Privacy
What you submit. To run a review, you upload a capability statement (PDF or photos) and tell us who the review is for (a role choice only, such as business owner or advisor). No name, email, or phone number is required to run a review.
How your document is used. Your document is sent to our AI provider’s API (Anthropic) solely to generate your review, and is processed by our hosting infrastructure in memory for the duration of that request. We do not use your document for anything else.
Accounts. You can sign in with Google, with an email address and password, or with a one-time six-digit code sent to your email address. If you choose a password, it is handled by our authentication provider (Supabase) and stored only in hashed form; we never see or store the password itself. If you create an account, we store your email address, your name, an optional job title, and the dates your account was created and last updated. Signing in with Google shares only your email address and basic profile with us. You can run one review without an account per browser; after that, a free account is required to see a full report or run another review. Accounts are free: we do not ask for payment or card details.
Company profiles. If you create a company profile, we store what you enter: legal name and optional display name, website, city, state, and primary industry. Company profiles are visible only to the account that created them.
Saved reports. When you choose to save a completed review, we store the report itself (its scores, findings, and recommendations), the file name of the document you uploaded, the report version, the reviewer role you selected, and the date. We do NOT store the uploaded document: it is processed in memory for the review request and never written to disk or kept afterward. Saved reports are visible only to the account that saved them, enforced at the database level.
Deleting your data.You can delete any saved report from your account, and you can delete a company profile after confirming; deleting a company also permanently deletes that company’s saved reports. To delete your entire account, including your profile, companies, and reports, email us at support@capabilitystatementcheck.com from your account email address and we will remove it.
Before you sign in to save. If you run a review without an account and then choose to save it, your completed report is held briefly in this browser tab’s temporary storage so it survives the sign-in step. It is removed as soon as the report is saved, when you start another review, or when you close the tab.
Cookies and browser storage. We do not use advertising or tracking cookies. If you sign in, our authentication provider sets the session cookies needed to keep you signed in. This browser also keeps two small local records: a marker that your free review without an account was used, and, briefly, a completed report while you sign in to save it (described above).
Retention. Uploaded documents are not retained at all. Account details, company profiles, and saved reports are kept until you delete them or ask us to delete your account. We do not sell personal information, and we do not share it with anyone except the service providers named on this page, who process it only to run the product.
Operational logs. Our server and infrastructure providers (including our hosting platform and AI provider) may retain standard operational logs and request metadata under their own policies. We do not write your document contents, business information, or report contents to our application logs.
What not to submit. Do not upload classified, export-controlled, proprietary, or otherwise restricted information, or documents you do not have permission to share. Capability statements are meant to be shared with buyers, so they should not contain sensitive personal or financial values such as Social Security numbers, employer identification numbers, bank or routing numbers, or passwords. Please remove anything like that before uploading.
Questions. For privacy questions, contact support@capabilitystatementcheck.com.
This page describes what the product stores today. If storage behavior changes, this page is updated before the change ships.
Last updated September 2, 2026.