GDPR Statement

Last updated: August 2026

Our commitment

CapVein Limited is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Irish Data Protection Acts 1988–2018.

Data controller

CapVein Limited, Cork, Ireland. Contact: dorismurphy@capvein.co

Your rights under GDPR

You have the following rights regarding your personal data:

Right of access — You can request a copy of the personal data we hold about you.
Right to rectification — You can ask us to correct inaccurate or incomplete data.
Right to erasure — You can request deletion of your personal data ("right to be forgotten").
Right to restriction — You can ask us to limit how we use your data.
Right to data portability — You can request your data in a machine-readable format.
Right to object — You can object to processing based on legitimate interests.
Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time.

How to exercise your rights

Email dorismurphy@capvein.co with the subject line "GDPR Request". We will respond within 30 days. We may ask you to verify your identity before processing your request.

Data storage and security

All personal data is stored on Supabase infrastructure located in the EU (Ireland region). Data in transit is encrypted via TLS. Data at rest is encrypted by Supabase. Row Level Security ensures each user can only access their own data. No personal data is stored outside the EU without appropriate safeguards.

Data retention

We retain your data for as long as your account is active or as required to provide the service. On account deletion, personal data is removed within 30 days. Anonymised aggregate data may be retained for platform improvement.

Third-party processors

We use the following sub-processors, all operating under GDPR-compliant terms:

Supabase — Database and authentication (EU region)
Netlify — Website hosting (EU edge network)
Stripe — Payment processing (EU data residency)
PostHog — Analytics (EU Cloud, Frankfurt)
Anthropic — AI inference (data not retained for training)

Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Data Protection Commission (Ireland): dataprotection.ie · Lo Call: 1800 437 737.

← Back to capvein.co