Privacy Policy

Who we are

Capitol Markets (“we”, “us”) operates capitolmarkets.org — an independent, free-during-beta tool that aggregates and analyzes public-record stock-trade disclosures filed by U.S. members of Congress and certain executive-branch officials under the Stop Trading on Congressional Knowledge Act of 2012. We are not registered as an investment adviser, broker-dealer, or political committee.

What we collect

We only collect data we need to operate the product:

• Email address — when you sign up for alerts, magic-link sign-in, or the email course.
• Name + profile photo — when you sign in with Google, we receive these from your Google account.
• Custom handle and bio — only if you choose to set up a public profile.
• Stripe customer ID — if and when paid plans are launched. Card data never touches our servers; Stripe handles all payment processing.
• Push notification endpoints — if you opt in to mobile push alerts; consists of an endpoint URL provided by your browser plus a best-effort User-Agent snapshot so you can identify which device a subscription belongs to.
• Watchlist + alert preferences — the tickers, politicians, and rules you elect to track.
• Standard server logs — IP address, browser, page path. Retained for security and abuse prevention; rotated regularly.

We do not use behavioral advertising trackers, set cross-site cookies, or sell your data to anyone.

Why we collect it

• Deliver the alerts and emails you opt into
• Authenticate your account (passwordless magic-link sign-in)
• Process subscriptions and prevent abuse
• Improve the product (in aggregate, never per-user without your consent)

Who we share with

We use a small set of third-party processors. They handle data only to provide their service to us:

• Vercel — hosting, edge runtime, server logs.
• Neon — PostgreSQL database for user accounts and product data.
• Resend — transactional and marketing email delivery (alerts, drip course).
• Stripe — payment processing if/when paid plans launch.
• Google — OAuth sign-in only when you choose to use it.
• Web Push services — Apple, Mozilla, Microsoft, and Google operate the push relays your browser uses; we don’t see anything beyond the endpoint URL.
• DuckDuckGo Icons CDN — serves company-logo images embedded in our pages. Loaded by your browser, not by us.

We don’t share your data with politicians, parties, political action committees, or advertisers.

Public-record information about politicians

Separate from user data: the trade disclosures and politician profiles on this site come from official U.S. government sources (disclosures-clerk.house.gov, efdsearch.senate.gov, extapps.oge.gov). Politician names, photos, committee assignments, and disclosed trades are public record. We don’t consider any of this “personal data” about politicians in their public capacity, but we accept correction requests at the contact email below.

Retention

We keep account and watchlist data for as long as your account is active. After you delete your account, the underlying records are removed within 30 days, except: a hashed copy of your email may be retained on a suppression list so we don’t accidentally re-mail you if you re-sign-up later. Server logs roll off on their own retention schedule (typically 30 days). Email-subscriber records (drip course) are kept after unsubscribe so we don’t double-mail you.

Your rights

You can:

• Access a copy of your data — email privacy@capitolmarkets.org.
• Correct data we hold about you — via your account page or by emailing the same address.
• Delete your account and data — via your /account page or by emailing.
• Unsubscribe from marketing email — one click in any email footer.
• Opt out of sale — we don’t sell data, so this is a no-op, but California residents have the right to confirm.
• Lodge a complaint with your data-protection authority (e.g. ICO in the UK, your state attorney general in the US).

Contact

Questions, requests, or concerns: privacy@capitolmarkets.org. We aim to respond within 7 business days.

Changes

If we make material changes to how we handle data, we’ll update this page and bump the “last updated” date at the top. For significant changes affecting active users, we’ll also email account holders.