Website privacy

When you get in touch

The contact form asks for your name, email address and message. Roath Capital Advisory uses these details to read and respond to your inquiry. Please do not submit account numbers, financial statements, passwords, identity documents or other sensitive information through the public form.

Form submissions are processed and stored by our website provider, Netlify, and can be accessed by the people authorized to manage our site. Netlify also processes submissions for spam prevention. Sending a message is not an agreement to receive advisory services.

When you browse

Netlify hosts this website and may process technical request information, such as your IP address, browser information and the page requested, to deliver and protect the site. We do not add advertising trackers or analytics scripts to these pages.

For information about the provider, read Netlify’s privacy statement. Its form submission documentation explains how submissions are managed.

When you use the private library

Supabase provides authentication, access records and encrypted library storage. Google handles your Google sign-in. We use the verified email address and basic account information returned through sign-in to identify you and match your invitation. We do not receive your Google password.

Invitations are tied to a specific email and collection. We retain invitation, access and publication records, including issuance, acceptance, expiry and revocation, to administer and protect the library. On the server, invitation keys are stored as hashes. The key in an invitation link is removed from the page address before sign-in.

The library uses this browser tab’s session storage for sign-in and an unaccepted invitation. Private reading content is loaded into the page only after access is checked; it is not placed in the public website files or a persistent reading cache. Search runs within your permitted collection. We do not send your searches or library text to an advertising or AI service.

Library content is encrypted in transit. Reading sections and original files have an additional layer of encryption at rest, with decryption keys held by the server. Catalogue information and access records are access-controlled but are not covered by that additional layer. This is not end-to-end encryption: authorized readers, authorized project administrators and the service processing a permitted request can access readable content. Revocation prevents later authorized requests; it cannot recover a copy a reader has already saved. Original documents are downloadable only where that permission is provided.

See Supabase’s privacy policy and Google’s privacy policy for their handling of information.

Your message and your choices

Contact information and correspondence may be retained to respond, maintain an appropriate record of the inquiry, and meet applicable recordkeeping obligations. This website does not automatically delete a message after a fixed period.

You can request access, correction or deletion by emailing jack@roathcapitaladvisory.com. We will consider your request and any applicable recordkeeping requirements. You can also choose to contact us by telephone at (914) 330-2714.

Email and other websites

If you use an email link, your email provider handles the message you send. Links to the client workspace, public professional records and other websites take you to separate services with their own data handling.

The client relationship is separate

This notice covers this website and its private library. It does not replace any privacy notice, disclosure or agreement required for an advisory relationship. Those materials must be provided through the appropriate client process before an engagement begins.