Privacy Policy

1. What We Collect

1.1 Information You Provide

• Account information: Name, email address, occupation, and any information you provide during enrollment or application.
• Course activity: Progress through daily modules, assessment responses, portfolio artifacts, and self-assessed scores.
• Payment information: Processed by Stripe or other payment processors. We do not store full credit card numbers.
• Employer service data: Company name, team structure, workflow descriptions, and stakeholder interview notes (for employer engagements).
• Communications: Emails, messages, and notes from calls or meetings.

1.2 Information We Collect Automatically

• Website usage: Pages visited, time spent, referral sources (via standard analytics tools).
• Device information: Browser type, IP address, operating system.

2. How We Use Your Information

• Deliver services: Run cohorts, provide feedback, generate diagnostic reports, deliver employer assessments.
• Improve offerings: Analyze diagnostic trends, refine rubrics, and improve program content.
• Communicate: Send program updates, scheduling information, and relevant opportunities.
• Process payments: Handle invoices and payments through Stripe.
• Comply with law: Fulfill legal obligations if required.

3. How We Share Information

3.1 We Do Not Sell Personal Data

CapacitAI does not sell, rent, or trade personal information to third parties for marketing purposes.

3.2 Service Providers

We share data only with:

• Stripe: For payment processing.
• Netlify: For website hosting and form capture.
• Convex: For application backend, data storage, and CRM.
• Resend: For transactional and marketing email delivery.
• GitLab: For CI/CD deployment (no personal data involved).
• Email/calendar services: For program communications and scheduling.

3.3 Employer Context

For employer services, diagnostic and assessment data may be shared with the sponsoring employer as part of the deliverable (e.g., team capability heatmap). Individual learner diagnostic data is not shared with employers without explicit consent.

3.4 Legal Requirements

We may disclose information if required by law, subpoena, or to protect our rights or safety.

4. Data Security

We use industry-standard measures to protect your data:

• Encrypted data transmission (HTTPS/TLS).
• Access controls for internal systems.
• Regular security reviews.

No system is perfectly secure. We will notify you of any data breach that affects your personal information as required by law.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Opt out of marketing communications.

To exercise these rights, contact: hello@capacitai.com

6. Data Retention

• Learner program data: Retained for 2 years after program completion to support references, transcripts, and portfolio verification.
• Course activity data: Retained indefinitely in aggregated, anonymized form for program improvement.
• Employer service data: Retained per the terms of the Statement of Work, typically 1 year after delivery.
• Payment records: Retained for 7 years for accounting and tax purposes.

7. Children's Privacy

CapacitAI services are not intended for individuals under 18. We do not knowingly collect data from children.

8. International Users

CapacitAI operates primarily in the United States. If you access our services from outside the U.S., your data will be transferred to and processed in the U.S.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on our website with an updated effective date.

10. Contact

For privacy-related questions, contact: hello@capacitai.com

Last updated: August 19, 2026