Privacy Policy
This Privacy Policy explains how Capivise collects, uses, discloses, retains, and protects personal information through capivise.com, the advisor portal, the platform administration tools, and related communications and services.
Effective and last updated: August 12, 20261. Scope and who we are
This Privacy Policy applies when you browse Capivise, submit an advisor-matching request, communicate with us, use an advisor or administrator account, connect an integration, or otherwise interact with a Capivise service that links to this Policy. In this Policy, “Capivise,” “we,” “us,” and “our” refer to the operator of the Capivise platform.
Capivise is a United States education and advisor-introduction platform. Capivise is not an investment adviser, broker-dealer, bank, law firm, accounting firm, insurance agency, or financial planning firm. Independent advisors and firms that receive an authorized introduction have their own privacy practices. Their notices govern their subsequent collection and use of your information.
This Policy does not apply to a third-party website, service, advisor, or firm merely because Capivise links to it or facilitates an introduction.
2. Personal information we collect
The information we collect depends on how you use Capivise. “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. It does not include information that applicable law treats as public, deidentified, or aggregated.
Information consumers provide
- Identifiers and contact information, including name, email address, telephone number, state, preferred contact method, and preferred contact time.
- Advisor-match profile information, including the type of financial event, general timing, broad asset or transaction range, accreditation self-assessment, existing professional team, concerns, requested advisor focus, and answers to intake questions.
- Communications and optional content, including questions, support requests, feedback, and any notes you voluntarily provide.
- Consent and preference records, including the text presented to you, date and time, IP address, browser information, communication preferences, and whether you authorized an advisor introduction.
Information from advisors, firms, and account users
- Account and authentication information, including name, business email, account role, password hash, login records, and security-related activity.
- Professional and firm information, including business contact information, office locations, services, jurisdictions served, capacity, account minimums, professional credentials, registration identifiers, compensation model, public biography, disclosures, agreements, and verification records.
- Opportunity and relationship activity, including invitation decisions, status updates, scheduling information, notes, billing status, and portal activity.
Information collected automatically
- Internet and device information, such as IP address, browser and device type, operating system, user agent, referring URL, pages requested, timestamps, and approximate location inferred from an IP address.
- Session, security, and attribution information, including essential cookies, anti-forgery tokens, source page, and campaign parameters such as UTM values.
- Operational logs used to prevent abuse, diagnose errors, enforce access controls, maintain audit trails, and protect the platform.
Payment and calendar integration information
- When Square is enabled, Capivise retains hosted-payment-link identifiers, order and payment identifiers, amount, currency, status, receipt URL, reconciliation events, and limited error information. Card numbers, bank credentials, security codes, and payment authentication data remain on Square-hosted services and are not collected by Capivise.
- When an advisor connects Microsoft 365, Capivise receives basic Microsoft account information, encrypted access and refresh tokens, consented scopes, token expiration, event identifiers, and synchronization status. Capivise calendar holds intentionally omit consumer names, email addresses, telephone numbers, intake answers, and financial details.
3. Sources of personal information
We collect personal information directly from consumers, advisors, firm representatives, and platform administrators; automatically from browsers and devices; from service providers that support our operations; from an advisor or firm involved in an introduction; and from public or professional sources such as regulatory databases, licensing bodies, firm websites, and publicly available records.
We do not ask consumers to submit Social Security numbers, government identification numbers, financial-account credentials, full account numbers, tax returns, private legal documents, medical records, or payment-card data through the public matching intake. Please do not place that information in a free-text field or email to Capivise.
4. How we use personal information
- Provide, operate, maintain, personalize, and improve the website, matching workflow, advisor portal, administration tools, and related services.
- Create a match profile, evaluate potential fit, conduct operational review, identify eligible advisor candidates, facilitate requested introductions, and manage invitation and relationship workflows.
- Communicate about an inquiry, introduction, account, scheduled activity, service update, support issue, security event, or administrative matter by email, telephone, or text message in accordance with consent and applicable law.
