Legal

Privacy policy

What CapRaise collects, why we hold it, who it is shared with, and what you can ask us to do with it.

Last updated 5 October 2026.

1. Who is responsible for what

For your own account — your email address, your name, your billing record — we are the controller, and this policy explains what we do with it.

For the investor records you create, you are the controller and we are your processor. You decide who goes on the list and why; we hold and process those records on your instruction, do not use them for our own purposes, do not sell them, and do not mix them with any other account's. There is no shared investor database: every record belongs to the account that created it.

2. What we hold

Your account

Email address and, if you give one, your name.
Whether the account is an administrator and whether it has been granted free access, with the note, date and granting administrator behind that grant.
When the account was created and last updated.

Your raise

Company details you enter, and the raise itself: instrument, target amount, status and timing.
Investor records you add: name, firm, email address, investor type, stage and sector focus, the check range they write, location, website and your notes.
Outreach: the sequence, the cadence and sending window you set, and an event for each touch and reply, with its pipeline stage.
Documents and notes you upload or write.

Payment

The amount, currency, status and timing of your engagement payment, and the processor's reference for it.
Not your card number. Card details go directly to our payment processor and never reach our servers or our database.

Security and administration

An audit record of administrative actions — who did what, to which record, and when — including the IP address and browser user agent of the person who did it. This is the only place we keep an IP address, it is never readable from a browser, and it exists so an action on your account can be accounted for.

We do not run advertising or third-party analytics trackers on this site, and we do not sell personal data or share it with data brokers.

3. Why we hold it

To provide the service you have asked for and paid for — performance of our contract with you.
To take payment and keep the accounting and tax records we are required to keep — legal obligation.
To keep accounts secure and to investigate misuse, including the administrative audit record — legitimate interests.
To answer you when you contact support.

We do not send marketing email to your investor list, and we do not contact the people on your list for our own purposes at all.

4. Cookies

We set the cookies needed to keep you signed in and to protect the sign-in flow. They are strictly necessary for the service to function; there are no advertising, profiling or cross-site tracking cookies. Clearing them signs you out.

We use a small number of sub-processors, each for one job:

a hosting and application platform, which runs the service;
a managed database and authentication provider, which stores your records and your credentials;
a payment processor, which takes the payment and holds the card details we never see;
a transactional email provider, which delivers sign-in, confirmation and password-reset mail.

Each is bound by a data-processing agreement, may process personal data only on our instruction, and may not use it for its own purposes. For the current named list, write to hello@capraise.com and we will send it to you.

We will also disclose data where we are legally required to, and in a merger or acquisition, in which case we will tell you before your data moves and this policy continues to apply to it.

6. Where it is processed

Our sub-processors may process data outside your country, including in the United States. Where personal data moves out of the European Economic Area or the United Kingdom, that transfer is made under the European Commission's standard contractual clauses, with the UK addendum where the UK GDPR applies.

7. How long we keep it

Account and raise records: while your account exists. Delete your account and we delete them, except where we must keep something longer.
Payment and accounting records: for as long as tax and accounting law requires, which is typically seven years.
Administrative audit records: retained for security and accountability, and kept separately from your raise.

8. Your rights

Depending on where you live, you can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or send it to someone else in a portable form. You can also complain to your data protection authority.

Write to hello@capraise.com. We answer within one month and ask for nothing beyond what we need to confirm it is really you.

If you are on a customer's investor list and want to be removed or to know what is held about you, the customer who built that list decides that, not us: we will pass your request to them and support them in answering it. If you tell us you no longer wish to be contacted through the service, we will make the account owner aware of it.

9. Security

Records are scoped to the owning account in the database itself, not only in the application, so another customer cannot read your raise even by guessing an identifier. Credentials are handled by our authentication provider and we never see your password. Access to production data is limited to the people who need it, and administrative actions are recorded.

We claim no security certification or audit attestation. If you need our security documentation for a diligence process, ask and we will send what we have.

10. Children

The service is for businesses. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe we have, tell us and we will delete it.

11. Changes and contact

If we change this policy materially we will give notice before the change takes effect. The date at the top of this page is the current revision.

Privacy questions, or a request about your data: hello@capraise.com. See also our terms of service.