Privacy Policy
Last updated 2 August 2026
This policy explains how Capitalynx collects, uses, stores and shares your information when you use our website and platform.
Information we collect
Identity and contact data: name, email address, phone number (if provided), role (founder / investor / operator), company or fund name.
Business data: startup description, sector, stage, geography, team size, traction, revenue and runway figures, funding history, pitch decks and other uploaded documents.
Investor data: thesis, cheque size, stage and sector focus, notable investments, portfolio notes.
Usage data: pages visited, features used, device and browser information, IP address, cookies and analytics identifiers.
Communications: messages sent through the platform, access requests, support emails and waitlist / quiz submissions.
Why we collect it
To create and secure your account and authenticate you.
To generate AI matches, pitch analysis and outreach drafts.
To operate access requests so founders control who sees confidential details.
To provide support, send service notices and, with consent, product updates.
To detect fraud and abuse and to comply with legal obligations.
How it is stored
Data is stored in managed cloud infrastructure with encryption in transit (TLS) and at rest.
Confidential startup and investor fields are protected by row-level security policies: other users only see them after you approve an access request.
Access by our team is limited to what is necessary to operate and support the service.
Third-party services
We use third-party processors to run the platform, which may include: Supabase (database, authentication, storage), Lovable (hosting and AI gateway), AI model providers such as Google and OpenAI (for matching, analysis and drafting), Stripe or other payment processors (for subscriptions), and analytics providers such as Google Analytics, Microsoft Clarity or Hotjar where enabled.
We do not sell your personal data, and we do not permit shared models to be trained on your confidential documents.
Your rights
Depending on your jurisdiction you may access, correct, export, restrict or delete your personal data, object to certain processing, and withdraw consent at any time.
EU/EEA and UK users may also lodge a complaint with their supervisory authority.
Data deletion requests
Email capitalynx.in@gmail.com from your registered address with the subject "Data deletion request". We verify identity and complete deletion within 30 days, except where retention is required by law or for dispute resolution.
Security measures
Hashed credentials, TLS encryption, row-level access controls, scoped service keys, audit logging, least-privilege internal access and regular dependency and security scanning.
Retention
We keep account data while your account is active and for a limited period afterwards for legal, tax and dispute-resolution purposes, then delete or anonymise it.
Contact
Privacy queries and grievance officer contact: capitalynx.in@gmail.com.