Security
What we hold, and what we never see
A directory needs very little about you. This page says exactly what that is, where it is kept, and how paying and signing in work.
The arrangement
Sign-in without a password
You sign in with a one-time code sent to your email or your WhatsApp number. There is no password to set, reuse or leak. The session lives in a cookie your browser cannot read from script.
Card details never reach us
Payments run through Razorpay. Your card number is entered on Razorpay’s form and stored by Razorpay; CapEasy receives only the result of the payment and a reference to the subscription.
What we keep
Your email address and name, the phone number a WhatsApp code was sent to, your subscription status, and anything you type into Grant Studio about your company. Page views are counted without personal data.
Where it is kept
Account and document data sits in Supabase; the site runs on Vercel; sign-in codes go out through our email provider and SendEasy for WhatsApp. These are the only processors, and the privacy policy names them.
Deleted when you ask
Email hello@capeasy.infrom the address on your account and we delete the account and what it holds. Under India’s Digital Personal Data Protection Act, and the GDPR if you are in the EEA or the UK, you can also ask to see or correct it.
What this page does not claim
CapEasy holds no security certification and names none. The directory itself is published information read from official sites; the personal data above is the whole of what the service collects. If you find a security problem, write to hello@capeasy.in and we will answer from a person.