Legal
Privacy Policy
Last Updated: May 2, 2025
TrancheLab, Inc. (“TrancheLab”, “we”, “us”, “our”) operates tranchelab.com and the TrancheLab platform (the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding it.
Who We Are
TrancheLab is a B2B platform that extracts structured capital structure data from Chapter 11 bankruptcy disclosure statements and related filings. Our users are restructuring professionals at financial advisory firms.
Information We Collect
Account Information. When you sign in via Google OAuth, we receive your name, email address, and Google profile ID. We do not collect or store passwords.
Usage Data. We collect information about how you use the Service, including pages visited, features used, extraction history, and timestamps of activity.
Uploaded Documents. You may upload PDF files to the Service for extraction. These are public court filings sourced from PACER. We process these documents solely to provide the extraction service. Uploaded documents may be transmitted to third-party AI providers for processing (see “AI Processing” below).
Corrections and Feedback. If you submit corrections to extracted data, we store those corrections to improve the Service. Corrections are retained indefinitely and may be used to fine-tune extraction models.
Log Data. We automatically collect server logs including IP address, browser type, request timestamps, and error logs.
Cookies. We use cookies to maintain your authenticated session after login. These are strictly necessary cookies — we do not use advertising or tracking cookies. You can disable cookies in your browser, but doing so will prevent you from staying logged in to the Service.
API Keys. If you are issued an API key to access the Service programmatically, that key is associated with your account and treated as personal data. Do not share your API key with others.
AI Processing
To perform extraction, uploaded documents are sent to third-party large language model (LLM) providers. The following providers may process document content:
- Groq, Inc.
- Google LLC (Gemini)
- OpenAI, LLC
- Anthropic, PBC
- DeepSeek
Each provider processes document content solely to return extraction results and is subject to their own data processing terms and privacy policies. We do not control how these providers store or use data on their end. If your firm has specific data residency or confidentiality requirements, please contact us before uploading documents.
All documents uploaded to TrancheLab are public court filings available on PACER. We do not upload confidential or non-public documents on your behalf.
How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service
- Authenticate your identity and manage your account
- Process uploaded documents and return structured extraction results
- Store and learn from corrections you submit
- Send you service-related communications (account approval, updates, extraction results)
- Monitor for errors, abuse, and unauthorized access
- Comply with legal obligations
We do not use your information for advertising. We do not sell your personal data to third parties.
How We Share Your Information
We do not sell, rent, or trade your personal information. We may share it only in the following circumstances:
AI Providers. As described above, uploaded documents are transmitted to LLM providers to perform extraction.
Infrastructure Providers. We use the following third-party providers to operate the Service:
| Provider | Purpose |
|---|---|
| Vercel | Frontend hosting |
| Render | Backend hosting and compute |
| Google LLC | Authentication (OAuth) |
| Cloudflare | DNS, email routing |
| Groq, Inc. | LLM inference |
| Google LLC (Gemini) | LLM inference |
| OpenAI, LLC | LLM inference |
| Anthropic, PBC | LLM inference |
| DeepSeek | LLM inference |
These providers access data only as necessary to provide their services.
Legal Requirements. We may disclose information if required by law, court order, or governmental authority.
Business Transfers. If TrancheLab is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
Data Storage and Location
The Service is hosted and operated on servers located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.
Data Retention
We retain your account information for as long as your account is active. If you request account deletion, we will delete your personal information within 30 days, except where retention is required by law.
Uploaded documents are retained to provide the Service and may be used in anonymized, aggregated form to improve extraction quality. Corrections you submit are retained indefinitely to train and improve extraction models.
Session cookies expire when you close your browser or log out.
Security
We use industry-standard technical and organizational measures to protect your information, including HTTPS encryption in transit, access controls on backend systems, and environment-based secrets management. However, no system is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at privacy@tranchelab.com.
Your Rights
You may request access to, correction of, or deletion of your personal information by contacting us at privacy@tranchelab.com. We will respond within 30 days.
EEA and UK Residents. If you are a resident of the European Economic Area or the United Kingdom, you have additional rights under the GDPR including the right to data portability, the right to restrict processing, the right to object to processing, and the right to lodge a complaint with your local supervisory authority.
California Residents. If you are a California resident, you have rights under the CCPA including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.
Children
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us at privacy@tranchelab.com and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last Updated” date at the top of this page and, where appropriate, by email. Continued use of the Service after changes constitutes acceptance of the updated policy.
Contact
Questions or requests regarding this Privacy Policy should be directed to: