Your data. Your choice.
Captables separates publication, reader, newsletter and private-product records so one preference is never mistaken for another.
Einstein Technologies LLC operates Captables. Registered business address: 2035 Sunset Lake Rd, Newark, DE 19702. Accounts, submissions and private services are intended for adults aged 18 or older. We do not knowingly request children’s personal information; use the data request form below if a child submitted information. Cloudflare and DigitalOcean deliver and protect this website; Cloudinary delivers images and receives technical request information including IP addresses. See cookies and storage controls.
Google sign-in for private products
Where Google sign-in is enabled, Captables requests basic sign-in information only: your stable Google account identifier, verified email address and display name. We do not request your Google password, Gmail messages or Drive files. Google processes the sign-in under its own Google privacy policy.
Captables stores those identity fields, a hash of the Captables session token, expiry and revocation records, and authentication time when Google supplies verifiable second-factor evidence. Private-product access requires current evidence and the product's permissions. Missing or stale evidence does not unlock private records. Short-lived sign-in attempt records and hashed rate-limit keys protect against replay and abuse; expired attempt records are removed during later sign-in attempts.
Signing out revokes the current Captables session; it does not delete your Google account, company ledger or retained audit records. No fixed deletion deadline for retained security or private-product records is promised here; verified requests are reviewed against the applicable retention and hold decisions.
Signing in or matching an email address does not transfer existing private authority or add company membership. Sign-in does not publish a company summary, share a deal room or enroll marketing. Those choices and newsletter subscriptions remain separate. Choose Private products in the request form below to ask for review of private-product identity or records; recording a request does not itself change them.
Reader accounts
We store your email address, a salted password hash, followed company IDs and saved article IDs in our application database. A secure, HTTP-only session cookie keeps you signed in. We do not store your plaintext password.
Newsletter and company alerts
Newsletter signup and subscriptions are managed on Substack, and the separate private newsroom sends the weekday edition. A reader account or followed company does not subscribe you. Company-alert emails require a separate explicit opt-in at your verified reader address. Resend receives the address and message needed for configured reader security and company-alert delivery. An alert-only unsubscribe link does not change your Substack subscription or private-workspace notifications.
We retain versioned company-alert consent and immutable delivery requests to record the selected preference, prevent duplicate attempts and distinguish provider acceptance from inbox delivery. Consent evidence uses address and reader-ID digests; delivery requests contain the recipient address and public story content. Historical website newsletter records are separate from the current Substack audience.
Tips and inquiries
We keep the information you submit privately for review. Editorial and commercial submissions are separate. Authorized operators can access them; they are not published automatically. This is not an anonymous channel. Do not submit sensitive personal records, financial documents, credentials or confidential information through these forms.
Private products and retained records
Equity, research, deal, signing and LP records have their own permissions, audit trails and retention requirements. A marketing opt-out or reader-account deletion does not erase signed records, investment records, consent evidence, security logs or material held for a documented legal, statutory or security reason. A verified request is reviewed against each selected scope before any action is taken.
Product measurement
Only after accepting optional measurement, first-party aggregate counters measure article reads, searches, follows, saved stories, newsletter requests and inquiries. Event counters do not store a visitor ID or browsing history. We honor Do Not Track and Global Privacy Control for optional browser activity counters. Security rate limits are separate.
Google and Meta measurement
Google Analytics and Meta run by default on eligible public pages. Use Cookie preferences to turn either off. Google Analytics measures selected public-page visits and Meta measures advertising-related PageViews. These providers receive technical browser information, IP addresses and cookie identifiers; Meta may associate activity with information it already holds. We do not send form contents, email addresses or private workspace activity. Automatic interaction collection and advanced matching are disabled. Query strings, fragments and private or operational pages are excluded. Browser privacy signals keep optional tracking off. Saved opt-outs remain until you change them or clear browser site data. Google Analytics cookies last up to 180 days and Meta cookies typically last up to 90 days. Turning either provider off in Cookie preferences stops future collection and removes accessible tracking cookies. Preferences open only when requested; there is no automatic popup. Only the publication homepage is enabled. Financial holdings, article URLs, forms and private workspaces are excluded.
Control and deletion
Request reader-account deletion from your reading list to remove its saved stories, follows and sessions and stop future reader security and company-alert emails. A documented retention hold may prevent deletion; prior delivery and retained audit records are not erased. Your independently held Substack subscription is not deleted or unsubscribed; manage it on Substack. A broader request can be recorded below. Submission records the request; it does not itself delete or change any underlying data.
Ask Captables to review your data.
Choose the data domain and request type. We will verify identity and authority before review advances. Do not upload identification, account credentials, financial documents or confidential records here.
- Requests receive an immutable reference.
- Retention or legal-hold decisions are documented separately.
- No request automatically changes newsletter, investment or signed records.
Download your reviewed reader data.
Sign in with the same verified reader account used to submit the access request. Once that request is reviewed for execution, enter its reference here.
This download covers reader preferences and company-alert histories only. It does not include private-product, newsletter-provider or other separately reviewed records. It does not change consent or release retention holds.
Separate services
Using the publication or reader features does not retain an agency, create a securities order or grant anyone transaction authority. Any separately contracted service has its own scope and disclosures.