DRAFT — Not Legally Reviewed

This is a working starting point, not a final legal document. It must be reviewed by an attorney before being treated as Capital Command's binding Privacy Policy.

Privacy Policy

Draft — pending attorney review

1. What this covers

This Privacy Policy describes how Wood Capital LLC (“Capital Command”) handles information in connection with the Capital Command service, including this marketing website. It applies to information submitted by departments using Capital Command (“Customer Data”), to demo requests submitted through this site, and to information about individual users of the Service.

2. Current stage — read this first

Capital Command is in controlled pilot development, running on a live, multi-tenant database with real user authentication and Row Level Security enforced at the database level — a department's data is only ever visible to signed-in members of that department. This policy will be revised as the product and its security documentation mature.

3. What information Capital Command collects

Department-provided information (personnel counts, apparatus, budgets, facilities, funding history, and similar organizational data entered directly into Capital Command) and its associated documents/metadata; basic account/contact information for the people using Capital Command on a department's behalf; and, for this website, the information submitted through the demo request form (name, title/rank, department, work email, phone, state, and department type). Capital Command does not purchase or aggregate data about individuals from third parties.

4. How information is used

Department data is used to operate the Service for the department that submitted it — funding matching, financial calculations, report generation, and related features — and not for any other department's benefit. Demo-request information is used only to follow up about a Capital Command demo. Customer Data is not sold.

5. AI and data

Where Capital Command uses AI-assisted drafting, it sends only the department's own already-entered information (never third-party or other departments' data) to a third-party AI provider to generate a draft; that output is stored clearly marked as AI-suggested and unverified until a person reviews it, and is never used to train any AI model.

6. Data retention, export, and deletion

Retention periods and self-service export/deletion processes are not yet finalized. A department can request an export or deletion of its own data today by contacting its Capital Command point of contact directly.

7. Subprocessors

Capital Command currently uses Supabase (database and authentication), Vercel (application and website hosting), Resend (demo-request email delivery on this website), and, for AI-assisted drafting features, Anthropic (AI processing). Nothing is listed here that isn't actually in use.

8. Contact

Privacy questions should go through your Capital Command point of contact directly.