Fixed Income Analyzer (FIA)

Who we are and what this covers

Fixed Income Analyzer ("FIA") is run by CapitalWave Inc. ("CapitalWave", "we", "us"), 1410 North Scott St, Arlington, VA 22209, USA. This policy covers the FIA website and app. CapitalWave's main website, capitalwave.com, has its own privacy policy.

Most people use FIA through a university, employer or training company (your "organization"). Your organization decides to use FIA for its courses and controls its cohorts. For that use, we process your data on its behalf, as explained under "If you're in the EU or UK" below.

What we collect

Account details: your email address, your name or the display name you choose, how you sign in (an emailed code or link, or Google), and your organizations, cohorts and roles. If you sign in with Google, we receive your name and email address from Google, never your Google password. FIA has no passwords of its own.
Learning records: your lab answers and attempts, exam responses and scores, grades and feedback from your instructors, and suggested marks for written answers.
Class game: your trades and the nickname you choose.
Time online: for each day you use FIA, when you were first and last active, about how many minutes you were active, how many visits you made and which tools you opened.
AI tutor: the questions you ask, its answers, and any quality marks reviewers add.
Contact form: your name, email address, organization, topic and message. These are emailed to our team and aren't stored in FIA's database.
Demo requests: your name, email address, institution, job title and message, and what your demo was used for. We use them to set up your demo and to follow up about it.
Technical data: our hosting providers record IP addresses, browser type, pages requested and times, to run the service and keep it secure.

We don't collect payment card details. Please don't put sensitive personal information (health, religion, finances and so on) in your answers, messages or questions to the tutor.

You can use the analytics tools without an account. If you do, we store nothing about you beyond the technical data above.

How we use it

To run FIA: signing you in, saving and showing your work, marking and grading, and running cohorts, labs, exams and the class game.
To show your progress to the instructors, teaching assistants and administrators of your cohorts and organization.
To answer your questions in the AI tutor and to suggest marks for written answers. A suggested mark is only a suggestion: your instructor decides your grade.
To send service emails, such as sign-in codes and notices that you've been added to a class. We don't send marketing email from FIA.
To reply when you contact us or ask for a demo.
To keep FIA secure, prevent abuse and fix problems.
To improve FIA, using statistics that don't identify you.
To meet legal obligations.

We don't sell personal data, show advertising, or track you across other websites.

Who can see your data

Other learners can't see your name, email address or work. The one exception is the class game: when a game ends, players see the debrief and each other's trades under their nicknames.
The instructors and teaching assistants of your cohorts can see your name, email address, work, grades, tutor questions and time online. Your Account page shows what they can see.
Your organization's administrators can see the same for everyone in their organization. Instructors can export these records and must keep them secure.
CapitalWave's platform administrators can see all data, to support customers and keep FIA running.
The service providers listed below, only so they can provide their services to us.
Others where the law requires it, or to protect people's safety or our rights. If CapitalWave is merged or sold, data may pass to the new owner under this policy.

Service providers

Lovable hosts FIA. Its Lovable Cloud service (built on Supabase) holds FIA's database, handles sign-in and sends FIA's emails.
AI model providers, through the Lovable AI Gateway, answer tutor questions and suggest marks. FIA currently uses Anthropic's Claude models. We send your question, the conversation so far and the tool's current inputs, but not your email address.
Google, only if you choose to sign in with Google.

FIA fetches market data from the US Treasury and the Federal Reserve Bank of St. Louis (FRED). No personal data is sent to them. Our providers may store and process data in the United States and other countries.

How long we keep it

Account details: until your account is removed.
Learning records: until the cohort or your account is deleted.
Time online: until your account is deleted.
AI tutor questions and answers: 12 months, then deleted automatically.
Organization activity log: until the organization is deleted.
Contact form emails: as long as we need them to handle your enquiry and keep normal business records.
Demos: read-only once the demo ends, and deleted with everything in it 30 days later. The request itself is kept as a business record.
Technical logs: for the periods our hosting providers set. Backups may hold deleted data until they expire.

Security

All connections to FIA are encrypted. The database checks every request against your role, so people see only what their role allows. FIA uses one-time sign-in codes and links instead of passwords. On a shared computer you can tick a box at sign-in, and FIA then signs you out after 15 minutes of inactivity or when the browser closes.

No system is perfectly secure. If a breach affects your personal data, we'll tell you and your organization as the law requires.

Your choices and rights

To see, correct, export or delete your data, or to object to how we use it, email legal@capitalwave.com or use our contact form. You can change your display name on your Account page. If your account comes from your organization, we may pass your request to it and act on its instructions. We may need to confirm who you are first.

You have these rights wherever you live. The next two sections add the details the GDPR and US state laws require.

If you're in the EU or UK (GDPR)

Who is responsible. If you use FIA through an organization, that organization is the controller of your data in its cohorts and CapitalWave is its processor, acting only on its instructions under our agreement with it. Organizations can ask us for our data processing agreement. For everything else, such as using FIA without an organization, the contact and demo forms, and running FIA's security, CapitalWave is the controller.

Our legal bases. Contract, to provide FIA to you and your organization. Legitimate interests, to keep FIA secure, prevent abuse, improve it using statistics that don't identify you, and reply to enquiries; we've weighed these against your rights. Legal obligation, where the law requires us to keep or disclose data. FIA doesn't use cookies that need consent and doesn't send marketing email.

Your rights. You can ask for access to your data, correction, erasure, restriction and portability, and you can object to uses based on our legitimate interests. You have the right not to be subject to decisions made solely by automated means that significantly affect you. Suggested marks are always reviewed by an instructor, who decides the grade. We reply within one month, or tell you within that month if we need longer. You can also complain to the data protection authority where you live or work; in the UK, that's the Information Commissioner's Office.

International transfers. CapitalWave is based in the United States, and our providers may process data in the United States and other countries. When personal data leaves the EU or UK, we rely on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses and the UK addendum to them. You can ask us for details.

Breaches. If a breach puts your rights at risk, we'll tell the organizations concerned without undue delay. Where we're the controller, we'll notify the authorities within 72 hours and tell you if the risk is high.

If you're in the United States, including California

This section gives the information required by the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA), and by similar laws in Virginia, Colorado, Connecticut, Utah and other states. We give these rights to every US user, whether or not a particular law applies to us.

What we collect, in the law's categories. In the last 12 months we have collected: identifiers (name, email address, IP address, account ID); professional information (job title and organization, from demo requests and the contact form); education information (your learning records); and internet activity (pages, tools used, time online). We collect these from you, from your organization or instructor, from Google if you sign in with it, and automatically as you use FIA. We use them for the purposes under "How we use it" and keep them for the periods under "How long we keep it".

Who receives it. We disclose each category to our service providers ("Service providers" above) for business purposes only, and to your organization's instructors and administrators. We don't sell personal information, we don't "share" it for cross-context behavioral advertising, and we haven't done so in the last 12 months. We don't knowingly collect personal information from anyone under 18. We use any sensitive personal information only to provide FIA and keep it secure, so there's nothing to limit.

Your rights. You can ask us: to tell you what personal information we've collected about you, where it came from, why we use it and who receives it; for a copy of it; to correct it; and to delete it. You can opt out of sale or sharing, though we do neither. We won't treat you differently for using any of these rights. Because we don't sell or share, a Global Privacy Control signal has nothing to change, but we treat it as an opt-out request anyway.

How to ask. Email legal@capitalwave.com or use our contact form. We'll confirm who you are by matching your request to your account email. Someone you authorize can ask for you if they show us your signed permission. We'll reply within 45 days, or tell you within that time if we need up to 45 more.

Appeals. If we decline your request, you can appeal by replying to our answer. We'll tell you the outcome within 45 days (60 days in Colorado). If you're still not satisfied, you can contact your state attorney general.

Age limit

FIA is for people aged 18 or older. Organizations must not enroll anyone younger. We don't knowingly collect data from anyone under 18; if we learn we have, we'll delete it.

Changes to this policy

We'll post any changes here and update the date at the top. If a change is significant, we'll also tell you by email or in FIA before it takes effect.

Contact us

Write to CapitalWave Inc., 1410 North Scott St, Arlington, VA 22209, USA, or email legal@capitalwave.com. You can also use our contact form.

Privacy Policy