Privacy Policy

CAPITA1 publishes market data, IPO information, calculators and educational material about Indian securities markets at https://www.capita1.in. We are not a SEBI-registered investment adviser or research analyst, and nothing on the site is investment advice.

For any question about this policy, about what we hold on you, or to ask that we delete it, write to support@capita1.in. A request to delete personal data is answered by a person, not a form.

You do not need an account and we do not ask for your name. What is collected is the following, and nothing else.

• Google Analytics 4 (measurement ID G-E187N83RJQ) records the page you viewed, the page you came from, your approximate location, your device and browser, and your IP address as Google sees it. It sets its own cookies in your browser. Google is the controller of that data and its handling is governed by Google's own policies.
• Our own analytics record the name of an event (for example, that a call-to-action was clicked), the time, the page path, and whether you were signed in. There is no third-party code in this path and no advertising identifier. These records are deleted automatically after 180 days.
• Your IP address is used as a short-lived rate-limiting key so that automated traffic cannot exhaust the AI features. It is held for one hour and is not stored alongside anything that identifies you.
• Your theme preference (light or dark) is stored in your browser only. It is never sent to us.

One thing worth stating plainly: if you use the site search, the words you type appear in the page URL, and Google Analytics records page URLs. If you would rather a search term not reach Google, do not type it into the site search.

The feedback form stores your message, the topic and sentiment you chose, and the page you were on when you opened it. An email address is optional and is asked for only so that someone can reply to you.

Feedback is deleted automatically after 365 days. Your IP address is used to limit how many times the form can be submitted in an hour and is not stored on the feedback record itself.

The request form collects your name, email address, optionally your company or college, and whatever you write in the "use case" box. This is used to decide whether to approve the request and to email you the outcome.

Those emails are sent through Resend, an email delivery provider, which therefore receives your address and the contents of the message. Your IP address is recorded with the request.

We should be straightforward about the retention here: access requests are currently kept indefinitely and there is no automatic deletion. If you would like yours removed, email support@capita1.in and it will be deleted.

Accounts are created by an administrator, not by self-signup. The account holds your name, email address, a hashed password, your role and designation, and workspace information such as your department and reporting line. Passwords are stored only as a bcrypt hash and are never returned by any part of the site.

Signing in sets a session cookie so that the site knows who you are between pages. It is used for authentication and for nothing else.

Inside the workspace, tasks, comments, meetings and their attendance records are retained until deleted, and an audit trail of changes to a task is retained indefinitely. Profile photographs and task attachments are stored on Vercel Blob and are served from URLs that are not behind the login gate — anyone holding the URL can open the file.

The site does not currently display advertising, and no advertising cookies are set beyond the Google Analytics cookies described above.

If advertising is introduced, third-party vendors including Google may use cookies to serve ads based on your prior visits to this or other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on your visit to this and other sites, and you may opt out of personalised advertising through Google’s Ads Settings. Where required — including for visitors in the European Economic Area, the United Kingdom and Switzerland — consent will be collected through a certified consent management platform before any such cookie is set, and this section will be updated at the same time.

We do not sell personal data and we do not share it for anyone else’s marketing. The processors below are the only third parties involved, and each receives only what its function requires.

• Vercel — hosts the site, and therefore sees request logs including IP addresses.
• MongoDB Atlas — stores the records described above.
• Google — Analytics, as described in section 2.
• Upstash — holds short-lived rate-limiting counters keyed by IP address.
• Resend — delivers email to people who requested access or who hold an account.
• Google Gemini and Groq — process the text of an AI request when an AI feature is used. Requests are not sent with your identity attached.

Some of these providers operate outside India, so data reaching them is processed abroad.

• You can block or delete cookies in your browser. The site remains readable; only your theme preference and analytics are affected.
• You can opt out of Google Analytics using Google’s browser add-on.
• You can ask what we hold on you, ask for it to be corrected, or ask for it to be deleted, by writing to support@capita1.in.
• You can use the site without an account. Almost all of it is public.

The site is intended for adults making their own decisions about securities markets. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

This policy changes when the site does. The date at the top is the date it last changed. Material changes are described here rather than announced separately, so the top of this page is the place to check.