Privacy Policy

Who we are and what this covers

The Portfolio Analyzer ("PFA") is run by CapitalWave Inc. ("CapitalWave", "we", "us"), 1410 North Scott St, Arlington, VA 22209, USA. This policy covers the PFA website and app. CapitalWave's main website, capitalwave.com, has its own privacy policy.

Most people use PFA through a university, employer or training company (your "organization"). Your organization decides to use PFA for its courses and controls its cohorts. For that use, we process your data on its behalf; the GDPR page explains what that means.

What we collect

• Account details: your email address, the display name you choose, how you sign in (an emailed code or link, or Google), and your organizations, cohorts and roles. If you sign in with Google, we receive your name and email address from Google, never your Google password. PFA has no passwords of its own.
• Learning records: your lab answers and attempts, exam responses and scores, grades and feedback from your instructors, and suggested marks for written answers.
• Time online: for each day you use PFA, when you were first and last active, about how many minutes you were active, how many visits you made and which tools you opened.
• AI tutor: the questions you ask the tutor, its answers, and any quality marks reviewers add.
• Uploaded returns: a return file you open in a tool is read in your browser. We don't receive or store the file. If you ask the tutor while using it, the names and results on screen go with your question.
• Contact form: your name, email address, organization, topic and message. These are emailed to our team and aren't stored in PFA's database.
• Technical data: our hosting providers record IP addresses, browser type, pages requested and times, to run the service and keep it secure.

We don't collect payment card details. Please don't put sensitive personal information (health, religion, finances and so on) in your answers or in questions to the tutor.

You can use the analytics tools without an account. If you do, we store nothing about you beyond the technical data above.

How we use it

• To run PFA: signing you in, saving and showing your work, marking and grading, and running cohorts, labs and exams.
• To show your progress to the instructors, teaching assistants and administrators of your cohorts and organization.
• To answer your questions in the AI tutor and to suggest marks for written answers. A suggested mark is only a suggestion: your instructor decides your grade.
• To send service emails, such as sign-in codes and notices that you've been added to a class. We don't send marketing email from PFA.
• To reply when you contact us.
• To keep PFA secure, prevent abuse and fix problems.
• To improve PFA, using statistics that don't identify you.
• To meet legal obligations.

We don't sell personal data, show advertising, or track you across other websites.

Who can see your data

• Other learners can't see your name, email address or work.
• The instructors and teaching assistants of your cohorts can see your name, email address, work, grades, tutor questions and time online. Your Account page shows what they can see.
• Your organization's administrators can see the same for everyone in their organization.
• CapitalWave's platform administrators can see all data, to support customers and keep PFA running.
• The service providers listed below, only so they can provide their services to us.
• Others where the law requires it, or to protect people's safety or our rights. If CapitalWave is merged or sold, data may pass to the new owner under this policy.

Service providers

• Lovable hosts PFA. Its Lovable Cloud service holds PFA's database, handles sign-in and sends PFA's emails.
• AI model providers, through the Lovable AI Gateway, answer tutor questions and suggest marks. PFA currently uses Anthropic's Claude models. We send your question, the conversation so far and the tool's current inputs, but not your email address.
• Google, only if you choose to sign in with Google.

PFA fetches market data from the US Treasury and the Federal Reserve Bank of St. Louis (FRED). No personal data is sent to them.

Our providers may store and process data in the United States and other countries.

How long we keep it

• Account details: until your account is removed.
• Learning records: until the cohort or your account is deleted.
• Time online: until your account is deleted.
• AI tutor questions and answers: 12 months, then deleted automatically.
• Suggested marks: until the answer they belong to is deleted.
• Organization activity log: until the organization is deleted.
• Contact form emails: as long as we need them to handle your enquiry and keep normal business records.
• Technical logs: for the periods our hosting providers set.

Security

All connections to PFA are encrypted. The database checks every request against your role, so people see only what their role allows. PFA uses one-time sign-in codes and links instead of passwords. On a shared computer you can tick a box at sign-in, and PFA then signs you out after 15 minutes of inactivity or when the browser closes.

No system is perfectly secure. If a breach affects your personal data, we'll tell you and your organization as the law requires.

Your choices and rights

You can change your display name on your Account page. To see, correct, export or delete your data, or to object to how we use it, contact us. If your account comes from your organization, we may pass your request to it and act on its instructions. We aim to reply within one month.

Depending on where you live, you may have more rights. The GDPR page covers the EU and UK. If you live in California or another US state with a privacy law, you can ask what we hold about you and ask us to delete it, and we won't treat you differently for asking. We don't sell or "share" personal information for advertising.

Children

PFA is for university students and working professionals. You must be at least 16 to use it. If you're under 18, use PFA only through your school or institution. We don't knowingly collect data from children under 16; if we learn we have, we'll delete it.

Changes to this policy

We'll post any changes here and update the date at the top. If a change is significant, we'll also tell you by email or in PFA before it takes effect.

Contact us

Write to CapitalWave Inc., 1410 North Scott St, Arlington, VA 22209, USA, or email legal@capitalwave.com. You can also use our contact form.