Privacy Policy

1. Overview

CapEx Impact ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Service, you agree to the practices described here.

2. Information We Collect

Information you provide directly

• Account information: email address and password when you register
• Payment information: billing details processed by Stripe — we never store your card number
• Uploaded data: CSV files and analysis configurations you submit to the Service
• Report metadata: report names, reporting periods, and notes you enter when saving analyses

Information collected automatically

• Usage data: pages visited, features used, and actions taken within the app
• Log data: IP address, browser type, device type, and timestamps of requests
• Cookies: session cookies required for authentication; we do not use advertising cookies

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process payments and manage your subscription or credits
• Authenticate your account and keep it secure
• Respond to support requests and communicate with you about the Service
• Send transactional emails (purchase confirmations, password resets)
• Understand how users interact with the Service to improve features
• Comply with legal obligations

We do not sell your personal information or uploaded data to third parties, and we do not use your uploaded CSV data for any purpose other than performing the analysis you request.

4. Data Storage and Security

Your data is stored in Supabase, a cloud database provider. Data is encrypted at rest and in transit. Access to your analyses is restricted to your account through row-level security policies — no other user can access your data.

We implement reasonable technical and organizational safeguards to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services to operate the Service:

• Stripe — payment processing. Stripe may collect billing information directly. See Stripe's Privacy Policy.
• Supabase — database and authentication infrastructure. See Supabase's Privacy Policy.
• Vercel — hosting and deployment infrastructure. See Vercel's Privacy Policy.

These providers only receive data necessary to perform their services and are contractually obligated to protect it.

6. Data Retention

We retain your account information and saved analyses for as long as your account is active. If you delete your account, we will delete your personal information and associated data within 30 days, except where we are required to retain it for legal or compliance reasons.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your account and associated data
• Portability: request an export of your data in a machine-readable format
• Objection: object to certain processing of your data

To exercise any of these rights, contact us at support@capeximpact.com. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the effective date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at support@capeximpact.com.