Capitowl™ uses the companies below to run the App. For each one, this page lists what it does for us, what information it receives, and what happens to that information when you delete your Capitowl account. We update this page when a provider changes. The Privacy Policy explains the categories of information we collect and your rights.
How to read the Deletion column. When you delete your account, it enters a 30-day grace period, described in the Privacy Policy. Where a deletion step applies, the row says whether it starts as soon as you delete your account or when the grace period ends.
- Yes: Capitowl deletes your information, removes the connection, or revokes the provider's access, as the row describes.
- Partly: Capitowl completes the step the row describes, and the row says what remains.
- Not yet: the provider may keep information linked to you, and Capitowl does not delete it there yet.
- Not applicable: the provider receives nothing from Capitowl that is linked to your account, or holds your information under its own relationship with you, such as your app store account.
- See the Privacy Policy: the provider runs Capitowl's own systems, and the Privacy Policy describes what deletion removes from them.
Account Aggregation and Exchanges
| Provider | What it does for us | What it receives | Deletion |
|---|
| Plaid | Connects your bank, card, and brokerage accounts | Your institution login, which you enter in Plaid's own screen and Capitowl never stores; account and transaction data | Yes. Capitowl starts removing the connection at Plaid as soon as you delete your account. Account and transaction data already delivered to Capitowl is covered by the Privacy Policy's retention section. |
| Akoya | Connects accounts at institutions that use Akoya | The same information as Plaid | Yes. Capitowl starts removing the connection at Akoya as soon as you delete your account. |
| Coinbase | Connects your Coinbase account, if you choose to | Permission to read your Coinbase balances, transactions, payment methods, and profile | Yes. Capitowl starts revoking that permission at Coinbase as soon as you delete your account. |
Sign-In, Email, Notifications, and Device Integrity
| Provider | What it does for us | What it receives | Deletion |
|---|
| Google Firebase Authentication | Sign-in, account security, email-change confirmation, and notices when two-step verification is added | Your email address and sign-in identifiers; if you sign in with Google or Apple, the name that provider supplies. Capitowl does not write your name to it. | Yes. Capitowl deletes your sign-in account when the grace period ends. |
| Resend | Sends account emails: welcome, email verification, and password reset | Your email address, your first name, and the content of each email | Not yet. Resend keeps its records of the emails sent to you, and Capitowl does not delete them yet. |
| Google Firebase Cloud Messaging | Push notifications | A device push token | Yes. Capitowl deletes your stored push tokens when the grace period ends. |
| Google Firebase App Check, Apple App Attest, and Apple DeviceCheck | Confirm that requests come from a genuine copy of the App (App Attest on iPhone and iPad, DeviceCheck on Mac) | Device attestation only | Not applicable. |
| Apple Push Notification service | Delivers push notifications on iPhone, iPad, and Mac | A device push token | Not applicable. No account identifier is sent. Apple's own terms govern the token. |
Payments and Subscriptions
| Provider | What it does for us | What it receives | Deletion |
|---|
| Apple App Store | Processes purchases | Your Apple account and payment method, which Apple holds; Capitowl sees only the purchase status | Not applicable. Apple's own terms govern this information. |
| RevenueCat | Tracks the status of App Store subscriptions | Your Capitowl account identifier, email address, name, and the history of any App Store purchases | Yes. Capitowl deletes your customer record at RevenueCat when the grace period ends. |
Analytics and Stability
| Provider | What it does for us | What it receives | Deletion |
|---|
| Google Firebase Analytics | Measures how the App is used | Usage events, your account identifier, and five coarse account attributes: subscription state, connected-institution bucket, setup stage, notification permission, and platform. No amounts or account details. | Not yet. Capitowl records a deletion request for Google when you delete your account, but does not send it yet. We are finishing that step now. |
| Google BigQuery | Stores a copy of the analytics above for our own analysis | The same as Firebase Analytics | Not yet. Capitowl does not yet delete your data from this copy. |
| Google Firebase Crashlytics | Crash and error reports | Crash details keyed to a device installation identifier; no account, name, or email | Not applicable. The reports are keyed to a device installation identifier, not to your account. |
| Google Firebase Performance Monitoring | Measures app performance: startup time, screen-rendering speed, and network-request timing | Timing data for app start, screen rendering, and network requests, keyed to a device installation identifier; no account, name, or email | Not applicable. The data is keyed only to a device installation identifier, not to your account. |
Support
| Provider | What it does for us | What it receives | Deletion |
|---|
| Intercom | In-app support chat and help center | Your Capitowl account identifier, email address, your device's push token, and your messages to support | Not yet. Capitowl's support chat is not connected to an Intercom workspace yet, so the deletion step is switched off. When it is on, Capitowl will delete your contact record at Intercom when the grace period ends. Your support conversations will stay at Intercom after that. |
Mailboxes You Connect
| Provider | What it does for us | What it receives | Deletion |
|---|
| Google (Gmail) | Reads the financial emails you authorize, to find receipts, statements, and subscriptions | The mailbox access you grant; matching messages and attachments | Yes. When the grace period ends, Capitowl revokes its mailbox access and deletes the stored messages and attachments. |
| Microsoft (Outlook) | The same, for Outlook mailboxes | The mailbox access you grant; matching messages and attachments | Partly. When the grace period ends, Capitowl deletes the stored messages. Microsoft does not let Capitowl revoke the mailbox permission for you, so revoke it yourself at account.live.com. |
Capitowl Assistant
| Provider | What it does for us | What it receives | Deletion |
|---|
| OpenAI, Anthropic | Power Capitowl Assistant's Cloud AI | Only when the assistant uses Cloud AI: the messages you send in that conversation and a snapshot of your accounts (account names, last four digits, balances, budgets, and recurring payments). When the assistant looks up your profile, it also receives your name, phone number, date of birth, and account identifiers. In Private mode, Capitowl Assistant answers on your device or with Apple's Private Cloud Compute, and nothing is sent to these providers. | Not yet. These providers offer no per-user deletion for API traffic. We are reducing what the assistant sends and confirming each provider's retention terms. |
Hosting and Processing
| Provider | What it does for us | What it receives | Deletion |
|---|
| Google Cloud (Cloud Run, Cloud SQL, Cloud Storage, Pub/Sub, Document AI) | Runs the App's servers and databases, and extracts text from receipts you upload or that arrive in a connected mailbox | All information the App stores | See the Privacy Policy. These are Capitowl's own systems. The Privacy Policy describes what deletion removes from them and when. |
Wallet, Property, and Place Lookups
| Provider | What it does for us | What it receives | Deletion |
|---|
| Alchemy | Reads balances for Ethereum wallets you add by address | The wallet address | Not applicable. At the provider, the address is not linked to your Capitowl account. |
| mempool.space | Reads balances for Bitcoin wallets you add by address | The wallet address. Extended public keys are not supported. | Not applicable. At the provider, the address is not linked to your Capitowl account. |
| RentCast | Estimates home values | The property's address or coordinates and the details you enter (bedrooms, bathrooms, square footage). No account identifier. | Not applicable. RentCast's own terms govern whether it keeps the address. |
| Google Maps | Address lookup, directions, and maps | Address text, coordinates, and place lookups, sent through Capitowl's servers; your device fetches map tiles directly | Not applicable. |
| Provider | What it does for us | What it receives | Deletion |
|---|
| Polygon, CoinGecko, OpenFIGI | Prices and identifiers for securities and crypto assets | Ticker symbols and identifiers only | Not applicable. |