Capstone Workforce Privacy Policy

Effective October 21, 2026

1. Who we are and what this policy covers

Capstone Tech, Inc. ("Capstone," "we") runs Capstone Workforce at capstoneworkforce.com: free guides about job training and funding, free interview practice, paid tools for job seekers, and a platform that training programs use with their participants.

This policy covers three groups of people:

• Visitors who read our public pages.
• Job seekers who make their own account, practice, or buy a guide, resume or subscription.
• Program participants whose account comes through an organization (a workforce board, college, nonprofit or employer). For participants, the organization decides how the platform is used, and section 6 applies.

It does not cover websites we link to, such as training schools or state job sites.

2. Information we collect

We use cookies and similar storage to keep you signed in, remember your choices (such as your state in the Navigator), and measure how pages perform.

3. How we use information

• To run the service: score your practice answers, build your resume and career plan, deliver guides, and process payments.
• To send messages you asked for or expect: account and receipt emails, practice reminders, trial notices, and weekly career plan check-ins. Each has an unsubscribe or pause link.
• To pass your request to schools, only when you check the box asking a school to contact you. Your phone number goes only if you check the separate phone box.
• To report to your program, if your account comes through an organization (section 6).
• To improve the product: find bugs, see where pages confuse people, and test changes.
• To reach people who may want our products: by email, people who contact us or sign up for our emails.
• To keep the service safe and meet the law: prevent fraud and abuse, and respond to legal requests.

We do not use your practice recordings or transcripts for advertising, and we do not let AI providers train their models on them.

4. Who we share it with

We share personal information only with the providers below, for the purpose listed, plus the schools you ask us to contact and, for participants, your program. We do not sell practice content, scores or resumes.

5. Page recordings on public pages, and visitor identification until October 21, 2026

Until October 21, 2026, a script from Apollo.io on our public pages (guides, pricing, tools) recorded the pages you viewed, and for some visitors in the United States, Apollo and its partner LiveIntent matched that browser to a person and told us a name, employer, job title and an email address. We removed that script on October 21, 2026, and we no longer identify visitors. It never ran inside your signed-in account, on practice sessions, or on any page whose web address carries a private link.

On our public pages, Microsoft Clarity records how you move through a page (clicks, scrolls and taps) so we can see where pages are hard to use, as heatmaps and session replays. It uses first- and third-party cookies, and Microsoft handles the data under the Microsoft Privacy Statement. It never runs inside your signed-in account or on practice sessions, and it stays off when your browser sends Global Privacy Control or you use the "Do Not Sell or Share My Personal Information" link.

Visitors identified before October 21, 2026

• We may have emailed you once about Capstone Workforce or about free tools that fit what you were reading. We no longer send emails based on a visit.
• Every email has an unsubscribe link, and we never call or text you because of a visit.

How to opt out

• Use the "Do Not Sell or Share My Personal Information" link at the bottom of every page. We stop loading Microsoft Clarity for your browser.
• If your browser sends a Global Privacy Control signal, we treat it as that same opt-out automatically.
• Email sg@capstonetech.co to have a record from a visit before October 21, 2026 deleted.

6. Program participants

If your account comes through an organization, that organization controls how your information is used, and we process it on their behalf.

• What your program sees: your practice activity, scores, readiness, goals and certificates, and any notes your coach adds. Program staff do not see your password or payment details.
• What we never do with participant data: sell, license or rent it; share it with another organization; use it in marketing without written consent; or let AI providers train on it. These are the commitments on our confidentiality page.
• No page recording or visitor identification inside the app: Microsoft Clarity (section 5) does not run anywhere in the signed-in platform, and we no longer identify visitors anywhere.
• Requests about your data: ask your program first. We help them export or delete it, and you can also email sg@capstonetech.co.

7. The Capstone Careers browser extension

The Capstone Careers extension for Chrome fills in job application forms for a job you open from your Capstone Careers account. It stays idle on every website until you press "Open and fill it in" in Capstone Careers or "Fill this page" in the extension.

• What it sends us: when it fills a form, each field's label, name, placeholder, nearby heading and answer choices, any error the site shows next to a field, plus the page address and title, so we can return the right answer from your resume and saved answers. While our helper finishes a page for you, it also sends the list of that page's form fields and buttons with their labels.
• What it fills in: your own information from your account, such as your name, email, phone, address, work history and education, and your resume when the site allows. Gender, race and ethnicity only with the answers you saved yourself. After you send an application, it saves a proof record and the list of steps it took to your account.
• What it does only when you turn it on: with "Send applications for me", it presses the employer's Next and Submit buttons for you after a countdown you can stop. With "Make employer accounts for me", it types your email and the one job-site password we keep for you into the employer's sign-in or create-account form, and nowhere else.
• On job boards: on LinkedIn (Easy Apply included), Indeed, ZipRecruiter and Glassdoor it fills in the application the same way, and you always press Submit yourself, even with "Send applications for me" on.
• What it never does: read or send the rest of the page, your browsing history, passwords you type, or payment details; fill in your date of birth, Social Security or ID numbers; answer a check that you are a person; or send the same application twice.
• What it stores in your browser: only a short-lived pass (12 hours, one application) and which tab is filling that job.
• We do not sell this data or use it for anything except filling in your applications.

8. Your privacy rights

You can ask us to:

• See the personal information we hold about you.
• Correct anything that is wrong.
• Delete your information, unless we must keep it (for example, payment records for tax law).
• Stop selling or sharing it. Use the "Do Not Sell or Share My Personal Information" link, or send a Global Privacy Control signal from your browser.
• Stop marketing email, with the unsubscribe link in any email.

To make a request, email sg@capstonetech.co from the address on your account, or tell us the email you want looked up. We answer within 45 days and do not charge you or treat you differently for asking.

California residents have these rights under the California Consumer Privacy Act. In the last 12 months, the categories we may have "shared" for cross-context advertising, as that law defines it, are identifiers and internet activity, through Apollo.io and LiveIntent on our public pages until October 21, 2026 (section 5). We no longer share this information.

9. Retention, security, children, and visitors outside the US

• Retention: we keep account and practice data while your account is open, and delete it when you or your program ask. Payment records are kept as tax law requires. Visit records Apollo collected before October 21, 2026 are kept by Apollo under its own terms.
• Security: data is encrypted in transit and at rest on Amazon Web Services, access is limited by role, sensitive actions are logged, and the database is backed up daily.
• Children: the site is not for children under 13, and we do not knowingly collect their information. Some programs serve youth ages 14 to 17; those accounts come through the program, which handles any parent or guardian consent.
• Outside the US: we are based in the United States and store data here. Using the site from another country means your information is processed in the US.

10. Contact and changes

Questions or requests: sg@capstonetech.co, or Capstone Tech, Inc., 277 S Washington St, Suite 210, Alexandria, VA 22314.

We will post any change to this policy on this page with a new date. If a change affects how we use information we already have, we will email account holders before it takes effect.