This policy explains what thedata.broker collects when you visit this site or use our intake, why we collect it, who sees it, and what you can do about it. We broker companies' own operating records. We don't buy or sell consumer profiles.
What we collect
We collect the following, mostly from you directly:
- Account details. Your name and work email, which we use to send sign-in codes and to contact you about your intake.
- Teammate invitations. The email addresses of teammates you invite, so we can send them an invitation.
- Intake answers. What you tell us about your company and its records: the systems you run, how much is in them, how far back they go, your team, your preferences about rights and licensing, and whether the records include client-confidential, income tax return or regulated information, customer data you process for others, or third-party code (which kinds are there, not the information itself).
- Phone number and consent. If you give us a phone number and agree to calls and texts, we keep the number and a record of that consent: the date and time, which version of the consent wording you saw, and the IP address and browser details present when you agreed.
- Referrals. If you join our referral program, your name and email. If you refer a company, its name and the contact details you give us for the person we should talk to.
- Buyer inquiries. If you ask about buying, your name, company, role, email and what you're looking for.
- Messages. Anything you send us by email or through a form.
- Referral and campaign attribution. If you arrive through a referral link or a link with campaign tags (UTM parameters), we keep the referral code and tags in cookies for up to 90 days and attach them to your account if you start an intake.
- Technical logs. IP address, browser and device type, pages requested and timestamps, recorded by our hosting and application logs.
- Analytics. We use Vercel Web Analytics to count page views. It records the page, the referring site, an approximate location, and browser and device type.
The intake asks for counts, dates and descriptions. It does not ask you to upload your raw records, and we don't collect consumer profiles.
Why we use it
We use this information to:
- run your intake and prepare the anonymized summary that qualified buyers see;
- send sign-in codes, reminders and messages about your intake or deal;
- keep the site secure and prevent abuse;
- understand how the site is used and improve it;
- credit a referral to the person who referred you;
- meet legal obligations and keep records of consent.
Where the law asks us to name a legal basis, we rely on performing a contract or taking steps you've asked for before one (running your intake and engagement), your consent (calls and texts), our legitimate interests (security, analytics, improving the service and crediting referrals), and legal obligations.
Who we share it with
- Our reviewers. The people at thedata.broker who review intakes and prepare deals.
- The person who referred you. If you start an intake through someone's referral link, or someone introduces your company to us, that referrer can follow the referral in their account. They see your company's name, where your intake or deal stands (started, submitted or closed) and the payout they earn if your deal closes. They don't see your intake answers, your offers or your license.
- Buyers, in two stages. Until you sign a license, qualified buyers see only an anonymized summary, such as your sector, a broad region, bands for years of history, revenue and headcount, and rounded volumes. They don't see your name, website, people or addresses. If you sign with a buyer, your identity goes to that buyer as the license requires.
- Service providers. Companies that host this site, store our database, deliver our email, check our forms for bots and measure site usage, acting on our instructions.
- Legal and safety. When the law requires it, or to protect the rights, property or safety of you, us or others.
- A business change. If thedata.broker is part of a merger, sale or similar transaction, information may transfer as part of it.
We don't sell the personal information we collect through this site or our intake, and we don't run advertising trackers on this site.
How long we keep it
- Unfinished intakes. Deleted after 12 months, and we email you a warning first. Signing in and opening your intake after that warning keeps it.
- Submitted intakes and engagements. Kept while we work with you, and afterward for as long as we need them for legal, tax and accounting purposes or to honor a signed license.
- Consent records. Kept for as long as we need them to show when and how you agreed.
- Technical logs. Kept for the limited period needed for security and troubleshooting.
- Cookies. Expire as listed under Cookies below.
You can ask us to delete your answers at any time. See Your choices and rights.
Security
Everything you send us travels over an encrypted connection. Access to intake records is limited to you, the teammates you invite and our reviewers, and each account can read only its own organization's records. When our reviewers change a deal's stage or export data, the action is logged with who did it and when.
No system is perfectly secure. If you think something is wrong with your account, write to us right away.
Your choices and rights
- Access and correction. Ask for a copy of what we hold about you, or for corrections.
- Deletion. Ask us to delete your answers and account information. We'll do so unless we need to keep something for a legal reason or to honor a signed license.
- Calls and texts. You can withdraw your consent at any time by unticking the box in the account step of your intake, or by emailing us.
- Cookies. You can block or clear cookies in your browser. Sign-in won't work without the session cookie.
- State privacy rights. Depending on where you live, you may have the right to know what personal information we collect and how we use it, to correct it, to delete it, to get a copy of it, to opt out of its sale or sharing, and not to be treated differently for using those rights. We don't sell the personal information we collect through this site or our intake.
To use any of these rights, email us at the address under Contact. We may need to confirm it's you before we act, and we'll respond within the time the law requires.
Cookies
We use a small number of cookies, and none of them is used for advertising. The theme choice is also saved in your browser's local storage.
Site analytics come from Vercel Web Analytics, which counts page views. Vercel says it doesn't use third-party cookies and that it identifies a visit by a hash of the request, which is discarded after 24 hours (Vercel's documentation (opens in a new tab)). The forms on this site use Cloudflare Turnstile to check that a person, not a bot, is sending them.
- sb-*-auth-token
- Your sign-in session. Keeps you signed in to your account.
- Until you sign out or it expires
- tdb-theme
- Remembers whether you chose the light or dark theme.
- 1 year
- tdb_ref
- Holds the first referral code you arrive with, so a referrer can be credited.
- 90 days
- tdb_ref_more
- Holds up to two later referral codes, used only if the first one doesn't belong to a referrer.
- 90 days
- tdb_utm
- Holds the first campaign tags (UTM parameters) you arrive with.
- 90 days
Children
Our services are for businesses and aren't directed to anyone under 18. We don't knowingly collect personal information from children. If you think a child has given us information, write to us and we'll delete it.
Changes to this policy
We'll post changes on this page and update the date at the top. If a change is significant, we'll let account holders know by email.
Contact
Questions about this policy, or want to use one of your rights? Write to us.