Privacy Policy

1. Information We Collect

Account information. When you register, we collect your name, email address, company name, and a hashed credential (password or Google OAuth token). We never store plaintext passwords.

Cap table data. We store the equity and ownership information you enter — stakeholders, share classes, transactions, grants, vesting schedules, and related financial data. This data belongs to you and is processed solely to provide the service.

Usage and log data. We automatically collect server logs, IP addresses, browser type, referring URLs, and timestamps of actions taken within the platform. These help us maintain security, diagnose issues, and improve reliability.

Cookies and local storage. We use a session token stored in your browser’s local storage to keep you signed in. We do not use third-party advertising cookies or tracking pixels.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the CapTable platform
• Authenticate users and enforce tenant data isolation
• Respond to support requests and communicate service updates
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations and enforce our Terms of Service
• Analyze aggregate, anonymized usage patterns to improve the product

We do not sell your personal information or your cap table data to any third party, ever.

3. Data Sharing and Disclosure

We share information only in the following limited circumstances:

• Service providers. We engage sub-processors (cloud hosting, email delivery, error monitoring) who process data on our behalf under confidentiality obligations and our instructions.
• Legal requirements. We may disclose information if required by law, regulation, court order, or governmental authority, or to protect the rights, property, or safety of Consort Labs, our customers, or the public.
• Business transfers. In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred. We will notify you before your data is subject to a materially different privacy policy.
• With your consent. We may share information for any other purpose with your explicit consent.

4. Data Security

CapTable is built with security as a first-class requirement. Tenant data is strictly isolated at the database layer; no query touches another organization’s records. All data is encrypted in transit (TLS 1.2+) and at rest. Our ledger is append-only with cryptographic chaining, making unauthorized modification detectable.

No method of transmission or storage is 100% secure. We maintain industry-standard controls and will notify you without undue delay in the event of a breach that affects your personal data.

5. Data Retention

We retain your account and cap table data for as long as your account is active or as needed to provide the service. If you close your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, tax, or regulatory purposes.

Ledger transaction records may be retained in anonymized form for longer periods for audit and integrity purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data (subject to legal retention obligations)
• Export your cap table data in a portable format
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@consortlabs.com. We will respond within 30 days.

7. Cookies

We use a single first-party session token stored in localStorage to authenticate your requests. We do not set third-party cookies or use cross-site tracking. You may clear your browser’s local storage at any time, which will sign you out.

8. Children’s Privacy

CapTable is a professional tool intended for use by adults in a business context. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a minor has provided us information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and notify you by email or via an in-app notice at least 14 days before the change takes effect. Continued use of CapTable after the effective date constitutes acceptance of the revised policy.

10. Contact Us

Consort Labs, Inc.
Privacy inquiries: privacy@consortlabs.com
Website: consortlabs.com