, and press — to build investor profiles. We do not present private personal contact details; firm contacts are role-based.
- Form submissions: contact and data-removal requests you send, stored so we can act on them.
3. Where investor information comes from
Investor profiles are built only from publicly available material: public talks, podcasts, published writing, regulatory filings, and press. We cite sources. We do not buy private contact databases and we do not present personal contact data for the people in those profiles.
If you are an investor or firm and want your information corrected or removed, use the data removal page — see Your rights below.
4. Why we process data (legal bases)
- To provide the service you signed up for (performance of a contract): authentication, building your profile, matching, drafting.
- Our legitimate interests: operating, securing, and improving the product, and presenting public professional information relevant to fundraising — balanced against the rights of the people concerned.
- Compliance with legal obligations, where applicable.
5. Sharing & processors
We do not sell your personal data. We share data only with service providers that help us run capscope — for example cloud hosting and infrastructure (Cloudflare), email delivery, and payment processing (Stripe) — each acting under contract and only as needed to provide their service.
Payment card details are handled by Stripe; capscope never sees or stores card numbers.
6. Retention
We keep account and usage data for as long as your account is active and as needed to provide the service, then for a reasonable period to meet legal, security, and dispute-resolution needs. Form submissions are kept while we act on them and for our records.
7. Security
We take a paranoid-by-default approach: encrypted transport, HttpOnly/Secure/SameSite session cookies, no plaintext credentials, server-side enforcement of access, parameterized database access, and rate limiting on sensitive endpoints. No system is perfectly secure, but we design to minimise risk.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise them — including removal of personal data or a firm listing — use the data removal page, or contact us via /contact.
9. Cookies
We use a small number of strictly necessary cookies — primarily the session cookie that keeps you signed in and the local preference that remembers your light/dark theme. We do not use advertising cookies.
10. Changes to this policy
We may update this policy as the product evolves. Material changes will be reflected here with a new effective date.