Legal
Privacy Policy
Last updated January 2026. Your records, handled the way custody demands.
What We Collect
- Account data — name, email, organization name, and authentication records.
- Documents & metadata — files you deposit, their names, versions, checksums, and folder structure.
- Ledger data — every deposit, key, open, download, and signature, with actor, IP, timestamp, and chain hash.
- Execution data — signer identity confirmation, method, and the certificate of execution.
- Technical data — IP address and user agent for security and logging.
What We Don't Collect
We do not sell your data, we do not use your documents to train models, and we do not run third-party advertising trackers. Your files are yours.
How We Use It
To operate your vault, issue and expire access keys, execute signatures, maintain the ledger, secure your account, provide support, and send the communications described in our Terms of Service.
Retention
Documents are retained per your organization's retention schedule and any active legal hold, up to ten (10) years by default, then disposed of in a logged manner. Ledger entries are append-only: they are retained for the life of the account and are not edited or deleted on request, because their value is that they cannot be. You can export your data from Settings at any time.
Data Breach Notification
In the event of a breach of security affecting personal information, CapitalKey Inc.will notify affected individuals and authorities as required by the Massachusetts data breach notification statute, M.G.L. c. 93H, and maintains a written information security program in line with 201 CMR 17.00, alongside other applicable law.
Where Your Data Lives
CapitalKey runs its primary operations from Commonwealth of Massachusetts, using hardened, access-controlled infrastructure. EU sub-processor details are available on request for organizations with regional requirements.
Your Rights
Subject to applicable law (including GDPR where relevant), you may request access, correction, deletion, or portability of your personal data. Contact us to exercise these rights.
Contact
CapitalKey Inc.
One Federal Street, Suite 1900
Boston, MA 02110
(617)-402-3190 · help@capitalkey.net