Privacy Policy
Effective date: October 7, 2026
This Privacy Policy explains how Turnstone Innovations, LLC ("Turnstone," "we," "us," or "our") collects, uses, and protects information when you use the Turnstone Deal Screener web app, iOS app, and API (the "Service") and our website. The app asks you to accept this policy and our Terms of Service when you first sign in and again whenever they change.
1. Information We Collect
Account information. Your name and email address, provided through our sign-in provider, Auth0. If you sign in with Google, we receive your Google profile name and email address. We never see or store your password.
Deal content you provide. Files you upload (PDFs, spreadsheets, Word documents, images), deal details and notes you type or paste, and everything you create in the app: deal edits, notes, checklists, chat messages, financial model inputs, and your investment thesis.
Broker and email information. Broker contacts you add (name, email, phone, company). When email ingestion is available, emails and attachments you forward to your Turnstone address.
Usage data. Which features you use, how many screens you run, and an activity history (for example "deal screened" or "stage changed"), which records what happened, not the content.
Billing information. Payments are handled by Stripe. We store your Stripe customer ID and subscription status, never your card number.
Technical data. Our server logs record your IP address, the page or API path requested (with share-link tokens and sign-in codes removed), the response status, and timing. Error reports are described in Section 3.
2. How We Use Your Information
- Provide the Service, including running your screens and researching each deal's industry
- Manage your account and subscription, and bill per-screen usage for Pro
- Send service and billing communications: sign-in emails (from Auth0), receipts (from Stripe), and notices of material changes to our terms
- Respond to support requests
- Keep the Service secure: detect abuse and fraud, enforce the free plan's screen limit, and investigate errors
- Improve the Service
We do not use your documents or deal data for advertising, and we do not send marketing email from the app.
3. Service Providers
We use the following providers to operate the Service. Each receives only what it needs for its purpose:
| Provider | Purpose | Data |
|---|---|---|
| Anthropic (Claude API) | AI analysis, deal chat, drafting, and industry research | Document contents, deal details and notes, chat messages, and web search queries built from the target company's name, industry, and location |
| Supabase | Database and file storage (US West, Oregon) | All account and deal data, including your uploaded files |
| Auth0 (Okta) | Sign-in and identity | Name, email address, sign-in events |
| Stripe | Payments and subscriptions | Name, email address, payment details, monthly screen counts |
| Railway | Backend application hosting | Data in transit; server logs including IP address |
| Vercel | Website and web app hosting | Request logs including IP address (no account data is stored) |
| Sentry | Error monitoring | Technical error details and your account ID for server errors; for web app errors, a recording of the screen around the error with all text and inputs masked and images blocked |
| Google Fonts | Web fonts on our website and web app | Your IP address and browser details when a page loads its fonts |
| Mailgun | Email ingestion (coming soon) | Emails and attachments you forward to your Turnstone address |
| Cloudflare | DNS | None beyond DNS lookups (our traffic does not pass through Cloudflare) |
| Substack | Our newsletter, if you subscribe | Handled under Substack's own privacy policy |
4. AI Processing
This section matters most if you upload confidential documents.
When you screen a deal, chat about it, or ask the app to draft a broker email, data request list, or investor report, the relevant documents and deal details are sent to Anthropic's Claude API. Under Anthropic's commercial terms:
- No model training. Anthropic does not use inputs or outputs from its API to train its models.
- Limited retention. Anthropic deletes API inputs and outputs within 30 days. If its automated trust and safety systems flag content as violating its Usage Policy, Anthropic may keep it for up to 2 years.
- Web research. To research a deal's industry, the Service asks Anthropic's web search tool to run searches built from the target company's name, industry, and location. These search queries leave Turnstone and Anthropic. If your NDA or other obligations do not allow this, do not screen that deal with Turnstone.
See Anthropic's privacy policy and data retention practices for details.
Turnstone staff do not read your documents in the normal course of running the Service. We access account data only to provide support you ask for, to investigate errors or abuse, or when required by law.
