Privacy Policy

For questions or requests about personal data, email hello@capitalnotes.xyz. You can also reach the operator at me@jasonbarba.com (@itsjasonbarba) on X. Capitalnotes is a research notebook for self-directed investors. We are not a broker, advisor, or bank. You own every investment decision.

This policy applies to capitalnotes.xyz and the app.

Depending on how you use the Services, we may collect your name, email, optional username and profile image, session data (including IP address and browser user agent), one-time sign-in codes, and Google OAuth tokens if you sign in with Google. If you use the journal, we store holdings, cash, theses, notes, timeline comments and activity, Discover sessions, research-queue items, and any custom analysis instructions you write. We also keep plan and subscription status, Polar customer identifiers, waitlist email if you join, and whatever you send us in email.

We do not collect date of birth, home address, or payment card numbers.

Polar is our merchant of record. Polar processes checkout and payment details through its own systems. We receive limited confirmation data such as plan, subscription status, and Polar identifiers. We do not store card numbers. Polar’s own terms and privacy policy apply to information Polar handles.

When you run Analysis or Discover, we send a prompt to third-party AI and research providers (currently via Vercel AI Gateway, plus Perplexity for web and finance search). If portfolio context is included, that prompt can contain holdings, cash, thesis text, and prior notes. Stock and economic analyses can run without it. Portfolio analyses always include it.

Outputs are stored as notes or Discover results in your account. We do not use your journal to train a Capitalnotes model. Providers process prompts under their own terms.

We use essential cookies to keep you signed in, and preference storage so the interface matches on refresh (theme, sidebar, collapsed notes or holdings, timeline grouping, onboarding). We do not use advertising or analytics cookies. You can block cookies in your browser. Blocking essential cookies will keep you from staying signed in.

We use this information to run the Services (account, journal, analyses, Discover, and billing), send transactional email, protect the product, respond to you, and meet legal duties. We share what is needed with hosting and database providers (including Vercel), Resend, Polar, Google if you use Google sign-in, AI and research providers when you run Analysis or Discover, and Finnhub and Alpha Vantage for ticker quotes and charts (tickers you enter, not your profile).

We do not sell personal data. We may disclose it if required by law, to protect you or the Services, or if we transfer the operation of Capitalnotes (we will try to notify you if that happens).

We keep personal data while your account is open, and longer when we must (for example legal, dispute, or billing records). You can delete your account in Settings / Profile. We send a confirmation email first. Polar and Resend may keep records under their own policies.

We use reasonable measures to protect personal data. No internet service can guarantee absolute security.

You can access and correct most profile data in Settings, and delete your account in Settings / Profile (this removes your journal, portfolio, and analyses on our systems). To leave the waitlist, email hello@capitalnotes.xyz.

If applicable law gives you further rights, email hello@capitalnotes.xyz. We may need to verify the request, and we may keep information required for legal, payment, or security reasons.

We do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has provided us with personal data, email hello@capitalnotes.xyz and we will delete it.

We may update this policy when the Services, providers, or the law change. The effective date above shows the current version. If a change is material, we may also email the address on your account.