Privacy Policy

1. Information We Collect

Account information: When you create an account, we collect your email address, display name, first name, last name, role/occupation, and optionally your company or organization name.

Investigation data: When you use TrenchLink to investigate identifiers (email addresses, IP addresses, phone numbers, usernames, or domains), your queries are sent to third-party data sources on your behalf. We do not permanently store the raw results of your investigations. Your investigation boards, nodes, edges, notes, and case logs are stored in your account and are only accessible to you.

Usage data: We collect basic usage information such as the number of lookups performed per month for the purpose of enforcing rate limits on free tier accounts.

Authentication data: We use Supabase for authentication. Login sessions are managed via secure cookies. If you sign in with Google, we receive your name and email address from Google.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the TrenchLink platform
• Enforce account limits and subscription tiers
• Send transactional emails (account verification, password reset) via Resend
• Respond to support requests sent to support@trenchlink.io
• Improve the platform based on aggregate, non-identifying usage patterns

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes. Ever.

3. Third-Party Data Sources

When you run an investigation, TrenchLink queries third-party APIs on your behalf including but not limited to: HaveIBeenPwned, AbuseIPDB, VirusTotal, IPQualityScore, URLScan.io, IPInfo.io, and others listed on our Sources page. Each of these services has its own privacy policy governing how they handle query data. By using TrenchLink, you acknowledge that your query identifiers are transmitted to these services.

4. Data Retention

Account data is retained for as long as your account is active. Investigation boards and case logs are retained until you delete them or close your account. You may request deletion of your account and all associated data at any time by contacting admin@trenchlink.io.

5. Security

We implement industry-standard security measures including row-level security on all database tables, encrypted connections (HTTPS), and secure authentication. No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but take reasonable precautions to protect your data.

6. Cookies

TrenchLink uses essential cookies only — specifically authentication session cookies required for you to stay logged in. We do not use advertising cookies, tracking cookies, or third-party analytics cookies that follow you across websites.

7. Analytics

We may use privacy-respecting, cookieless analytics tools that collect only aggregate, non-identifying data (such as page visit counts). No personal information or identifiable usage patterns are collected through analytics.

8. Children's Privacy

TrenchLink is intended for professional use by adults. We do not knowingly collect information from anyone under the age of 18. If you believe a minor has created an account, contact us at admin@trenchlink.io.

9. Your Rights

You have the right to access, correct, or delete your personal information at any time. To exercise these rights, contact admin@trenchlink.io. We will respond within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of TrenchLink after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests: admin@trenchlink.io