Privacy policy
What we collect, why, who else handles it, and how to have it changed or deleted.
Effective September 25, 2026
Who we are
Capital Roles (capitalroles.com) is operated from Texas, United States. Questions about your information go to admin@capitalroles.com.
What we collect
- Your email address, when you buy a pass or ask for a sign-in link. We use it to sign you in and to send the emails the service needs: sign-in links, pass confirmations, a reminder before your pass ends, and refund confirmations.
- Passes and payments. Stripe processes every payment. We receive the pass you bought, the amount, the date and Stripe’s reference for the payment. We never see or store your card number.
- Apply clicks. When you press a job’s Apply button we record which job and when, and your account if you are signed in, before sending you to the bank’s site.
- Hire reports. If you tell us you got a job: the bank, the role, the start date if you give it, and anything you write about how Capital Roles helped. Your first name and a quote only if you give them and tick the permission box.
- A sign-in cookie. One cookie keeps you signed in. We use no other cookies.
- Technical information. Our host, Cloudflare, keeps request logs that include IP addresses. To stop abuse we also record recent sign-in and checkout requests with the email or IP address involved.
Who else handles it
- Stripe processes payments under its own privacy policy.
- Cloudflare hosts the site and its database and delivers our email.
We share information with anyone else only if the law requires it. We show no ads, we never sell your information, and we use no third-party trackers or analytics. Our fonts are served from our own site, so loading a page contacts no one but us.
Reviewing, changing or deleting your information
Your account page shows your email and passes. To see everything we hold about you, correct it, or delete your account, email admin@capitalroles.com from the address on your account. We delete an account and the information tied to it within 30 days of your request. Payment records that tax and accounting law require us to keep, and those Stripe keeps itself, are retained as the law requires.
How long we keep it
- Account, pass, apply-click and hire-report information: while your account exists, then deleted on request as above.
- Sign-in links expire after 15 minutes. A sign-in session ends after 365 days without use, or when you sign out.
- Records of recent requests kept to stop abuse: deleted within 14 days.
- Cloudflare’s request logs: kept by Cloudflare under its own retention rules.
Do Not Track
We do not track you across other websites and do not let anyone else do so here, so a browser’s Do Not Track signal changes nothing on Capital Roles.
Children
Capital Roles is not meant for anyone under 16, and we do not knowingly collect information from them. If you believe we have, email us and we will delete it.
Keeping it safe
The site is served only over HTTPS. Sign-in links and sessions are stored as one-way hashes, not as the links themselves.
Changes to this policy
When this policy changes, we update the effective date at the top. If a change is material, we also email members before it takes effect.