- Authenticate users, administer accounts, maintain audit records, prevent fraud and abuse, investigate suspicious activity, secure the platform, and enforce our Terms of Service.
- Maintain advisor and firm records, verify selected professional information, administer agreements, monitor availability and capacity, reconcile billing, and produce operational reports.
- Process Square-hosted payment links and reconcile verified payment or refund events when that integration is enabled.
- Create or update an advisor’s private Microsoft calendar hold when that advisor has connected the integration and a qualifying introduction is scheduled.
- Analyze site and service performance, understand referral sources, troubleshoot errors, and develop new features using aggregated, deidentified, or limited operational information where practical.
- Comply with law, regulation, legal process, recordkeeping duties, and enforceable requests; establish, exercise, or defend legal claims; and protect the rights, safety, and property of Capivise, its users, and others.
- Carry out another purpose described at collection or with your direction or consent.
5. How we disclose personal information
Independent advisors and firms
When you request and authorize an introduction, Capivise may disclose your match profile and contact information to one or more independent financial professionals or firms selected for that introduction. Pending advisor invitations may contain limited, non-identifying profile information; contact details are released through the controlled workflow after acceptance. The receiving advisor or firm may contact you about the requested introduction.
Capivise may receive compensation from participating advisors or firms in connection with introductions, marketing services, platform participation, or resulting relationships. This creates a financial conflict described in our Disclosures. Depending on the wording and applicability of a state privacy law, a compensated disclosure may be characterized as a “sale” even when you intentionally request the introduction. Capivise does not sell personal information to data brokers and does not disclose personal information for cross-context behavioral advertising.
Vendors and service providers
We disclose information to vendors that perform services for us, such as hosting, data storage, security, software development, email delivery, SMS delivery, payment processing, calendar connectivity, analytics, content or font delivery, customer support, professional services, and operational administration. They receive information appropriate to their function and are expected to process it under contractual or legal restrictions.
Legal, safety, and business transfers
We may disclose information when reasonably necessary to comply with law, subpoena, court order, regulatory inquiry, or legal process; investigate or prevent fraud, abuse, security incidents, or unlawful conduct; protect legal rights or safety; enforce agreements; or respond to an emergency. Information may also be disclosed as part of a financing, merger, acquisition, reorganization, sale of assets, bankruptcy, due-diligence review, or similar transaction, subject to customary confidentiality protections where appropriate.
At your direction
We may disclose information to another person or organization when you ask us to do so, authorize the disclosure, or intentionally use a feature that requires it. We may also publish professional advisor information designated for a public profile.
7. Communications and choices
You may opt out of promotional email by using the unsubscribe method in the message or contacting us. You may opt out of text messages by replying STOP or using another reasonable method stated in the message. You may still receive non-promotional communications that are necessary to administer an inquiry, requested introduction, account, transaction, security event, or legal notice.
Your consent to receive marketing communications is not a condition of purchasing property, goods, or services. Message and data rates may apply. Frequency varies. Withdrawing communication consent does not require us to retract a disclosure already made at your direction, but you may separately submit a privacy request regarding information Capivise continues to maintain.
8. Data retention
We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to administer matching and advisor relationships, maintain consent and audit evidence, secure the service, resolve disputes, enforce agreements, reconcile billing, satisfy legal and regulatory obligations, and preserve legitimate business records. Retention periods vary by record type and are based on the sensitivity and volume of the information, the nature of the relationship, operational need, legal requirements, and risk of harm from continued retention.
When information is no longer reasonably needed, we take steps to delete, deidentify, or securely dispose of it, subject to backup cycles, legal holds, fraud-prevention needs, and other lawful exceptions. Deidentified or aggregated information may be retained and used where it cannot reasonably be linked back to you.
9. Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted transport, encrypted storage for selected credentials and integration tokens, password hashing, role-based portals, audit logging, signed webhook verification, and controlled release of consumer contact details. No internet transmission, storage system, or security program can be guaranteed to be completely secure.
