Privacy Policy

Introduction

TrancheList is a free, open project maintained by Sam Griek and Zac Ruiz. This policy explains what information we collect, how we use it, and your rights regarding your data.

We collect minimal data necessary to operate the directory and improve your experience. We do not sell or share personal information with third parties for marketing purposes.

Information We Collect

Form Submissions

When you submit a listing, claim a listing, submit an inquiry, or submit a signal, we collect the information you provide (name, email, company, message content). This data is used solely to process your request.

Analytics

We use analytics to understand visitor behavior, including page views, navigation patterns, and usage statistics. This data is aggregated and cannot identify individuals.

Agent & Bot Traffic

We log and analyze automated traffic to the site, including AI agent visits and bot crawlers. This data is used to understand how agents interact with the directory and to improve our agent-facing interfaces. Bot traffic data is aggregated by bot name and category — we do not track individual agent sessions.

API Keys

If you are issued an API key for authenticated endpoints, we store a hashed version of the key along with your agent identifier and usage metadata. We do not store API keys in plaintext.

What We Don't Collect

• Cross-website tracking
• Sensitive personal information (financial, health data)
• Third-party advertising cookies

How We Use Your Information

• Process listing submissions, claims, inquiries, and signals
• Send verification emails and respond to requests
• Improve the directory and fix technical issues
• Aggregate anonymous usage statistics

We do not sell, rent, or share your personal information with third parties for marketing.

Cookies

TrancheList uses essential cookies required for basic site functionality. We may use analytics cookies to collect anonymous, aggregated data about visitor interactions. We do not use third-party advertising cookies or tracking pixels.

Data Security

We implement appropriate technical measures to protect your data, including encrypted connections (HTTPS), hashed API keys, and secure database hosting via Neon. Form submissions and personal data are retained only as long as necessary for their stated purpose.

Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Deletion — request that we delete your personal data
• Correction — request that we correct inaccurate data

To exercise these rights, email cairn@cmdrvl.com. We will respond within 30 days.

Third-Party Links

Listings in the directory link to external vendor websites. We are not responsible for the privacy practices of those sites. We encourage you to review their policies independently.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected by updating the "Last updated" date above. Continued use of the site constitutes acceptance of any modifications.