Last updated: November 6, 2026
This notice describes personal information handled through the CapitalWave corporate website and related business inquiries. It also explains rights that may apply under the EU GDPR, UK GDPR and other applicable privacy laws.
Who is responsible
CapitalWave Inc. is responsible for deciding how corporate-site inquiry information is used. For questions or rights requests, use legal@capitalwave.com or the postal contact below. This is a privacy contact, not a representation that a statutory data protection officer or EU/UK representative has been appointed.
A separately licensed application, employer or educational institution may have a different role for learner information. The relevant product notice, institutional agreement and any data-processing agreement must identify those responsibilities. Third-party organizations and trademark owners operate independently; mentioning them does not make them responsible for this website.
Information and sources
When you contact us, we receive the information you provide: name, email, organization, audience category, inquiry purpose, selected products, estimated users, intended timing and your message. Correspondence may also include information supplied by an authorized colleague or institution. Required and optional form fields are indicated on the form; without necessary contact details we may be unable to respond.
Hosting and security services may process network and technical information such as IP address, request time, browser/device information, requested URL and error data. The site requests fonts from Google Fonts, which involves a connection from your browser to that provider. Platform diagnostic hooks may report runtime errors and page paths when the hosting environment provides them. See the Cookie Disclosure for storage and technology details.
The corporate site has no public account registration or checkout and does not request payment-card details. Do not send sensitive personal data, client records, credentials or confidential trading information in an inquiry.
Purposes and legal bases
Where GDPR applies, we use contact and inquiry information to respond, arrange evaluations and discuss licensing. The basis is steps requested before a contract where applicable, or our legitimate interest in responding to business inquiries and managing business relationships, balanced against your rights.
We use limited technical information for website delivery, security, abuse prevention and troubleshooting based on our legitimate interests in a reliable and secure service, and legal obligations where applicable. We retain records needed to meet legal obligations or establish, exercise or defend legal claims.
Where optional communications or device technologies require consent, that consent must be obtained separately and can be withdrawn. Merely browsing or acknowledging this notice does not authorize unrelated marketing or optional tracking. The inquiry form does not enroll you in a marketing list.
Recipients and service providers
Information is accessible to authorized CapitalWave personnel and providers needed to operate the site and handle correspondence, subject to applicable contractual and legal requirements. The site is hosted through Lovable and its hosting infrastructure; fonts are delivered by Google. If online inquiry delivery is enabled, the configured adapter sends inquiry content through the Lovable connector gateway to Resend and the CapitalWave business mailbox.
When online submission is disabled, the form displays an alternative email route. Email you send separately is processed by the email systems involved in that communication. We do not describe an unconfigured email integration as operational.
We may disclose information when legally required, to protect legal rights and security, or in a corporate transaction subject to applicable safeguards. We do not sell inquiry data or use it for cross-context behavioral advertising. Independent services you choose to visit have their own notices.
Retention
We retain inquiry and correspondence records only as long as reasonably necessary to answer the inquiry, maintain an active business relationship, satisfy legal obligations or address a dispute. Retention is assessed by the purpose, ongoing relevance, applicable legal periods and any preservation requirement; this notice does not promise a fixed deletion period for every record.
The application’s burst-protection code uses a temporary IP-based entry with a 15-minute window. Expired entries are cleared during later submissions or when the worker resets. The signed inquiry token has a one-hour validity period and is held in page memory. Hosting logs, mailbox records and provider copies have separate retention arrangements; contact us for the arrangements relevant to your request.
International handling
CapitalWave is based in the United States. The website, communications and providers may involve processing in the United States and other countries. Where EU or UK data-transfer rules apply, an applicable lawful transfer mechanism and any required supplementary measures must be in place for the particular transfer.
Contact us to request the recipients, locations and safeguards applicable to your information and, where appropriate, a copy or description of those safeguards. We do not claim that all data remains in Europe or that a particular adequacy decision, certification or contractual mechanism applies to every provider.
Your rights and choices
Depending on the law and circumstances, you may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. You may object to direct marketing at any time. If processing relies on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal. Some rights depend on the processing basis and are subject to lawful exceptions.
Send requests to legal@capitalwave.com. We may request proportionate information to verify identity or authority. Where GDPR applies, we normally respond within one month; a lawful extension may be available for complex or numerous requests, in which case we will explain the extension and reasons within the initial period.
You may complain directly to the competent data-protection authority, including in your EEA country or the UK Information Commissioner’s Office as applicable. You do not have to complete an informal CapitalWave process first. Other applicable privacy laws may provide additional rights; you may raise those through the same contact.
Security, children and automated decisions
We use reasonable organizational and technical measures appropriate to the information and processing risks; no system can guarantee absolute security. This public site is intended for adults and is not directed to children. Contact us if you believe a child has submitted information so we can assess and address it.
The corporate inquiry workflow does not make solely automated decisions with legal or similarly significant effects. Basic validation, business-email checks and abuse protection help route or protect inquiries; an alternative contact route is available. Product learning analytics, assessments or AI features, if applicable, require their own product-specific disclosures.
Changes and contact
We update this notice when the website or relevant practices change. The date above identifies the current version. Product-specific processing and contracts may require additional information before data is collected.
Contact CapitalWave Inc. at legal@capitalwave.com or 1410 N Scott St #955, Arlington, VA 22209, United States.