Privacy policy
What we collect, why, who else handles it, and how to have it changed or deleted.
Effective October 2, 2026
Who we are
Capital Roles (capitalroles.com) is operated from Texas, United States. Questions about your information go to admin@capitalroles.com.
What we collect
- Your email address, when you buy research access or ask for a sign-in link. We use it to sign you in and to send the emails the service needs: sign-in links, purchase confirmations, a reminder before your research access ends, and refund confirmations.
- Research access and payments. Stripe processes every payment. We receive what you bought, the amount, the date and Stripe’s reference for the payment. We never see or store your card number.
- Apply clicks. When you press a job’s Apply button we record which job and when, your account if you are signed in, whether your browser says a person pressed it, and a code made from your connection’s address and the day (it changes every day and cannot be turned back into the address), so automated visitors are not counted as people, before sending you to the bank’s site.
- Hire reports. If you tell us you got a job: the bank, the role, the start date if you give it, and anything you write about how Capital Roles helped. Your first name and a quote only if you give them and tick the permission box.
- A Private Counsel application. If you apply: your name and email address, your answers to the application’s questions (your current role, your years in banking, the role and banks you are aiming for, your timeline, your biggest obstacle and a LinkedIn address if you give one) and, if you choose to say, how you found Capital Roles. We use them to decide on the application and to prepare for a term.
- Private Counsel files. If you are a Private Counsel client: the files you add to your term page (a résumé, for example), your answers to the pre-work questions, and the files we prepare for you. Only you and your coach can open them.
- The link you came by. A link we publish may carry a short label naming where we published it (a post or a guide, for example). While you browse, the label stays in the addresses of the pages you open, and if you buy or apply for Private Counsel, it is recorded with the purchase or the application. We also count how many visits arrive by each label, as a number per day. It names the link, not you, and it uses no cookie.
- A sign-in cookie. One cookie keeps you signed in. We use no other cookies.
- Visit counts. On public pages we use Cloudflare Web Analytics to count visits and to see how quickly pages load. It records the page, the site that sent you here, your country, and your browser, operating system and type of device. It sets no cookie, stores nothing in your browser, and does not identify you or follow you to other websites. It does not run on sign-in, account, payment or member pages.
- Technical information. Our host, Cloudflare, keeps request logs that include IP addresses. To stop abuse we also record recent sign-in and checkout requests with the email or IP address involved.
Who else handles it
- Stripe processes payments under its own privacy policy.
- Cloudflare hosts the site and its database, stores Private Counsel files, delivers our email, and provides the visit counts described above.
- Cal.com takes Private Counsel bookings under its own privacy policy.
We share information with anyone else only if the law requires it. We show no ads, we never sell your information, and nothing on the site follows you to other websites. Our fonts and images are served from our own site; the visit counter is served by Cloudflare, our host.
Your choices
- Visit counts. A content blocker, or your browser’s own tracking protection, stops the counter. The site works the same without it.
- The sign-in cookie. Signing out removes it. Browsing jobs never needs it.
- Email. We send only the emails described above. Reply to any of them to ask us to stop.
- Your information. You can see it, correct it or have it deleted, as set out next.
Reviewing, changing or deleting your information
Your account page shows your email and your research access. To see everything we hold about you, correct it, or delete your account, email admin@capitalroles.com from the address on your account. We delete an account and the information tied to it within 30 days of your request. Payment records that tax and accounting law require us to keep, and those Stripe keeps itself, are retained as the law requires.
How long we keep it
- Account, research access, apply-click and hire-report information: while your account exists, then deleted on request as above.
- A Private Counsel application: kept until you ask us to delete it, as above.
- Private Counsel files: deleted 90 days after the term ends (its third session). You can remove a file you added at any time.
- Sign-in links expire after 15 minutes. A sign-in session ends after 365 days without use, or when you sign out.
- Records of recent requests kept to stop abuse: deleted within 14 days.
- Cloudflare’s request logs: kept by Cloudflare under its own retention rules.
Do Not Track and Global Privacy Control
We do not track you across other websites, we do not sell or share your information, and we do not let anyone else do so here. The visit counter uses no cookie and builds no profile of you. A Do Not Track or Global Privacy Control signal therefore changes nothing on Capital Roles: what those signals ask for is already how the site works.
Children
Capital Roles is not meant for anyone under 16, and we do not knowingly collect information from them. If you believe we have, email us and we will delete it.
Keeping it safe
The site is served only over HTTPS. Sign-in links and sessions are stored as one-way hashes, not as the links themselves.
Changes to this policy
When this policy changes, we update the effective date at the top. If a change is material, we also email members before it takes effect.