Privacy Policy

Traverse (“Traverse”, “we”, “us”) respects your privacy. This Privacy Policy explains what we collect when you visittraverseintel.comor use our services (the “Service”), how we use it, and the choices available to you. By using the Service or submitting your information to us, you accept the practices described here. If you have questions, emailprivacy@traverseintel.com.

Traverse runs Open public surfaces and Paid review subscriptions. Open surfaces, including Actions, Tariff Check, Analysis, Daily Signals, hearings, and decisions, can be read without an account. You can create an account with email and password, Google sign-in, or Apple sign-in. Paid review is purchased through checkout when it is available to you.

Depending on how you use the Service, we may collect account information, account and billing records, and information you send through our signup and newsletter forms, the in-app feedback form, and the email links on our contact page. We do not store raw IP addresses, device fingerprints, advertising identifiers, or precise location data for marketing signups. The one narrow, hashed exception is newsletter open and click measurement, described in section 11. You can request deletion of your account, newsletter signup, or Paid access record at any time by emailingprivacy@traverseintel.com, and we will process verified requests within a reasonable period.

• Account information. Your name (if you provide one), email address, and a hashed password, or an OAuth identifier if you sign in with Google or Apple. Password authentication is handled by Supabase Auth.
• Preference and subscription data. Newsletter choices, plan and tier status, and other settings you configure.
• Contact and signup data. Information you submit through signup or newsletter forms, the in-app feedback form, or the email links on the contact page, plus timestamps and internal attribution tags that record which surface prompted the submission.
• Usage data. Pages visited, features used, and timestamps, measured in aggregate. We use this to operate the Service, debug issues, and improve the product.
• Device and log data. Browser type, operating system, approximate region inferred from IP, referring URLs, and similar technical metadata logged automatically by our servers and hosting providers for security, debugging, and abuse prevention. Raw IP addresses appear transiently in host logs and rate-limiting and are retained only as long as needed to investigate abuse, security incidents, or legal violations.
• Content you submit. Feedback you send through our in-app feedback form, and messages you send us through the email links on ourcontact page. Feedback-form messages are relayed to us by email through our email provider and are not stored in a database table. The contact links open your own email client and reach us directly.

We use the information we collect to:

• create and authenticate accounts;
• provide, maintain, secure, and improve the Service;
• manage Paid access, plan status, and account settings;
• send transactional emails, including confirmation, password reset, account, and security messages;
• send newsletters if you have opted in, and measure their delivery, opens, and clicks (see section 11);
• analyze aggregate usage to prioritize features, fix bugs, and enforce our terms;
• detect, prevent, and respond to fraud, abuse, and security incidents; and
• comply with legal obligations, enforce our rights, and protect users, Traverse, and third parties.

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of a contract (to provide the Service you requested); our legitimate interests (to secure, measure, and improve the Service, balanced against your rights); your consent (for marketing emails and optional cookies); and compliance with legal obligations.

We use vetted third parties to operate the Service. These providers process data on our behalf under confidentiality and data-protection obligations:

• Supabase: authentication, database, and realtime infrastructure.
• Vercel: web hosting and edge delivery, plus aggregate Web Analytics and Speed Insights.
• Anthropic: large-language-model APIs used to extract relations and summarize policy events. We send policy-source text to these APIs, not personal account data.
• Stripe: processes Paid subscriptions, billing portal sessions, and payment-method updates. Stripe collects card details directly. Traverse does not store full payment card numbers.
• Resend: delivers our transactional and newsletter emails, and relays in-app feedback messages to us.
• Sentry: application error monitoring used to keep the Service stable (see section 11).

We do not sell your personal information. We share information only with the service providers described above, with your consent, when required by law or valid legal process, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you, and any successor will be bound by commitments at least as protective as this Policy). We may also disclose information where we reasonably believe it is necessary to enforce our terms, protect the Service, or prevent fraud, abuse, security incidents, or other unlawful activity.

Paid access and signup records. We keep Paid access, signup, and attribution records until you ask us to remove them or until they are no longer needed for account administration, product support, or legal compliance. You can request deletion at any time by emailingprivacy@traverseintel.com.

Newsletter signups and events. We keep your newsletter subscription for as long as you remain subscribed. Unsubscribing removes your email from the list, and you can also request deletion of the stored signup record. Newsletter open and click events (section 11) are retained for engagement analytics and may be de-identified over time.

Accounts. We keep account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, accounting, or fraud-prevention obligations. Aggregate, de-identified, and system-log data may be retained for security, analytics, and legal-compliance purposes as permitted by law. Backup copies and archived records may persist temporarily until overwritten in the ordinary course of business.

We apply administrative, technical, and physical safeguards designed to protect your information, including encrypted transport (TLS), encrypted storage at rest through our hosting providers, role-based access controls, and least-privilege service credentials. No system is perfectly secure, however, and we cannot guarantee that unauthorized access, disclosure, alteration, or destruction will never occur.

Depending on where you live, you may have rights to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing or withdraw consent. California residents have additional rights under the CCPA and CPRA, including the right to know, delete, and opt out of the “sale” or “sharing” of personal information (we do neither). To exercise any of these rights, emailprivacy@traverseintel.com. We will verify your identity before acting and may decline a request where an applicable legal exception permits or requires us to retain the information. We may request additional information reasonably necessary to verify your identity and process your request securely.

Cookies. The Service uses first-party cookies and similar storage that are necessary for the site to function, for example preserving your theme preference or keeping you signed in. We do not use advertising cookies. If we adopt optional advertising or cross-site tracking cookies in the future, we will update this Policy and, where required, request your consent first.

Analytics. We use Vercel Web Analytics and Speed Insights to understand aggregate traffic, referrers, route usage, and real-user performance. This measurement is aggregate and is not used to build advertising profiles.

Newsletter email measurement. Our daily newsletter includes a tracking pixel and wrapped links so we can measure opens and clicks and flag automated opens (for example Apple Mail Privacy Protection or link prefetching). For these events we store the event type, the link clicked, the requesting browser user agent, and a hashed (not raw) IP address, associated with your newsletter signup. Unsubscribing stops future newsletter tracking. Blocking remote images and not clicking links can reduce measurement, but some mail clients and link scanners fetch pixels or links automatically.

Error monitoring. We use Sentry to capture application errors so we can keep the Service stable. Server-side error monitoring runs where Sentry is configured, and in-browser error monitoring initializes only behind a client configuration flag, with session replay disabled. Sentry processes diagnostic data such as error messages, stack traces, and limited request context, not advertising data.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

Traverse is based in the United States, and your data may be processed in the US or other countries where our service providers operate. Where required, we rely on recognized transfer mechanisms such as the EU Standard Contractual Clauses to protect personal data transferred across borders.

We may update this Policy from time to time. Material changes will be communicated through the Service or by email. The “Last updated” date above indicates when this Policy was last revised.

Questions or requests about privacy? Reach us atprivacy@traverseintel.comor through ourcontact page.