AngelCaptain
Privacy policy
Solent Labs ("we") runs AngelCaptain at app.angelcaptain.com and app-beta.angelcaptain.com. This policy explains what data the app uses and what we do with it. It also covers this website.
Your portfolio
Your portfolio is stored in Google Sheets in your Google Drive: sheets the app creates for you, and sheets others share with you, such as a fund's. Your browser reads and writes them directly with Google. We never receive or store your portfolio data.
Google account access
When you sign in, the app asks Google for:
- Your email address (
openid,email), to confirm you've been invited. -
Access to files the app creates or that you open with it
(
drive.file). The app can't see anything else in your Drive.
Our sign-in service receives your email address and a Google refresh token. It stores the token in an encrypted cookie in your browser, uses it only to keep you signed in, and apart from the invite list below keeps neither on our servers.
Each time the app loads while you're signed in, it asks Google Drive for the link to your Google profile picture, using the access it already has. It needs no other permission. Your browser then loads the picture straight from Google, without sending the address of the page, and shows it to you alone. If you have no picture of your own, Google may supply a default image. Our servers never receive, store or log the picture or its link. The app keeps the link only in the open tab, and it is gone when you close the tab. We use it for nothing else.
Your Google profile picture, if you have one, your name and the address you sign in with are shown in this browser from your Google account. Showing them stores nothing and sends nothing to us.
We don't sell Google user data, use it for ads, or use it to train AI or machine learning models. We share it only with the service providers listed below, or when the law requires it.
AngelCaptain's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Information we collect
- Invite list: email addresses of people invited to use the app.
- Reports: when something goes wrong, or your sheet is at another version, the app sends a report: a code, the app version and browser type, with a random number that lasts only while the tab is open. Only if you share usage statistics, a random number that names this browser but not you is added to the daily count. A report for another version carries a code and nothing about the sheet's contents. Reports don't include your portfolio, your name or your email.
- Screen counts: which kind of screen the app shows, such as the dashboard or an investment's page, how long it stays in view, and the app version. They never say which company or investment is on the screen, and they carry no number that links them to you, your browser or your other visits.
- Usage counts: each time someone starts to sign in, finishes signing in, stays signed in or signs out, and whether it worked, plus once for each day a signed-in browser uses the app. We use them to see how much the app is used and whether signing in works. Each count also records the country, and in the US the state, that the request came from, the type of browser, operating system and device (phone, tablet or computer), and the app version. We work out the location from your IP address, then drop the address. We never record your city, postal code or exact location. Counts carry nothing from your account, and nothing from your portfolio.
- Usage statistics, only if you share them: a random number made for this browser, sent with the daily count and the details above, so we can see how often people come back to the app. It is not linked to your name or email. It is off unless you turn on "Share usage statistics" when you sign in or on the app's Your data page.
- Request data: our hosting provider processes IP addresses to deliver the service and prevent abuse, and we use them only to find the country and state for usage counts. We don't keep IP addresses or request logs.
- Email you send us.
The app also uses public reference information, such as details of state tax credit programs. Loading it never sends your data anywhere.
AngelCaptain is not for anyone under 18, and we don't knowingly collect their data.
Cookies
The app uses cookies to sign you in and keep you signed in, for the 30, 60 or 90 days you choose, or until 21 days without using the app. If you share usage statistics, one more cookie holds its random number, until you turn it off or sign out, and for no more than 13 months. The app also saves the location of your portfolio file in your browser. There are no advertising cookies, and none that follow you to other sites. This website uses Cloudflare Web Analytics, which doesn't use cookies.
Service providers
Google provides sign-in, Drive, Sheets and your profile picture. Cloudflare hosts the app and this website and stores diagnostics, usage counts and screen counts.
If we add a feature that sends data to another service you choose, such as your own AI provider, we'll update this policy first. If AngelCaptain changes ownership, we'll ask for your consent before any Google user data is transferred.
Retention
We keep invite list entries while you're invited, and email only as long as we need to respond. Diagnostics, usage counts, screen counts and shared usage statistics are kept for 3 months. After that we keep only daily totals that each count one thing, such as sign-ins by state or views by screen, with no time limit. They carry nothing about any person or browser.
Security
All traffic uses HTTPS. Sign-in cookies are encrypted and can't be read by page scripts. Our hosting account requires two-step verification.
Your choices
- Sign out in the app to revoke its access and clear its cookies.
- Revoke access anytime in your Google account permissions. Your files stay in your Drive.
- Delete your data by deleting the app's folder in your Drive. Sheets shared with you belong to whoever shared them.
- Turn "Share usage statistics" on or off on the app's Your data page. Signing out also turns it off.
- Email us to see, correct or delete what we hold about you, or to be removed from the invite list. We'll respond within 30 days. Usage counts, screen counts and shared usage statistics aren't stored with your name or email, so we can't find or delete yours. They expire after 3 months.
Changes
We'll update this page, and the date at the top, before changing how the app handles your data.