Privacy Policy

1. Introduction

OpenCapital is operated by Liftify LLC ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and retain information when you visit our website and use our services.

2. Information We Collect

We process standard request data, including IP address, requested URL, and timestamp, to deliver the site and prevent abuse. This processing occurs whether you accept optional analytics.

• Account information: Email address, name, and profile picture from your Google account when you sign in with Google.
• Product usage analytics: We collect pages visited, features used, and device and browser details. Cookieless analytics begin on your first visit without a persistent browser identifier or account identification. If you accept optional tracking, usage may be associated with your account or browser, approximate location may be derived from your IP address, and we measure which company pages visitors read.
• Authentication metadata: Session cookie, IP address, and timestamps needed to keep you signed in and detect suspicious activity.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Send you updates about our product and services
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns and trends to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms

4. Cookies and Tracking Technologies

We use necessary cookies and browser storage for authentication, security, interface preferences, and your analytics consent choice. PostHog starts in cookieless mode when you visit and does not store a browser identifier or identify your account. Rejecting optional cookies keeps this mode active.

If you accept optional tracking, PostHog uses persistent analytics, OpenCapital records first-party stock-read popularity, Tolt can attribute a subscription to a referral partner, and Sentry can attach a masked error replay when the site fails. You can switch to cookieless analytics without losing access to the public site or signed-in product features.

The full breakdown and a control for changing your choice are on the Cookie Policy page.

5. Third-Party Service Providers

We use service providers for authentication, payments, analytics, referrals, email delivery, hosting, site security, and error reporting. These providers receive information relevant to the services they provide.

• Authentication providers: Sign-in and account access.
• Analytics providers: Cookieless product analytics from your first visit, or persistent product analytics and approximate location after you accept optional tracking.
• Referral partners: Optional referral attribution for visitors who accept optional tracking.
• Email providers: Transactional email delivery (account emails, earnings alerts you opt into).
• Hosting and network providers: Website hosting, delivery, security, and abuse prevention.
• Error-reporting providers: Operational browser error reports for diagnosing failures, plus masked error replay for visitors who accept optional tracking.

Providers process information under the agreements and terms that apply to their services. We do not sell personal data to advertisers or data brokers.

6. AI Assistant Connections (Model Context Protocol)

OpenCapital can be connected to AI assistants such as Claude, ChatGPT, Cursor, and other clients that support the Model Context Protocol (MCP), so you can ask questions about our research from inside those tools. When you connect an AI assistant:

• Authorization:You sign in to OpenCapital and authorize a supported AI client to access the features available through your connection. Use the client's connection settings to disconnect it. Contact us if you need help ending access.
• What the assistant can access: The client can read company research and public filing data and use the account features available through your authorized connection, including reading and updating your watchlist. It cannot place trades or move money.
• What we receive:We receive the requests and parameters the client sends to OpenCapital. We use request records to provide the service, enforce limits, investigate abuse, and measure product usage. Request parameters may contain text or other context included by the client. We do not independently access the client's conversation history or files.
• The AI provider: The assistant you connect (for example, Anthropic or OpenAI) is operated by that company under its own terms and privacy policy. Your conversation with the assistant is governed by that provider, not by OpenCapital.
• Data minimization: We request only the data needed to answer your question and do not attempt to access anything in the AI client beyond the inputs you direct to OpenCapital.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Object: Object to our processing of your personal information
• Portability: Request transfer of your information to another service
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis

To exercise these rights, please contact us at support@opencapital.sh.

9. International Data Transfers

We and our providers may process information outside your country of residence, where data-protection laws may differ. Transfers are subject to applicable legal requirements. Contact us for information about safeguards relevant to your personal information.

10. Data Retention and Deletion

We retain personal information only for as long as necessary to provide the Service, unless a longer retention period is required or permitted by law. In practice:

• Account and authentication data: We retain this information to operate your account. When you close your account or request deletion, we delete applicable account records, subject to legal retention requirements and permitted exceptions.
• Usage analytics: Closing your account does not automatically delete historical analytics. We may retain usage records, which can include account or browser identifiers, for product measurement and improvement, security, and abuse prevention for as long as reasonably necessary for those purposes. Retention remains subject to applicable law and your privacy rights. We may also retain aggregated or de-identified statistics.
• Company-page readership: If you accept optional tracking, we may retain readership records associated with your account or browser for product measurement. Withdrawing consent stops future optional collection; it does not automatically erase previously collected analytics.
• Billing and support records: We may retain records needed for tax, accounting, disputes, fraud prevention, or other legal and operational purposes, including after account closure.
• Operational records: We retain logs and error reports for service operation, security, and abuse prevention for as long as reasonably necessary. Backup copies follow their retention cycles and applicable legal requirements.

To request access, correction, or deletion of your personal information, email support@opencapital.sh. We handle verified requests in accordance with applicable law. Account closure and a request to exercise privacy rights may have different scopes.

11. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy and will post revisions with an updated date. We provide additional notice or request consent when required by applicable law. Changes do not override commitments that continue to apply to information collected under an earlier policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: