Privacy Policy

Last updated: 8 August 2026

This policy explains what personal data The Microcap Minute and The Microcap Minute Global collect, why, and what you can do about it. The publisher is Ayush Agrawal, who is the data controller for the purposes of this policy.

Contact: themicrocapinvestor@gmail.com

What we collect

Your email address, when you subscribe. This is the only piece of information we ask for, and it is the only one we need.

A name, if you choose to give one. It is optional and used only to address you.

Billing details, if you take a paid subscription. These are collected and held by Substack and its payment processor Stripe. We never see or store your card number, and we have no access to it.

Delivery and engagement data, generated automatically by Substack: whether an issue was delivered, opened, and which links were clicked. We use this in aggregate to understand whether issues are arriving and being read.

Anything you put in an email to us, for as long as we need it to answer you.

We do not ask for, and do not want, your date of birth, your address, your income, your portfolio, or any other financial information. Please do not send it.

What we do not do

• We do not sell your data. Not to anyone, under any circumstance.

• We do not rent, trade, or share subscriber lists.

• We do not build advertising profiles or run behavioural advertising.

• We do not attempt to identify you across other websites.

Why we hold it

To send you the newsletter you asked for, to take payment if you subscribe to a paid tier, to answer your emails, and to keep records we are required to keep. That is all.

Who else is involved

Running a newsletter means using other companies, and they process data on our behalf:

• Substack Inc., which hosts the publication, stores the subscriber list, sends every issue, and records delivery and open data. See Substack’s own Privacy Policy.

• Stripe, Inc., which processes payments for paid subscriptions and holds the card and billing details we never see. See Stripe’s Privacy Policy.

• Google, which provides the mailbox behind our support address, for any message you send us directly.

Each of these has its own privacy policy governing what it does with data. We choose providers that do not sell subscriber data.

Links to other websites

Issues contain links to third-party sites, including StockAnalysis.com, StockCharts.com, and companies’ own pages. Some of these are affiliate links, which means we may earn a commission if you subscribe to a service after clicking one. This is disclosed in every issue.

Once you click a link you are on someone else’s website, governed by their privacy policy, not this one. They may set their own cookies and collect their own data. We have no control over and no visibility into that.

Cookies

The newsletter itself is delivered by email and sets no cookies on your device. Substack’s website sets its own cookies when you visit it, governed by Substack’s cookie and privacy policy, not by this one. Stripe sets cookies during checkout for fraud prevention.

How long we keep things

Your email address for as long as you are subscribed, and for a short period afterwards in case you resubscribe or a billing question arises. Support correspondence for as long as it is useful to have a record. Billing records for as long as tax and accounting law requires.

If you unsubscribe and want your data deleted rather than simply deactivated, ask us and we will delete it.

Your rights

Whatever your country, you may ask us to:

• Tell you what we hold about you

• Correct anything wrong

• Delete your data

• Send you a copy in a portable form

• Stop processing it, which in practice means unsubscribing

Every issue carries a one-click unsubscribe link, which works immediately and needs no explanation. For anything else, email us. We will respond within thirty days and will not charge you for it.

Readers in the UK and EU have these rights under the GDPR, including the right to complain to a supervisory authority. Readers in India have comparable rights under the Digital Personal Data Protection Act, 2023. We apply the same standard to everyone regardless of where they live, because maintaining two standards would be worse than applying the higher one.

Children

The newsletter is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has subscribed, tell us and we will remove the record.

Security

We keep the subscriber list inside Substack rather than in spreadsheets or local files, and we use two-factor authentication on the accounts that can reach it. Card details are held by Stripe, a PCI-DSS Level 1 certified processor, and never touch our systems. No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that affects you, we will tell you.

Where your data goes

Substack Inc. and Stripe, Inc. are United States companies, so your email address and, for paid subscribers, your billing details are stored and processed in the United States, whatever country you read from.

Changes

If this policy changes materially, we will say so in an issue rather than quietly updating this page. The date at the top always reflects the current version.

Questions

Email themicrocapinvestor@gmail.com. A real person reads it.