Privacy Policy

1. Introduction

Capopedia ("Capopedia," "we," "our," or "us"), the operator of the Platform, is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have over it, in connection with your use of the Capopedia platform at capopedia.com (the "Platform"). This Policy should be read together with our Terms of Use.

By using the Platform, you agree to the collection and use of your information as described in this Policy. If you do not agree, please do not use the Platform.

2. Governing Framework

2.1 This Policy is governed by Singapore's Personal Data Protection Act 2012 ("PDPA"). Users outside Singapore may have additional rights under the data protection laws of their place of residence.

2.2 This Policy applies to visitors to our website, guest users of features available without an account, registered users of Capopedia, and users of related services we operate where data is shared across our network (see Section 6).

3. Data We Collect

3.1 Account information. When you register, we collect your username, first and last name, email address, and password (stored in hashed form only). If you sign up using a third-party sign-in service, we receive your name and email address from that service.

3.2 Usage data. Pages visited, dossiers viewed, searches performed, features used, session duration, and click patterns, collected via analytics tooling.

3.3 Device and technical data. IP address, browser type, operating system, device identifiers, and cookie data (see Section 9).

3.4 User-submitted data. If you create watchlist entries, set alerts, select peer companies for comparison, or submit feedback or flags for review, we collect and store this content to provide the service.

3.5 Guest use. If you use features available without an account, we collect the queries you submit and session data (such as IP address and usage counts) needed to operate the feature and enforce usage limits.

3.6 Communications. Records of support requests, feedback, and any correspondence you send us.

3.7 Payment information. Currently not collected. If paid subscription tiers are introduced, billing details will be handled by our payment processor. We will not store full card numbers.

We do not intentionally collect sensitive personal data such as health information, biometric data, or third-party financial account credentials as part of normal Platform use.

4. How We Use Your Data

We use your data to:

• Provide and maintain the Platform, including generating and displaying Company Dossiers and research tools
• Authenticate your account and maintain security
• Send service notifications you have enabled, such as valuation threshold alerts and earnings date reminders
• Send marketing communications, only where you have separately opted in (see Section 12)
• Improve the Platform through aggregated and anonymised usage analysis
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Comply with applicable legal obligations

5. Legal Basis for Processing

Under the PDPA, we process your data on the following bases:

• Consent: for account registration, optional marketing communications, and non-essential cookies
• Deemed consent or contractual necessity: to provide the Platform features you have signed up for
• Legitimate interests: for security, fraud prevention, and service improvement, balanced against your rights
• Legal obligation: where required by applicable law, including regulatory or law enforcement requests

Where we rely on consent, you may withdraw it at any time (see Section 10). Withdrawal may limit access to certain features.

6. Data Sharing

6.1 Within our group. Certain account and usage data may be shared across other services we operate where you use more than one, to provide a consistent experience. We do not share your data with unaffiliated third parties for their own marketing purposes.

6.2 Service providers. We share data with third-party processors who help us operate the Platform, including:

• Artificial intelligence and machine-learning service providers for automated content processing and analysis
• Cloud hosting and infrastructure providers
• Analytics providers
• Email and communications providers for sending notifications

6.3 Legal disclosures. We may disclose data where required by law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of Capopedia, our users, or the public.

6.4 Business transfers. If Capopedia is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction, subject to equivalent privacy protections.

6.5 No sale of personal data. We do not sell your personal data to any third party.

7. International Data Transfers

Some of our service providers process data outside Singapore. Where we transfer personal data overseas, we take steps required under the PDPA to ensure recipients provide a standard of protection comparable to the PDPA, including through contractual safeguards. By using the Platform, you consent to such transfers as necessary to provide the service.

8. AI-Generated Content and Your Data

When you use AI-powered or interactive features, your queries and submitted content may be processed by third-party AI providers (see Section 6.2) to generate responses.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in and remember your preferences (essential cookies, which cannot be disabled as they are necessary for the Platform to function)
• Understand usage patterns via analytics tools (non-essential cookies, which require your consent where legally required)
• Support features such as saved watchlists

You may also manage cookies through your browser settings at any time.

10. Your Rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for processing based on consent, such as marketing emails or non-essential cookies
• Request deletion of your account and associated personal data, subject to legal retention requirements
• Object to or restrict certain types of processing, such as profiling for marketing
• Data portability where technically feasible

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law (under the PDPA, generally within 30 days). As permitted by the PDPA, we may charge a reasonable fee for processing access requests.

11. Data Retention

We retain personal data for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. Usage analytics may be retained in aggregated or anonymised form indefinitely.

12. Marketing and Service Communications

12.1 Service notifications are alerts related to your use of the Platform, such as valuation alerts and earnings date reminders. These form part of the core service and can be managed in your account notification settings.

12.2 Marketing communications, including newsletters, product announcements, and promotional content, are sent only where you have separately opted in. You may withdraw this consent at any time via the unsubscribe link in any marketing email or through your account settings.

We will not bundle marketing consent with your acceptance of this Policy or our Terms of Use.

13. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and infrastructure security. However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security and are not liable for unauthorised access beyond our reasonable control.

14. Children's Privacy

The Platform is intended for users aged 18 or older and is not directed at individuals under 18. We do not knowingly collect personal data from minors. If we become aware that we have done so, we will delete it promptly.

15. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated via the Platform or by email at least 14 days before they take effect. Non-material changes, and changes required for legal, regulatory, or security reasons, may take effect immediately upon posting. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

16. Contact and Data Protection Officer

For privacy questions, data access or correction requests, or to withdraw consent:

Email: [email protected]