Privacy Policy

Last revised: February 24, 2026

Introduction

Capdex ("Capdex", "we", "us", or "our") is committed to safeguarding your privacy and handling personal information ("PI") responsibly and in accordance with applicable privacy and data protection laws. This Privacy Policy provides information about the PI we collect, how we use it, how we protect it, and the rights available to you.

References to "you" or "your" include platform users, representatives of firms, website visitors, vendors, and any individual whose PI is processed by Capdex.

1. Personal Information We Collect

1.1 Categories of PI

We may collect the following types of PI:

  • Identification Data: Name, title, job function, and similar identifiers.
  • Professional Information: Firm or employer name, role, business biography, professional history, investment or transaction-related activity, and links to professional profiles.
  • Contact Data: Business email address, office telephone number, business address.
  • Usage and Technical Data: IP address, device data, browser type, operating system, usage analytics, login logs, clickstream data, and interactions with our platform.
  • Marketing and Communication Data: Preferences regarding marketing communications, survey responses, and feedback.
  • Financial and Billing Data: Payment information provided by Clients.
  • Security Data: Authentication logs, access records, and information used to maintain platform integrity.

1.2 Sources of PI

We collect PI through:

  • Direct interactions (account creation, forms, customer support inquiries).
  • Automated technologies (cookies, logs, analytics systems).
  • Third-party sources, including:
    • Publicly available corporate websites
    • Firm directories
    • Regulatory filings
    • Press releases
    • Professional networks
    • Industry publications
    • Business databases and data providers

1.3 Publicly Available Professional Information

Capdex collects and processes professional contact information that has been intentionally made public in a business context. This may include business email addresses, office phone numbers, job titles, team pages, and firm biographies made available on corporate websites, directories, or regulatory filings.

Capdex does not collect or display private personal email addresses, personal phone numbers, or sensitive personal data unless voluntarily provided directly by the individual for business purposes.

2. Purposes and Legal Bases for Processing

Capdex processes PI for the following purposes:

  • Service Delivery: Account management, authenticated access, and platform functionality.
  • Platform Personalization: Tailoring content, recommendations, and user experience.
  • Research and Market Intelligence: Organizing publicly available business information about firms, people, transactions, and industry activity.
  • Customer Support: Responding to inquiries and troubleshooting issues.
  • Security: Monitoring for fraud, abuse, unauthorized access, and compliance with our Terms.
  • Marketing: Sending updates, newsletters, and promotional materials (subject to opt-out).
  • Legal and Regulatory Compliance: Satisfying obligations under law, regulation, or governmental request.

Legal Bases (GDPR and Similar Laws):

  • Performance of contract with Clients and Users
  • Legitimate interests in:
    • Providing and improving the Capdex platform
    • Ensuring platform security
    • Indexing, organizing, and presenting publicly available professional information
    • Providing industry intelligence and facilitating professional networking
  • Consent, where explicitly required
  • Compliance with legal obligations

3. Disclosure of Personal Information

We may disclose PI to the following categories of recipients:

  • Capdex affiliates and subsidiaries
  • Service providers and vendors (e.g., cloud hosting, analytics, customer support). A list of sub-processors is available upon request by contacting privacy@capdex.com.
  • Platform users, when disclosure of publicly available professional information is inherent to the Service
  • Regulatory or governmental authorities, where required by law
  • Professional advisors (legal counsel, auditors, consultants)
  • Parties to corporate transactions (mergers, acquisitions, restructuring)

Capdex does not sell personal information, including under the definitions of CCPA/CPRA.

Any disclosure of professional contact information is limited to information that is publicly available or voluntarily submitted for professional use.

Capdex offers a Data Processing Agreement (DPA) for enterprise Clients. To request a copy, contact privacy@capdex.com.

4. International Data Transfers

Capdex may transfer PI to jurisdictions whose privacy laws differ from your own. We use appropriate safeguards, such as Standard Contractual Clauses, to protect PI during international transfers.

5. Marketing and Communications

You may opt out of marketing communications at any time by clicking "unsubscribe" in our emails or by contacting privacy@capdex.com.

6. Cookies and Tracking Technologies

Capdex uses cookies and similar tracking technologies to operate and improve the platform, analyze usage, and support security. These may include:

  • Essential cookies: Required for authentication, session management, and core platform functionality.
  • Analytics cookies: Used to understand how users interact with the platform and to improve performance.
  • Preference cookies: Used to remember user settings and preferences.

Capdex does not use advertising or third-party behavioral tracking cookies. You may manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

7. Security

Capdex uses administrative, technical, and physical measures designed to protect PI, including encryption, access controls, monitoring, and regular security assessments.

8. Data Retention

We retain PI only as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, and resolve disputes. Retention periods vary by category:

  • Account and profile data: Retained for the duration of the account relationship and a reasonable period thereafter.
  • Financial and billing data: Retained for seven (7) years following the transaction date, consistent with tax and regulatory requirements.
  • Usage and technical logs: Periodically purged consistent with operational and security needs.
  • Security and authentication logs: Retained as necessary for incident investigation and platform integrity.
  • Publicly available professional information: Retained and periodically refreshed for as long as it remains publicly available and relevant to the Service, unless a deletion request is received.
  • Deletion request audit records: Retained for up to seven (7) years solely for compliance purposes, consistent with GDPR Article 17(3).

When PI is no longer required for its stated purpose, it is securely deleted or anonymized.

9. Your Rights

Depending on jurisdiction, you may have the right to:

  • Access your PI
  • Correct inaccurate PI
  • Request deletion
  • Restrict or object to processing
  • Withdraw consent (where applicable)
  • Request a portable copy of your PI
  • Lodge a complaint with supervisory authorities

To exercise your rights, contact privacy@capdex.com.

Requests Regarding Publicly Available Information

Individuals may request correction or removal of publicly available professional information displayed on Capdex. Capdex will acknowledge such requests within thirty (30) days and will evaluate them in accordance with applicable laws and Capdex's legitimate interests in maintaining accurate industry records. Where a deletion request is granted, Capdex will add the individual to a suppression list to prevent future automated re-collection.

10. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA). These include rights of access, deletion, correction, and the right to opt out of "sharing" (as defined by CPRA).

Capdex does not sell personal information.

You may contact us at privacy@capdex.com to exercise these rights.

11. Children's Data

Capdex does not knowingly collect or process personal information from individuals under the age of 16. If we become aware that we have collected PI from a child, we will take steps to delete such information promptly.

12. Changes to this Policy

Capdex may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Website.

13. Contact Us

Capdex Privacy Officer

Email: privacy@capdex.com