Privacy & analytics

Overview

Capiaro provides educational analytics for US dividend stocks and ETFs. This notice explains what we collect when you use the Capiaro website, tracker, Sheets tools, creator embeds, and related services; how we use it; and the choices available to you. Capiaro is not a broker and does not request or store brokerage passwords or credentials.

Information you provide

• Account information, including your email address and, when you choose password sign-in, credentials processed by our authentication provider.
• Portfolio information you enter or import, including holdings, transactions, expense goals, and creator privacy and embed settings. CSV files are parsed in your browser; the transactions you choose to save become portfolio data.
• Waitlist information: email, product interest, dividend-holding status, willingness to import a CSV, optional creator audience size, signup source, marketing-consent status, consent date and version, and unsubscribe status.
• Sheets requests, including the API key, ticker symbols, share counts, and usage needed to provide formulas and enforce quotas.
• Billing identifiers and subscription status. Payment-card details are collected by Stripe, not by Capiaro.

How we use information

We use information to operate and secure the service; save and display your workspace; provide support; process subscriptions; prevent abuse; improve reliability; and communicate about account access or your waitlist request. We send early-access and product-update marketing emails only when you explicitly opt in. We do not sell personal information or use portfolio data to make investment recommendations.

Email choices

The waitlist has an optional, unchecked checkbox for early-access and product updates. It is not required to join the waitlist. When you opt in, we record the date, source, and consent-notice version. You can withdraw consent at any time using the unsubscribe link in an email or by contacting us. We retain the minimum information needed to honor an unsubscribe request and avoid sending further marketing messages.

We may send a service confirmation for a waitlist request regardless of marketing consent. That confirmation is not a subscription to marketing updates.

Analytics and cookies

Capiaro can use Vercel Web Analytics to understand aggregate traffic, such as page views, referring pages, approximate location, device type, browser, and operating system. It does not use advertising cookies or track visitors across websites. Vercel uses a request-derived, daily-reset identifier for aggregate analytics. We only load and send this analytics after you choose “Accept analytics,” and only if your browser is not sending an opt-out signal. Choosing “Necessary only” keeps the product working and does not send Vercel Analytics events. You can change this later from Cookie settings in the footer.

We remove query strings and replace creator-specific public-card and embed paths before analytics events are sent. Do not put personal information, account IDs, access tokens, or other sensitive data in a public URL.

Necessary storage is always on: a signed capiaro_session cookie for local email sessions, or authentication cookies provided by Supabase when it is configured, plus browser localStorage for your workspace and for remembering this cookie choice. These are functional mechanisms, not advertising cookies. Embedded portfolio cards do not show the banner, so they do not set a new analytics choice inside the iframe.

Browser opt-out signals

If your browser sends a Global Privacy Control (GPC) signal — for example Brave, some Firefox and DuckDuckGo setups, or a privacy extension — Capiaro treats that as an automatic opt-out. We do not load Vercel Analytics, we do not ask you to confirm the opt-out, and the site shows that the preference was honored. GPC is the California signal under the CCPA / CPRA. We do not sell or share personal information for cross-context advertising, so there is no separate “Do Not Sell or Share My Personal Information” link.

Some browsers, including Brave, also send the older Do Not Track (DNT) header. DNT is not a California legal requirement. Capiaro still honors it as a courtesy and keeps analytics off. Cookie settings in the footer remains available if you want to see the current status.

Service providers

We use providers that process data on our behalf to run Capiaro. Depending on the features you use, these include Vercel (hosting, Web Analytics, and AI Gateway), Supabase (authentication and database), Stripe (payments), Google (the Sheets add-on and, through the AI Gateway, Gemini when enabled), and EODHD or Financial Modeling Prep (ticker-level market and dividend data), and Resend (email delivery). Their handling of data is governed by their own terms and privacy notices.

Optional AI explanations

When you request an AI explanation, Capiaro sends a limited, computed fact packet to the configured AI provider through Vercel AI Gateway. It can include tickers, share counts, projected income, yield-on-cost figures, upcoming dividends, goal labels, and summarized transaction activity. It is used only to generate the explanation you requested. If AI is unavailable, Capiaro returns a deterministic in-product explanation instead.

Public cards and creator analytics

If a creator publishes a portfolio card or iframe embed, the fields selected in that creator's privacy settings are public. Do not publish information you do not want visible. Capiaro records aggregate page views, embed loads, and CTA clicks for creators; these events contain the portfolio identifier, event type, and time, not a viewer's portfolio or financial information. A website that hosts an embed may have its own privacy practices.

Retention, security, and your choices

We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. You may ask to access, correct, export, or delete personal information, or unsubscribe from non-essential emails, by contacting us. Deleting an account or portfolio may remove associated workspace and public-card data, subject to backups and legal requirements.

We use reasonable administrative, technical, and organizational safeguards, but no online service can guarantee absolute security. The service is intended for adults and is not directed to children under 13.

Changes and contact

We may update this notice as Capiaro changes. We will post the revised date here. For privacy questions or requests, contact support@capiaro.com.