Contact
Every route on this page is an email address, written out in full so you can copy it, use your own client and keep the thread. There is no form, because this site has no database to post one into.
Before anything below
You work at a company that uses Capstan.
Write to your own HR team, not to us.
Your employer runs the workspace and decides what happens in it, and we have no standing access to it. A request sent here has to go back to them anyway.
Anything without an address of its own: how the product works, press, partnerships, or a message you cannot place.
A person reads it and hands it to whoever owns the answer. Sending the same message to three addresses does not make it arrive faster.
For people already using Capstan. Say which workspace, and what you were doing when it went wrong.
Nobody here can open your workspace to look. That needs a consent you grant from inside the app, time-boxed and revocable, and every consented read is logged on both sides.
Invoices, tax invoices, and anything about what you were charged.
Nothing here is a quote, and no figure depends on who you are, because every price is already public. Getting onto a paid plan is still a request a person grants by hand rather than a checkout, and the pricing page says so in its own words.
Two business days
Vulnerability reports, and anything a security questionnaire asks that the security page does not already answer.
Acknowledged within two business days. We do not sue good-faith researchers, and we credit fixes if you want the credit. If a questionnaire asks something the security page misses, the answer goes onto the page as well as into the reply.
Privacy questions, data-subject and DPDP data-principal requests, and anything about the DPA or the sub-processor register.
If you are an employee of a Capstan customer, we send you back to your employer. They are the data fiduciary and we are the processor, so we execute what they instruct and a request routed straight here has to go back to them anyway.
Escalation only
The escalation route under India's Digital Personal Data Protection Act, once a privacy request has not been handled to your satisfaction.
Use the privacy address first, or there is nothing here to escalate. The Act asks for a named officer at a postal address, and both are published: this mailbox reaches the same person and is monitored.
Terms of service, legal notices, contract questions, and trademark or brand queries.
The documents are already up, each marking the clauses still with counsel instead of filling them with placeholder text, so the register of what is missing may answer you before we do. If it does not, say which document you need and what the review is for.
All six are positions this site is built on rather than things we have put off. There is nothing pending in this list.
No form.
This site has no database connectivity of any kind, so there is nothing here for a form to post into. A form also hides the address, which means you cannot follow up on a thread you own.
No chat widget.
We do not run one, and we would not run one written to sound like a person when it is not. That trick sits on our banned list, next to exit-intent popups and countdown timers.
No newsletter.
Writing to us enrols you in nothing. There is nothing to be added to, so there is nothing to unsubscribe from later.
No qualification first.
Nobody has to know your headcount, your budget or your timeline before you get an answer about how the product works.
No demo to book.
There is no call standing between you and the answer. The product, security and pricing pages are public and complete, including every price we charge.
No phone number.
A number nobody answers is worse than an address that is read. Every route above reaches someone, and none of them is a queue. The registered address is published, with the entity and its registration number, at clause 1.1.
Most of what arrives at hello@usecapstan.com is written down somewhere on this site, ungated, with nothing held back for a call.
Your own HR team, not us. Your employer runs the workspace and decides what happens in it, and we have no standing access to it, so anything you send here has to go back to them anyway. If you have left a company that used Capstan, you keep self-serve access to your own payslips, letters and tax documents on your personal email through Alumni Access, so a document request usually does not need a person at all.
Read the security page first. It is written to answer a standard questionnaire without a call, covering residency, encryption and key custody, access and consented support, tenant isolation, export and deletion, sub-processors, and the things we do not hold. If your questionnaire asks something that page does not answer, write to the security address. We answer you, and then the answer goes onto the page so the next reviewer does not have to ask the same thing.
Not on this site. A careers page publishes when there are real roles to put on it, and the hiring address publishes with the page. Collecting applications against a hiring process that does not exist yet is not a kindness to the people who send them.
Nothing on this site is held behind a call, including the way in.
