Privacy Policy

This Privacy Policy describes how Capeles LLC, a limited liability company registered in Puerto Rico (“Company”, “we”, “us”, or “our”), collects, uses, and shares information when you use the Capeles App (the “Service”).

Contact: contact@capeles.com  |  Address: P.O. Box 1554, Dorado, PR 00646

A. Information you provide directly

• Account and profile information: name, email address, phone number, username, and similar identifiers.
• Support communications: messages you send to us (e.g., support tickets, emails), and any information you choose to include.
• Other information you submit: forms, preferences, or settings you provide within the Service.

B. Information we collect automatically

• Device and usage data: IP address, device identifiers, browser type, pages viewed, timestamps, and interactions.
• Cookies and similar technologies: used to operate the Service, remember preferences, and improve performance. You can manage cookies through your browser settings.

C. Financial information collected via Plaid (when you choose to connect)

If you choose to link your financial account(s) using Plaid, Plaid may collect and share information with us according to your permissions and the products we enable. Depending on what you authorize, this may include:

• Account information: account name, type, mask (e.g., last 4 digits), and balance information.
• Transaction information: transaction date, description/merchant, amount, and category data.
• Identity information: name, phone, email, and address associated with your financial account (if you permit and if available).
• Institution information: the financial institution you connect and related metadata.

We do not receive your bank login credentials. Your credentials are provided directly to Plaid during the connection flow, and are not shared with us. You can learn more about Plaid’s practices in Plaid’s privacy policy at: https://plaid.com/legal/.

• Provide, operate, and maintain the Service and its features.
• Connect financial accounts and retrieve data you authorize via Plaid to deliver requested functionality (e.g., account verification, transaction insights, budgeting, reporting).
• Authenticate users, prevent fraud and abuse, and secure the Service.
• Communicate with you about the Service (e.g., account notices, support responses, security alerts).
• Improve and develop the Service, including analytics and troubleshooting.
• Comply with legal obligations and enforce our terms.

• Service providers: with vendors that help us operate the Service (e.g., hosting, analytics, customer support, email delivery). They are authorized to use information only as necessary to provide services to us.
• Plaid: if you choose to connect a financial account, we work with Plaid to enable the connection and data retrieval you authorize.
• Legal and safety: if required by law, subpoena, court order, or to protect rights, safety, and security of users and the Service.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets (information may be transferred as part of that transaction).
• With your direction or consent: we may share information when you instruct us to do so.

We implement administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is 100% secure, but we work to protect information using industry-standard practices such as access controls, encryption in transit, and logging/monitoring.

We retain personal information for as long as necessary to provide the Service and for legitimate business purposes, such as complying with legal obligations, resolving disputes, and enforcing agreements.

Plaid data retention: We retain financial data obtained via Plaid only for as long as needed to provide the features you enable, unless a longer retention period is required or permitted by law. You may request deletion as described below.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information (subject to legal exceptions).
• Withdraw consent where processing is based on consent.
• Opt out of certain communications (e.g., marketing emails, if applicable).

Disconnecting a linked account: You can stop sharing data from a linked financial account by disconnecting it within the Service, or by contacting us at privacy@capeles.com.

To exercise your rights, contact us at privacy@capeles.com. We may verify your identity before fulfilling requests.

If you’d like to delete your Capeles Supplier App account and the associated data, you can start the request from within the app (Profile → “Delete my account”), or send a request to support@capeles.com from the email address registered to your account, with the subject line “Account deletion request.” We’ll verify your identity and process the request within 30 days.

What we delete

• Your account and profile information: name, email address, phone number, and similar identifiers.
• Your login credentials and device/push notification tokens.
• Documents you uploaded that are not tied to an active or historical payment request.

What we retain, and why

• Invoice and payment records (amounts, dates, status, and the banking details used to pay you) are retained for up to 7 years after account deletion, as required by U.S. tax and accounting recordkeeping laws — even though you will no longer be able to access your account.
• Any information we’re required to keep to comply with a legal obligation, resolve a dispute, or enforce our agreements.

The Service is not directed to children under the age of 13 (or the age required by local law), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

If you access the Service from outside the country where our servers are located, your information may be processed and stored in other jurisdictions. We take steps designed to ensure an adequate level of protection for transferred information where required by law.

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy and update the “Last updated” date above. Your continued use of the Service after changes become effective means you accept the updated Privacy Policy.

If you have questions about this Privacy Policy or our privacy practices, contact:
Capeles LLC
Email: privacy@capeles.com
Address: P.O. Box 1554, Dorado, PR 00646