You are responsible for protecting account credentials and for notifying us promptly if you suspect unauthorized access. Do not send highly sensitive financial, identity, health, tax, or legal documents through the public intake or ordinary email.
10. Your privacy rights
Depending on where you live and whether a particular privacy law applies to Capivise, you may have the right to request access to or a copy of personal information, learn about its sources and uses, correct inaccurate information, delete information, obtain portable information, opt out of certain sales, sharing, targeted advertising, or profiling, limit certain uses of sensitive information, withdraw consent, or appeal a denied request. You may also have a right not to receive discriminatory treatment for exercising a privacy right.
To submit a request, email info@capivise.com with the subject “Privacy Request” and describe the right you wish to exercise. We may ask for information reasonably necessary to verify your identity and authority. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity confirmation. We will respond within the period required by applicable law and may deny or limit a request where a lawful exception applies.
11. California and other U.S. state disclosures
California law requires a covered business to describe categories of personal information collected, sources, purposes, and categories of recipients. During the preceding twelve months, Capivise may have collected the categories described below. Whether a particular state privacy statute applies depends on statutory thresholds, exemptions, and the facts of the relationship; providing this section does not concede that Capivise is subject to every listed law.
| Category | Representative examples | Purposes and recipient categories |
|---|---|---|
| Identifiers | Name, email, telephone, IP address, account and provider identifiers | Service delivery, matching, communication, security; advisors at your direction and operational providers |
| Customer-record information | Contact details and business relationship records | Introductions, account administration, support, compliance; advisors and operational providers |
| Protected classifications | Age eligibility or similar information only if voluntarily provided or legally needed | Eligibility and legal compliance; operational providers where necessary |
| Commercial information | Requested services, introduction history, payment-link and billing status | Service delivery, reconciliation, reporting; advisors, payment providers, and operational providers |
| Internet or electronic activity | Browser, device, pages, referrer, logs, source and UTM data | Security, operation, attribution, improvement; hosting, security, and technology providers |
| Professional information | Advisor role, firm, credentials, registration, services, capacity, and agreements | Network administration, matching, verification, public profiles; consumers, regulators, and operational providers as appropriate |
| Inferences and preferences | Potential match profile, requested focus, timing, contact preference, and eligibility signals | Matching and service personalization; selected advisors at your direction |
| Sensitive personal information under some laws | Account credentials; broad financial-event or asset-range information; precise contents of private communications | Service delivery and security; selected advisors at your direction and providers necessary to operate the service |
Capivise does not use or disclose sensitive personal information to infer characteristics about consumers outside the purposes reasonably expected for the requested service. We do not knowingly sell or share personal information of consumers under 16. California residents may request to know, access, correct, or delete covered information, opt out of covered sale or sharing, limit certain uses of sensitive information, and receive nondiscriminatory treatment, subject to the CCPA’s scope and exceptions.
Residents of other states may have similar rights and, in some states, a right to appeal a decision. Submit either request through the method in Section 10. If an appeal is available, state that you are appealing our prior response and explain why.
12. Children’s privacy
Capivise is intended for adults and is not directed to children under 13. We do not knowingly collect personal information online from a child under 13. Individuals under 18 may not submit a matching request or create an account. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.
13. United States processing and external services
Capivise is operated for users in the United States. Information may be stored or processed in the United States and in other locations where our providers operate. Those locations may have data-protection rules different from those where you live. By using the service, you understand that information will be processed as described in this Policy, subject to rights that cannot lawfully be waived.
14. Changes and contact
We may update this Policy to reflect changes in law, technology, vendors, or our practices. The “Effective and last updated” date identifies the current version. If a change is material, we will provide notice appropriate to the nature of the change, such as a prominent site notice or direct communication where required.
Questions and privacy requests may be sent to info@capivise.com. Please do not include Social Security numbers, account credentials, or other highly sensitive documents in your message.