5. Data Storage and Security
Your data is stored by Supabase in the US West (Oregon) region. All traffic is encrypted in transit (TLS) and stored data is encrypted at rest. Uploaded files are kept in private storage that is only reachable through the app. Each request made on your behalf runs as a restricted database role that PostgreSQL row-level security limits to your own data. Passwords for shared deal links are stored only as bcrypt hashes. See our security practices for more detail.
6. Data Retention
- Account and deal data: kept while your account is open.
- Uploaded files: the original files are kept in private storage with your deals, so you can download and re-analyze them, until you delete your account.
- Deleted deals and documents: hidden from the app but kept until you delete your account, so deleted deals can be restored. To remove everything permanently, delete your account.
- Screening queue: files and notes submitted for a screen are held briefly in our job queue and removed about a day after the screen finishes.
- Server logs and error reports: kept by our hosting and monitoring providers for up to 30 days.
- Backups: daily database backups are kept for up to 7 days, so deleted data can remain in a backup for up to 7 days.
- Cancelling Pro does not delete any data; your account returns to the free plan.
When you delete your account (Settings → Delete Account), we cancel any subscription and permanently delete your account, deals, documents, uploaded files, notes, chat history, and API keys, and remove your queued screens and sign-in identity. We keep two things: a one-way hash of your sign-in ID together with the number of free screens you used, so that deleting and re-creating an account cannot reset the free plan; and the billing records Stripe must retain by law. Anthropic's own retention is described in Section 4.
7. Data Sharing
We do not sell, rent, or trade your personal information or your documents, and we do not share them for advertising. We share data only with the providers in Section 3, only as needed to run the Service. We may disclose information if required by law or legal process, or if needed to protect our rights or someone's safety.
8. Shared Deal Links
If you create a shareable link to a deal (a Pro feature), anyone with the link, and the password if you set one, can view that deal's analysis without an account. We record only how many times each link is viewed. You control who receives your links.
9. Cookies and Browser Storage
We do not use advertising or analytics cookies, so we do not show a cookie banner. What the Service does store:
- Sign-in (web app): your browser's local storage keeps the tokens that keep you signed in, along with your name and email from your sign-in profile. A small Auth0 cookie notes that you are signed in, and Auth0 sets its own session cookies on its sign-in page.
- Session storage (web app): temporary sign-in state, the ID of a screen in progress (so a page refresh doesn't lose it), and our error monitor's session marker. Session storage clears when you close the tab.
- Our website: no cookies. The Insights page caches newsletter post titles in session storage.
Signing out clears your sign-in tokens from the browser.
10. Your Rights
- Access and correction: email us to get a copy of your personal data or to correct it.
- Deletion: delete your account yourself in Settings → Delete Account, or email us and we will do it.
- Portability: export your pipeline as a CSV file from Settings on any plan. Pro users can also download deal memos as PDF files.
- Withdrawing consent: you can stop using the Service at any time, and cancel Pro in Settings → Manage Subscription.
We respond to requests within 30 days.
11. California Privacy Rights (CCPA)
If you are a California resident, you have the right to know what personal information we collect and how we use it (Sections 1 and 2), to request deletion (Section 10), to correct inaccurate information, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law.
12. International Users
The Service is hosted in the United States, and your data is processed there. If you are in the EEA or the UK, we process your data to perform our contract with you (providing the Service), for our legitimate interests (security, preventing abuse of the free plan, and improving the Service), and with your consent where the law requires it. You have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to complain to your local data protection authority.
13. Children's Privacy
The Service is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a minor has given us information, contact us and we will delete it.
14. Changes to This Policy
We will post updates on this page with a new effective date. For material changes, we will email the address on your account at least 14 days before they take effect, and the app will ask you to accept the updated policy.
15. Contact
Turnstone Innovations, LLC. For privacy questions or requests, contact support@turnstone.app.